Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
File: pA1lo5gglIcI0bteqCt6TVTUS4U.mft (raw, json)
Hash identifier: odAfu7BMK03FxdcBx5EJjGOxrXThec7MuLbBm0goDqY=
Subject key identifier: BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4
Authority key identifier: A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85
Certificate issuer: /CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85
Certificate serial: 2893
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
Manifest number: 2893
Signing time: Fri 31 Jan 2025 15:27:37 +0000
Manifest this update: Fri 31 Jan 2025 15:27:37 +0000
Manifest next update: Fri 31 Jan 2025 21:27:37 +0000
Files and hashes: 1: pA1lo5gglIcI0bteqCt6TVTUS4U.crl (hash: Uc7IRMuiNwY0Im9hbpHERw3apmeIdOQ0CdK2GdRgheo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10387 (0x2893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A40D65A39820948708D1BB5EA82B7A4D54D44B85
Validity
Not Before: Jan 31 15:27:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BD60D280CD3292125E67AFB55C7708FE5BF3E7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:20:01:54:ae:bf:a5:82:f7:7f:e3:e4:b0:
97:16:a8:27:c2:a5:53:50:9c:04:0c:a9:3e:f1:68:
49:8c:36:fb:73:04:13:0b:6f:f2:e9:e9:3f:b6:c0:
c3:ca:90:92:63:e0:65:ce:a4:1c:4d:27:5d:c8:cd:
1b:7c:3c:99:b1:c6:f2:bb:a4:f3:5f:b5:7a:7b:53:
a5:2f:e8:59:8b:04:8d:90:c0:4c:1f:30:24:2c:a9:
99:2f:c7:e1:5d:01:e1:8f:dd:cc:04:35:a8:77:b8:
78:5b:c6:61:70:72:91:94:16:6a:b5:15:7a:32:c3:
6f:af:d0:5b:7b:ca:f7:1e:bd:59:e1:cc:6e:fb:4b:
b4:f7:96:82:a6:8f:4d:a8:58:e4:76:86:58:3c:99:
35:87:1a:1e:69:a6:c7:c1:d8:32:56:04:10:a2:30:
5c:63:5b:a5:df:ee:55:aa:ee:d6:ca:79:80:e3:31:
fe:5c:a0:d7:bb:c6:5a:18:07:e7:97:42:58:07:63:
58:0f:c6:00:23:5f:f6:96:cc:d7:45:48:56:52:2f:
70:1b:b5:eb:8c:68:ec:1e:59:3f:00:14:37:72:5b:
e9:bd:2c:80:6b:a2:74:67:49:da:78:2d:62:95:0c:
10:59:65:a8:1a:d9:9d:38:a0:39:5a:4e:bd:bb:fc:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:D2:80:CD:32:92:12:5E:67:AF:B5:5C:77:08:FE:5B:F3:E7:B4
X509v3 Authority Key Identifier:
keyid:A4:0D:65:A3:98:20:94:87:08:D1:BB:5E:A8:2B:7A:4D:54:D4:4B:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pA1lo5gglIcI0bteqCt6TVTUS4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/pA1lo5gglIcI0bteqCt6TVTUS4U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:c8:87:a1:40:8d:a5:00:04:7d:54:29:4a:e5:ac:47:86:
ad:a7:c4:41:8b:a0:e5:c7:70:3b:1b:f9:a4:ea:88:1b:af:b1:
b0:d6:d3:40:80:2c:cf:e9:82:2a:39:c6:bc:5a:74:85:55:61:
93:f7:24:b4:73:00:d2:a9:da:c7:a9:e5:f8:f0:0d:64:15:86:
7a:4c:f9:4f:bd:4f:4a:6d:a2:9f:6e:4e:f2:b1:9f:11:c3:35:
13:87:93:96:18:39:e9:ed:7b:26:2f:87:43:70:1d:6e:be:4b:
c3:29:be:d8:0f:69:f7:09:65:5f:1c:d3:e1:9c:84:06:4a:71:
34:18:8d:5b:a1:8b:df:89:56:a9:7f:f5:71:79:2f:e0:58:29:
03:cd:50:c0:33:87:d2:ed:ff:c2:5c:2e:94:85:22:b2:f9:a3:
4b:0b:b2:2c:c7:7c:39:3d:91:90:b0:ca:ff:4b:d9:cf:b8:8a:
89:34:3d:4d:b4:d9:a0:8a:10:b2:e9:9e:f8:47:4c:00:67:07:
17:3c:29:bc:3d:61:f6:fe:77:b6:49:05:10:86:86:63:f3:fb:
93:64:24:99:22:d3:77:0b:4f:75:c9:31:bb:e5:7e:ad:d9:72:
41:d0:46:a6:87:38:f6:93:34:01:85:6b:d5:18:16:7c:69:e2:
37:ac:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:43 2025 by rpki-client