Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
File: sdvJmjz4VWFonrkSeUwG3qXoTf0.mft (raw, json)
Hash identifier: 5AHLfIH4at8BiYG60CBarCT7uPssvx94loV+JbbCjE0=
Subject key identifier: 0A:7B:A4:DF:9B:81:DE:CB:6C:4E:1C:35:D3:00:CA:0B:73:8F:51:2E
Authority key identifier: B1:DB:C9:9A:3C:F8:55:61:68:9E:B9:12:79:4C:06:DE:A5:E8:4D:FD
Certificate issuer: /CN=B1DBC99A3CF85561689EB912794C06DEA5E84DFD
Certificate serial: 0125
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdvJmjz4VWFonrkSeUwG3qXoTf0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
Manifest number: 0125
Signing time: Fri 31 Jan 2025 15:28:37 +0000
Manifest this update: Fri 31 Jan 2025 15:28:37 +0000
Manifest next update: Fri 31 Jan 2025 21:28:37 +0000
Files and hashes: 1: sdvJmjz4VWFonrkSeUwG3qXoTf0.crl (hash: 58AN6DcpkTCleK0urHLZrelvthOUyWmb7SmR0aZfC/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1DBC99A3CF85561689EB912794C06DEA5E84DFD
Validity
Not Before: Jan 31 15:28:37 2025 GMT
Not After : Dec 3 07:38:23 2025 GMT
Subject: CN=0A7BA4DF9B81DECB6C4E1C35D300CA0B738F512E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:33:87:8e:10:b3:87:bd:8c:c1:16:a9:6c:
9e:b6:c5:21:2c:c6:8f:17:65:c6:0f:45:3e:4d:4b:
6c:d5:3c:51:28:4b:ee:03:e3:9f:8e:f2:b8:19:d1:
54:a6:da:43:19:d0:e7:4f:9f:13:88:f4:5d:c2:8f:
b7:22:e8:16:3d:77:42:88:14:29:6f:25:0e:a6:5e:
68:37:10:0e:66:da:13:5e:1e:5a:6c:b2:d7:ce:f7:
3a:2d:5a:df:7f:18:44:84:9e:59:f6:3f:9a:4e:b1:
52:8f:f1:83:3f:fd:1e:29:50:4f:05:d4:26:d9:63:
4c:3a:7e:82:a0:56:f7:4b:de:31:5b:90:08:c2:6e:
80:83:13:9d:40:ff:57:af:7e:64:93:cb:e8:36:fe:
ec:48:8e:7f:3e:34:ff:33:d2:79:e9:42:0a:fe:58:
5d:da:72:6f:59:e2:15:86:78:59:c1:38:52:1f:13:
a1:d1:b4:78:ab:62:57:31:64:b7:e2:87:f4:3f:41:
56:31:0b:3f:14:3e:5a:59:a8:5c:9c:a6:b1:c9:5f:
ac:57:d0:b5:a7:36:2a:07:d3:8d:2d:0c:9b:de:7c:
03:18:c6:9e:62:18:1a:8d:cf:d2:3f:ca:2f:af:b4:
4a:7d:45:31:8b:b0:ad:22:a1:71:5d:e3:64:59:ac:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:A4:DF:9B:81:DE:CB:6C:4E:1C:35:D3:00:CA:0B:73:8F:51:2E
X509v3 Authority Key Identifier:
keyid:B1:DB:C9:9A:3C:F8:55:61:68:9E:B9:12:79:4C:06:DE:A5:E8:4D:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdvJmjz4VWFonrkSeUwG3qXoTf0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9e:54:f4:75:51:56:a1:bd:38:6b:18:c0:83:f2:dd:3c:14:
dc:c7:d7:5c:bf:6f:dd:89:08:fa:6e:24:d9:7a:eb:5e:38:be:
f3:26:fd:ac:ed:83:e4:b2:cd:66:9f:6f:99:22:0a:90:d8:60:
39:a8:81:71:1b:32:ac:69:22:4f:46:78:7f:8c:a0:f9:7a:b7:
56:f7:d6:17:5f:32:7b:20:57:46:48:9c:71:8b:2f:ba:9c:7b:
5b:76:05:89:12:75:91:da:79:f0:78:fc:40:27:bf:f5:7b:45:
14:ae:f5:ff:cd:cb:f5:cd:1e:db:5f:f6:96:e6:cd:6b:73:23:
1b:55:20:8b:12:4f:c7:75:c3:3b:b3:b4:f3:ac:8b:d0:de:6d:
2f:c6:f3:d9:a4:23:c5:54:4a:5f:03:ce:69:ec:23:28:60:f6:
39:03:9b:1e:45:35:3f:db:82:c8:c7:58:bf:d2:e3:82:f8:a1:
1c:28:90:a9:a7:70:1c:d9:aa:63:14:4a:33:c2:5c:1a:d9:b2:
e3:c9:56:ed:05:84:a7:bb:15:10:08:18:e4:f8:6a:cd:89:76:
ba:94:64:32:cb:7a:61:83:6d:f6:d2:2d:21:74:54:1b:60:05:
39:07:76:11:67:84:d8:92:44:67:92:7a:83:b5:e2:41:df:79:
8d:fb:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:48:49 2025 by rpki-client