Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft
File: zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft (raw, json)
Hash identifier: EC1gsfsmznG6HoGtnYrah3MQB0kOBrxGHypI46u0kFs=
Subject key identifier: 21:38:FF:FC:8A:F5:9D:1A:AB:0D:F9:2B:BB:31:E2:3E:8A:CC:52:93
Authority key identifier: CC:A3:A7:1D:32:66:EE:BF:E6:F1:89:DE:EE:42:9E:A9:E0:43:A4:E7
Certificate issuer: /CN=CCA3A71D3266EEBFE6F189DEEE429EA9E043A4E7
Certificate serial: 12DF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zKOnHTJm7r_m8Yne7kKeqeBDpOc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft
Manifest number: 12DF
Signing time: Fri 31 Jan 2025 15:26:33 +0000
Manifest this update: Fri 31 Jan 2025 15:26:33 +0000
Manifest next update: Fri 31 Jan 2025 21:26:33 +0000
Files and hashes: 1: zKOnHTJm7r_m8Yne7kKeqeBDpOc.crl (hash: hIYJYo2R4o7p51uYJSwtqzFWIz+4a+3GVvG+UuxU9cY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4831 (0x12df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCA3A71D3266EEBFE6F189DEEE429EA9E043A4E7
Validity
Not Before: Jan 31 15:26:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2138FFFC8AF59D1AAB0DF92BBB31E23E8ACC5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:a3:31:f7:55:c2:81:3d:f1:f6:5d:15:b4:
1c:43:09:ec:a0:49:5e:74:40:a7:c8:4a:c8:bb:71:
1b:db:d5:a9:40:3b:f9:7a:60:6a:bb:84:8c:51:9c:
fe:7a:94:61:a4:f6:5f:c7:c6:5e:9d:97:39:8a:71:
be:e4:c6:0d:a5:d1:de:2a:1c:c3:56:fa:da:29:1a:
fe:fb:49:f9:53:27:ee:40:8d:5b:50:2b:d7:af:3e:
4a:d9:36:ac:b3:f0:62:77:a9:2e:7e:07:bb:41:bd:
b5:35:4a:bc:bd:78:35:13:4a:3e:15:d6:9e:13:58:
bc:70:dd:fe:d2:ae:58:24:09:50:97:95:3f:53:4f:
07:dd:0e:e6:d8:14:4e:01:94:d5:4b:a4:ad:da:e6:
a7:e6:9f:1c:ca:47:f9:1f:38:a2:fe:ff:a1:f0:41:
91:c9:8f:e5:07:9c:e9:49:33:3b:53:d7:d0:ef:91:
64:53:a6:d6:e4:9f:a7:52:cd:51:5a:b8:4f:eb:b6:
da:9a:d3:f9:4d:de:9b:43:04:d8:ad:ed:50:c6:ff:
08:c4:a6:24:7e:4a:cb:72:5f:cf:6d:5c:8b:e4:34:
6e:1b:86:20:29:b7:e2:91:7f:ec:20:48:d0:e2:45:
4a:96:bf:b9:46:31:0f:1c:8b:b0:fe:e5:42:eb:fc:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:FF:FC:8A:F5:9D:1A:AB:0D:F9:2B:BB:31:E2:3E:8A:CC:52:93
X509v3 Authority Key Identifier:
keyid:CC:A3:A7:1D:32:66:EE:BF:E6:F1:89:DE:EE:42:9E:A9:E0:43:A4:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zKOnHTJm7r_m8Yne7kKeqeBDpOc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/zKOnHTJm7r_m8Yne7kKeqeBDpOc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a5:d5:dd:0a:49:c7:a2:3c:31:05:4c:44:b1:59:16:b3:80:
b1:f7:f0:e1:d8:85:40:7e:85:3c:a8:30:60:20:d5:9e:48:71:
3c:a9:81:fa:94:b8:c1:fb:c7:5c:c8:a1:6c:b9:1e:d3:fa:1b:
de:58:d7:7b:4b:26:f5:69:53:81:48:94:45:57:66:ba:39:17:
ac:b9:4e:f0:8c:c9:9c:56:eb:04:a2:06:37:0b:4c:94:33:7a:
fa:f4:ff:b2:d2:17:d4:34:d2:2d:a8:78:cc:e5:16:12:6c:50:
f8:fe:5b:0e:1c:d1:ba:44:87:db:b2:e8:c1:0e:b8:52:d3:5f:
06:28:3e:c9:42:b2:a3:24:8a:bf:bf:51:74:3f:5d:a7:59:93:
d0:a1:d3:ff:9f:c0:90:f6:53:4b:8a:9d:2f:9f:60:1a:15:38:
54:e4:9a:b3:1f:a3:8b:29:30:0b:ba:8e:56:87:e9:3d:a0:23:
28:86:26:d7:04:89:91:3e:b4:59:db:5d:48:2b:86:6f:1b:09:
df:f9:9b:33:14:a3:dc:ca:15:58:77:bb:6f:dd:da:d0:08:5d:
eb:f1:20:7f:bd:06:23:e9:6a:0b:46:ba:93:ee:a4:b9:52:d5:
ae:13:dc:37:16:21:48:eb:8e:e0:73:9f:8b:1b:4c:4f:93:97:
96:9e:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:22:24 2025 by rpki-client