Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft
File: mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft (raw, json)
Hash identifier: 4MBo22J51UtH2BEruDf0mlA7o93jUVDlKR9LPOaUvas=
Subject key identifier: A0:91:66:03:C4:94:D0:0E:B5:BD:DD:B3:8F:F5:E7:1E:73:20:E8:36
Authority key identifier: 9A:02:CA:E2:94:A3:45:81:2A:8C:CF:9D:E9:3E:28:A0:E1:84:04:38
Certificate issuer: /CN=9A02CAE294A345812A8CCF9DE93E28A0E1840438
Certificate serial: 1C1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mgLK4pSjRYEqjM-d6T4ooOGEBDg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft
Manifest number: 1C1E
Signing time: Fri 31 Jan 2025 15:25:07 +0000
Manifest this update: Fri 31 Jan 2025 15:25:07 +0000
Manifest next update: Fri 31 Jan 2025 21:25:07 +0000
Files and hashes: 1: mgLK4pSjRYEqjM-d6T4ooOGEBDg.crl (hash: 9C3Y1/uyuZoM6B3ryUUhpHJjliQJ7RLHJumVCEz8wRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7198 (0x1c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A02CAE294A345812A8CCF9DE93E28A0E1840438
Validity
Not Before: Jan 31 15:25:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A0916603C494D00EB5BDDDB38FF5E71E7320E836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:ca:99:c5:dc:4c:a1:16:4c:a1:8f:1c:82:
57:39:9a:c1:8e:d0:ae:10:e4:3e:7a:98:1e:18:53:
65:7c:ba:9a:da:63:c6:69:51:56:6c:be:5f:6d:12:
67:f6:82:e4:16:e2:c1:3a:cf:25:20:02:f6:f7:ab:
15:fc:a5:58:9b:fe:cb:5a:96:3a:f0:13:79:f3:bf:
2e:83:1e:ce:77:ff:24:19:3c:e8:70:d1:76:63:04:
5d:d7:75:c3:64:a5:b9:5c:79:09:55:95:69:8b:cb:
d5:a5:f4:67:a5:2a:fd:7e:ff:9b:e6:ed:eb:b7:46:
46:00:cd:b4:82:c9:c7:06:30:ac:26:1d:76:8c:28:
51:6e:9e:f5:1d:d9:d7:45:4b:a3:95:00:40:f4:40:
c7:12:0e:40:11:0c:67:b9:3a:8a:b9:a5:6c:78:05:
62:44:7c:25:e1:bc:b2:3b:7e:e0:b8:df:fb:3f:3f:
ca:86:d5:32:7f:da:cc:45:f0:59:41:ed:64:f8:5f:
dc:42:ce:e7:5f:7e:f8:df:cc:5b:99:db:21:8a:0d:
d2:b7:5c:75:ea:b3:ec:9d:fc:cb:7c:f9:3a:be:cc:
2a:2d:09:b0:df:25:d5:ce:26:5a:5c:1c:2c:d3:cb:
49:bb:05:69:05:6e:e7:e4:9a:69:f4:5a:66:a2:e7:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:91:66:03:C4:94:D0:0E:B5:BD:DD:B3:8F:F5:E7:1E:73:20:E8:36
X509v3 Authority Key Identifier:
keyid:9A:02:CA:E2:94:A3:45:81:2A:8C:CF:9D:E9:3E:28:A0:E1:84:04:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mgLK4pSjRYEqjM-d6T4ooOGEBDg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/mgLK4pSjRYEqjM-d6T4ooOGEBDg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d9:0b:f9:60:4b:09:04:45:a6:c2:05:84:f8:47:c9:c1:15:
b8:7e:49:bb:41:1a:3c:45:e5:98:ed:cd:a2:5f:6d:c0:1b:3b:
69:2e:d6:1b:62:b3:4e:2d:b4:c8:4f:8a:8e:ad:92:e2:7a:ee:
f0:2f:b8:88:74:7b:7a:20:96:34:8c:ea:8c:63:eb:7b:9b:b2:
ae:3e:3c:a3:87:8b:7c:14:e9:d0:fd:f6:b7:eb:bc:44:14:b1:
68:ba:2f:38:d7:05:db:1d:d6:8b:c8:cf:21:6e:af:a1:e3:aa:
e9:b9:22:c6:cf:87:c7:f2:54:db:a4:e4:34:6b:d4:15:ff:fe:
4e:d0:34:96:b2:0e:9e:4f:34:07:09:e3:c1:13:85:b0:3c:0d:
b8:33:b0:58:c8:cc:e1:c3:3b:cc:a8:ab:ee:cd:c6:05:8c:0d:
c6:1c:4f:17:44:e4:68:59:37:3f:33:cb:c3:23:cc:84:f2:e8:
bd:97:de:1b:6d:4c:cf:6a:b5:0d:ec:c3:fd:61:31:26:bb:64:
fb:f1:3e:b7:2a:2d:83:dc:78:73:35:d8:8e:ff:c2:d3:82:45:
80:42:51:55:37:d1:97:4e:cc:1b:21:29:e2:b2:8f:87:af:50:
27:52:d4:ca:6d:c2:b0:16:02:55:89:13:7c:02:27:8d:8d:5c:
35:3e:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:05:34 2025 by rpki-client