Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft
File: -DfclmpQcbs64qfxU-0kRUEyris.mft (raw, json)
Hash identifier: CbseRd5ecazFMtVI3Ro3BjbIT5jOD1DH3SWAglwwJmQ=
Subject key identifier: A0:2C:0D:F6:B5:BA:61:A7:F2:BD:BF:A5:33:52:E4:21:11:71:56:5C
Authority key identifier: F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B
Certificate issuer: /CN=F837DC966A5071BB3AE2A7F153ED24454132AE2B
Certificate serial: 2956
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft
Manifest number: 2956
Signing time: Fri 31 Jan 2025 15:27:09 +0000
Manifest this update: Fri 31 Jan 2025 15:27:09 +0000
Manifest next update: Fri 31 Jan 2025 21:27:09 +0000
Files and hashes: 1: -DfclmpQcbs64qfxU-0kRUEyris.crl (hash: m/j7L2Kl1OQf0OFFjLNihaWszdf8b9+Gn9tIE+xTzXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10582 (0x2956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F837DC966A5071BB3AE2A7F153ED24454132AE2B
Validity
Not Before: Jan 31 15:27:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A02C0DF6B5BA61A7F2BDBFA53352E4211171565C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:2c:d4:3b:19:01:a8:73:ac:45:a6:c1:13:
ba:13:56:58:a9:05:b2:47:4a:35:1e:60:af:61:b6:
7a:f4:58:ff:51:d4:ca:1c:70:56:29:59:f0:e3:8c:
4a:5a:af:b6:84:8e:53:8d:d4:47:41:77:6c:d2:17:
73:c0:6e:5e:48:3c:21:6a:24:06:72:1c:06:49:80:
15:24:30:03:8e:70:d0:86:57:81:ef:2e:9b:0d:6c:
d0:ef:05:42:52:ea:3a:61:ce:63:d3:b3:df:42:09:
51:6c:c3:89:37:d0:f7:da:6d:cc:cf:2b:ca:42:8c:
0a:d4:ce:76:f1:b2:04:36:30:eb:ce:73:84:fd:f8:
69:9f:a5:1b:42:a9:fa:dd:50:3a:6b:09:21:17:08:
8d:9d:8f:80:8e:06:43:da:20:79:29:2b:d7:5c:ab:
2f:0c:3b:3f:18:21:07:50:b1:1d:7c:70:09:dd:97:
bf:4e:ae:24:e2:b6:e7:9a:f3:4f:1c:16:c7:9c:af:
e3:18:cd:d3:21:1b:15:29:f9:64:30:c9:f1:bc:94:
5d:5b:f5:64:00:a1:ec:ec:d5:d3:d5:05:34:ae:aa:
17:94:c6:8a:79:c3:d5:91:d2:ed:1f:af:90:2f:77:
e3:d8:b1:4b:4c:17:98:9a:3b:22:46:ee:8b:0a:70:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:0D:F6:B5:BA:61:A7:F2:BD:BF:A5:33:52:E4:21:11:71:56:5C
X509v3 Authority Key Identifier:
keyid:F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f9:97:16:16:39:4c:62:2d:59:43:7c:e7:6d:2e:c3:fb:28:
05:54:4f:cf:0e:16:94:ca:42:23:88:5a:5a:56:cc:7c:20:7e:
3b:4e:aa:95:f6:85:4b:96:8e:53:0c:94:eb:81:9d:d8:35:9a:
a3:ef:3d:c9:db:e3:23:6a:7e:c0:d2:9e:7f:64:9e:2f:c6:21:
07:1d:52:c9:48:be:fb:8c:bc:6a:5d:f5:e9:33:b1:13:cc:53:
2f:57:1f:f3:7d:dd:0c:c2:2f:dd:0d:7a:8a:52:2f:22:e3:f7:
90:3d:58:fe:1b:3c:7e:7b:f8:ef:54:4f:ee:8c:49:1b:dc:25:
ec:93:ea:00:88:ea:a9:a2:e0:8b:b1:d0:97:24:5f:10:f2:17:
64:d3:c8:f3:86:36:64:2b:64:fe:93:90:d3:e6:6d:24:86:da:
0d:11:97:fb:16:71:24:1d:9b:dd:9c:03:71:a3:51:5b:0d:00:
0e:3b:0c:d8:7c:ae:dd:36:f8:83:d2:04:96:6e:00:e0:db:a9:
9e:62:de:d4:dd:33:30:40:aa:e3:93:0d:06:21:a1:6d:0b:7d:
18:da:fe:d3:76:d1:9c:9e:a2:0e:a8:36:0e:51:72:47:b1:04:
75:47:10:ef:23:d4:3e:df:01:7a:2a:22:ba:59:c6:44:89:b6:
c6:1b:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:38:33 2025 by rpki-client