Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
File: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft (raw, json)
Hash identifier: DGTz76izoqpOmS2Jbjm9DpmSA96X8yd1f6quJDGMlic=
Subject key identifier: FC:98:CF:7E:04:CA:93:83:B7:6A:F6:BE:63:00:43:EC:39:A6:BC:67
Authority key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
Certificate issuer: /CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Certificate serial: 12C1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
Manifest number: 12C1
Signing time: Fri 31 Jan 2025 15:27:45 +0000
Manifest this update: Fri 31 Jan 2025 15:27:45 +0000
Manifest next update: Fri 31 Jan 2025 21:27:45 +0000
Files and hashes: 1: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl (hash: X+Fbx7VQZ7zm0akijOcMCpzLb+8pyOtKXXeH3Ni4LZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4801 (0x12c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Validity
Not Before: Jan 31 15:27:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FC98CF7E04CA9383B76AF6BE630043EC39A6BC67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:c0:d7:1a:d5:ba:7e:e2:db:f4:fb:c8:c4:
eb:e2:b8:7c:49:ec:e6:df:88:20:65:d3:a1:88:c6:
83:c8:2d:83:6d:e4:f2:40:f9:aa:ce:5b:83:f5:08:
50:3a:0f:0f:5e:2e:39:30:f1:f0:1a:2b:36:70:9d:
40:df:46:17:8f:b2:7f:cc:ff:7e:b0:7b:81:0c:ed:
40:10:9e:8f:57:bd:8a:d4:3c:0c:6d:d1:ea:53:8b:
f2:94:8c:7a:26:92:14:6d:62:8d:a6:87:d0:d3:87:
e0:30:a0:92:99:51:95:2a:b1:86:8d:69:40:10:b7:
77:94:6c:f9:70:d8:98:e4:2d:5e:43:50:03:fa:0d:
7f:37:2c:b0:bd:8d:1c:a5:08:f9:a2:61:66:a2:27:
79:7d:e0:c0:41:e3:8d:5f:84:c5:de:a2:46:fb:2e:
11:d9:db:4b:4e:16:18:6f:f7:f6:ea:ac:5e:be:7c:
67:77:72:20:85:c2:a8:ff:d4:9a:99:53:46:e6:85:
f3:62:59:a2:97:b1:a4:66:5e:97:07:70:71:5a:bf:
d7:b8:fb:c7:5f:58:79:60:62:0b:b2:83:b6:3e:36:
04:38:76:99:cf:62:09:21:f0:69:dd:93:2b:d4:6c:
d8:c3:5c:ba:35:2e:f1:1a:6c:ab:d3:f4:eb:ae:43:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:CF:7E:04:CA:93:83:B7:6A:F6:BE:63:00:43:EC:39:A6:BC:67
X509v3 Authority Key Identifier:
keyid:0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3b:aa:d9:d1:72:28:75:a0:29:94:c4:9e:b0:63:41:5e:e3:
13:fe:32:17:a5:43:18:1a:fd:c5:8b:20:58:f8:31:24:cb:c0:
c5:27:d5:2a:54:89:63:9b:2f:7a:6a:2d:14:1a:14:88:53:e2:
64:3b:46:54:9e:1f:1c:e8:28:f8:07:1e:6b:53:33:4f:06:3b:
9d:09:63:3e:78:4c:64:25:41:d8:b5:95:a8:5c:ca:6b:32:f7:
0d:e1:e8:a3:ce:21:f0:34:4b:a4:f9:1f:39:b6:bd:e5:f9:ea:
b0:8b:8b:ae:c4:88:b5:7a:28:77:7a:e4:10:eb:a9:81:05:77:
75:ee:a5:6f:c3:1a:09:a7:80:45:47:b0:e1:78:61:f9:1c:47:
d7:3c:35:12:42:30:0d:08:91:c8:28:df:a8:c1:39:9e:ee:77:
cc:a5:c0:e8:54:44:75:6a:dc:ff:c2:7a:4a:c4:83:68:84:ac:
1f:77:b5:20:c7:50:eb:c7:75:71:a5:3d:f6:2b:2e:66:43:d3:
cf:cf:bf:39:a2:95:a1:5b:ad:ee:9a:d7:36:16:e9:b8:33:08:
b8:c7:5f:92:1a:fc:4f:6a:2e:dc:d2:e9:33:e5:c0:5e:f7:d9:
78:5e:9c:b4:37:0d:e3:75:e0:7f:ed:a9:fa:43:b5:84:0a:35:
6e:97:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:28:50 2025 by rpki-client