Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
File: rvnRXVUWBDHU9wnoqjo61bzM1uU.mft (raw, json)
Hash identifier: WHKPHyWH28WB1ElaLFfOMJjQ8T+ghefkQueQqsBGLUM=
Subject key identifier: 0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
Authority key identifier: AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
Certificate issuer: /CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
Certificate serial: 12F1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
Manifest number: 12F0
Signing time: Fri 31 Jan 2025 15:26:53 +0000
Manifest this update: Fri 31 Jan 2025 15:26:53 +0000
Manifest next update: Fri 31 Jan 2025 21:26:53 +0000
Files and hashes: 1: rvnRXVUWBDHU9wnoqjo61bzM1uU.crl (hash: wCSTHiXcNAXqk3rJnbzNS92/4dJQoVfHpc7l1KsKLgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4849 (0x12f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
Validity
Not Before: Jan 31 15:26:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0B8E0425F3DFB4FC5ADADEF1A84A31CC41970B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:4b:56:fa:21:51:7e:b9:ed:95:52:ab:dd:
85:90:94:18:ef:68:f7:fd:2e:8f:8c:93:ac:71:fa:
95:e7:7b:21:d5:3d:3f:3d:5f:af:f9:5a:04:d4:c4:
0e:4b:f8:b4:73:5d:cb:49:71:70:20:75:7d:a6:37:
f6:9c:c8:2d:2c:dc:75:40:20:71:a0:f9:08:73:62:
46:bb:f7:c8:2a:e9:45:46:52:4d:20:bb:a5:fa:af:
78:48:b6:5c:73:a7:89:7f:7a:da:51:5f:c4:e7:60:
2a:74:2b:74:cd:88:8e:6b:4d:75:98:ad:24:22:75:
09:27:8d:70:18:ab:e3:58:31:7f:8a:c0:bb:49:68:
0d:e1:32:fd:29:2f:33:f9:0b:31:36:db:67:93:cc:
00:07:3b:07:6d:42:52:b0:63:e5:a1:c3:58:f2:59:
ea:ed:f5:51:1f:86:b1:bf:e3:1d:25:9a:a0:2a:29:
33:8f:41:b0:19:63:29:69:a8:24:13:08:34:8f:41:
35:8f:65:ad:93:3a:77:7d:83:22:93:7f:64:d8:15:
ac:35:25:fe:b9:04:2a:c7:9f:c8:ea:3f:e5:d0:0e:
7d:92:9c:2e:97:bf:1d:f6:07:de:f1:ae:33:63:7e:
45:4c:cd:60:a9:48:a7:8e:42:58:01:e9:a2:37:d9:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:04:25:F3:DF:B4:FC:5A:DA:DE:F1:A8:4A:31:CC:41:97:0B:60
X509v3 Authority Key Identifier:
keyid:AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:4b:d3:8a:1e:7a:aa:67:f2:08:38:d3:5c:c4:06:f8:a5:
36:e0:30:10:e0:ed:3a:36:5d:b1:5c:0f:d1:f1:d7:5b:c6:a0:
30:ae:9c:0b:66:b5:98:69:ad:d0:8b:52:15:9d:e1:1c:d3:c6:
60:48:39:c3:e5:a7:1d:2e:39:8c:10:5b:52:3d:8b:d3:7b:ae:
8e:e7:fc:4e:df:a5:59:e9:5c:8f:9a:b0:3d:2e:91:7e:99:13:
20:41:3d:f8:ff:d8:a9:08:a4:42:35:ed:11:b9:5b:b2:0a:3e:
6a:71:5c:43:3f:35:23:7f:df:aa:0c:23:6b:1e:06:89:49:20:
a6:71:73:e6:cd:5f:5f:08:a9:ea:5d:ab:6f:63:86:45:c0:27:
9e:7c:c9:00:15:ec:d7:75:89:4a:54:ea:42:d1:d8:b2:b5:86:
fb:d6:d7:39:4c:ab:c5:da:d4:b4:8b:5e:ea:8f:7f:49:47:42:
bc:70:4b:93:92:ce:60:d5:60:55:de:27:ab:87:50:40:b2:14:
37:33:96:a1:3b:6b:db:bf:35:43:61:01:7f:b0:5d:52:6f:69:
0a:b0:eb:7c:c3:fa:0e:4b:8e:d8:4e:04:56:23:0c:ff:58:a7:
c6:15:4a:4f:40:4f:f6:aa:94:b8:46:a6:64:e7:bc:22:ff:fd:
52:01:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:36:06 2025 by rpki-client