Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
File: cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft (raw, json)
Hash identifier: sYOQoay/hARXCGqsAg+jCbCg75RY33rFZ+IItpQyh+c=
Subject key identifier: AF:20:10:86:E7:90:35:AF:0B:91:20:18:05:79:21:3F:D4:E5:D8:D7
Authority key identifier: 70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
Certificate issuer: /CN=706580629A7148E4B22189E7B91F146791116370
Certificate serial: 1305
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
Manifest number: 12F1
Signing time: Fri 31 Jan 2025 15:29:56 +0000
Manifest this update: Fri 31 Jan 2025 15:29:56 +0000
Manifest next update: Fri 31 Jan 2025 21:29:56 +0000
Files and hashes: 1: cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl (hash: 7RvrRV5FD6G3eBPCVe0RS55TBSGtYn1cgdNSFLjvpJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4869 (0x1305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706580629A7148E4B22189E7B91F146791116370
Validity
Not Before: Jan 31 15:29:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AF201086E79035AF0B9120180579213FD4E5D8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:0f:85:6d:61:c5:f1:31:54:e6:28:ab:e0:
97:54:f2:ac:8f:c4:fa:8c:76:7c:49:2e:a7:3e:42:
17:71:5a:f2:ad:51:11:93:65:07:26:25:65:11:6f:
eb:6e:f7:58:c0:75:c5:07:24:dd:89:01:31:8d:cf:
4d:a5:35:63:0d:30:b9:12:a6:e1:85:0f:4e:3b:9b:
f6:72:4a:b8:85:eb:be:73:94:30:62:ed:df:53:eb:
b9:60:ca:29:89:24:1d:f8:4e:69:7d:b5:2a:ce:09:
bc:4e:b6:ef:a9:28:d5:2f:f7:02:f8:88:1e:f8:99:
5d:f9:0d:46:1f:dc:67:00:0b:20:ec:54:f3:a3:77:
43:3f:22:7d:3d:c9:18:11:34:2a:f6:4d:8a:06:51:
3a:35:a0:fb:17:37:f7:c5:37:ab:25:da:45:9e:0f:
c6:3a:ea:97:36:17:29:c2:27:17:ea:e9:67:19:1e:
a0:6d:8e:a6:a5:ac:3e:88:e1:fa:b6:c6:76:15:aa:
63:b4:48:84:32:2f:f3:8d:42:dd:ce:98:af:cd:88:
2b:c3:0c:bc:91:5f:55:2b:fd:2e:d5:7f:d5:b0:0e:
18:35:e5:1a:a0:cc:39:dd:d0:94:88:27:85:52:d0:
44:10:97:d0:ad:9b:f1:41:9c:5e:b7:41:91:75:a9:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:10:86:E7:90:35:AF:0B:91:20:18:05:79:21:3F:D4:E5:D8:D7
X509v3 Authority Key Identifier:
keyid:70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:0f:a3:eb:7f:44:37:90:3f:78:00:3c:d4:06:0e:78:ae:
f2:d2:26:ae:66:01:ae:bb:59:28:38:1b:fc:cb:b2:fd:12:92:
f4:3e:fd:df:39:42:75:0a:78:fa:d2:96:53:e1:2c:15:1a:50:
b5:d2:3c:ab:a1:92:c8:72:df:60:c0:3c:ec:a0:2b:b4:17:c7:
96:7f:44:e0:7b:01:03:10:54:c4:eb:c3:da:fa:f2:19:89:b9:
d2:57:47:36:48:6a:d0:c1:78:d2:47:fa:dd:60:bb:d9:b9:67:
a3:b9:e4:cb:ca:08:73:47:20:5c:18:5f:9c:5f:cb:67:40:19:
19:8c:eb:c0:a8:aa:8f:fe:9f:77:d3:b2:e8:b3:78:cf:93:a7:
4a:af:8f:50:91:bb:bb:90:fc:a4:61:27:0f:51:6f:31:cc:df:
a2:19:a6:bb:bd:e3:07:af:a2:ee:a6:69:99:5e:71:4d:36:49:
f9:dd:f0:8c:b0:41:04:df:dd:8a:f7:96:a7:f7:7a:b0:80:65:
fa:24:98:fe:40:e4:04:ff:93:2a:61:21:bc:45:67:46:24:9e:
56:48:bf:20:6f:fb:2c:78:a3:6a:0c:da:73:a2:30:64:a2:84:
0e:e0:72:3c:7d:40:dd:53:d2:e5:54:2b:b1:90:c4:7f:9e:e1:
88:e5:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:30:51 2025 by rpki-client