Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
File: cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft (raw, json)
Hash identifier: +niSUUq7n5jsyHOL4VzX2R5vKH7qDZUOubEbJ98ZqBI=
Subject key identifier: C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
Authority key identifier: 72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C
Certificate issuer: /CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
Certificate serial: 0147
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
Manifest number: 0147
Signing time: Fri 31 Jan 2025 15:28:35 +0000
Manifest this update: Fri 31 Jan 2025 15:28:35 +0000
Manifest next update: Fri 31 Jan 2025 21:28:35 +0000
Files and hashes: 1: cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl (hash: onRPen7nhp5ubzMeTlh1NleKOcMtItF9o6nVBFgY/vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299A20BAC8B618CA8D84CF3FCDF6CC26C95FE2C
Validity
Not Before: Jan 31 15:28:35 2025 GMT
Not After : Nov 27 00:59:02 2025 GMT
Subject: CN=C93F2E5387A0222D27A24BD4D7ACB6009A499DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:78:69:0c:54:06:49:2c:cf:ed:c9:48:01:
3b:b7:d3:9b:4d:80:cb:34:32:c2:96:28:be:e7:b4:
c1:c4:85:d2:e0:cd:84:73:a2:b1:31:5e:38:59:85:
e8:98:ac:3c:17:10:8c:1e:5f:53:b7:4f:de:f5:29:
d6:e0:43:a8:03:32:54:a8:3f:83:66:fb:a5:49:04:
4a:2d:6a:75:26:44:7b:b7:69:60:f8:66:08:80:03:
3f:61:64:c0:fd:bd:ab:ef:e0:69:8f:26:28:f1:19:
a0:a9:2a:1b:14:d6:68:05:5c:73:8a:93:04:b9:4d:
a0:70:f7:54:a4:c8:9a:c6:94:52:1c:70:8d:b4:9a:
5f:b9:46:47:1a:e8:91:12:84:b0:ed:e2:2c:72:ba:
e4:ee:de:0a:2a:f8:26:51:ea:1d:9d:50:24:ca:f5:
95:17:5a:6b:6f:fa:47:04:04:5e:b0:a1:05:28:f5:
3c:27:e8:6b:e9:f8:16:24:08:4d:52:71:ce:04:b2:
cd:69:6f:b3:90:3b:dd:0a:54:ba:60:82:72:fa:42:
3f:65:87:18:7f:88:99:8a:10:a5:7a:f0:0c:47:dc:
d0:40:9f:68:b1:e2:34:eb:90:cb:bf:b3:79:f7:fc:
54:cf:b5:13:55:14:26:a7:6f:4c:de:4a:dc:31:6d:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:2E:53:87:A0:22:2D:27:A2:4B:D4:D7:AC:B6:00:9A:49:9D:BB
X509v3 Authority Key Identifier:
keyid:72:99:A2:0B:AC:8B:61:8C:A8:D8:4C:F3:FC:DF:6C:C2:6C:95:FE:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpmiC6yLYYyo2Ezz_N9swmyV_iw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/cpmiC6yLYYyo2Ezz_N9swmyV_iw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:60:f4:05:a3:c5:9f:e3:d2:12:c7:3b:66:a2:2d:8e:67:fb:
73:6d:d4:93:49:9f:d3:3a:31:06:72:c4:59:e9:36:5d:db:49:
d3:af:2e:04:2a:84:c7:31:92:96:b7:28:86:df:e3:d4:51:d1:
fc:94:1b:53:d0:33:47:dd:25:ff:cf:be:11:08:bf:9b:22:4a:
62:e8:f1:f4:c0:ab:89:5f:10:fc:23:a5:36:2b:ed:33:8a:2e:
fc:9e:f9:42:8d:10:3a:9f:73:79:48:73:a4:26:8a:c7:52:cc:
3b:8a:e5:63:70:c0:83:08:15:23:08:bf:21:9b:a1:4e:8c:a6:
52:4e:fc:89:97:d2:e6:23:eb:ad:8c:77:05:c3:07:bb:e0:04:
e0:95:7e:85:db:cf:88:66:f6:33:67:df:3b:91:1d:78:24:5a:
91:34:e6:d5:64:1c:22:f4:75:f0:41:40:27:73:58:ae:d0:42:
af:62:42:f9:1d:e8:12:fa:df:b3:ae:65:fa:b6:68:43:30:7a:
92:3a:8e:ca:75:aa:56:5b:fd:01:ea:d1:ef:44:c2:ee:6e:56:
0c:e8:a3:0e:a1:82:ff:e2:ee:ab:d6:03:0e:49:80:f0:d8:39:
90:d3:e1:01:b3:26:f6:fe:e4:8d:4f:a9:8a:af:2f:80:f9:cf:
09:f1:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:02 2025 by rpki-client