Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
File: c8Mme8SMmzk0ep8yp9O0D59yiVg.mft (raw, json)
Hash identifier: 8sEKjXzE/kuU9fsVsTLVeccDzp0LA+l0b3gqqTddcLc=
Subject key identifier: BA:B1:FF:40:E1:F1:92:36:AD:57:6A:B3:74:FB:21:F5:DF:65:FD:AD
Authority key identifier: 73:C3:26:7B:C4:8C:9B:39:34:7A:9F:32:A7:D3:B4:0F:9F:72:89:58
Certificate issuer: /CN=A9162E3D0000/serialNumber=73C3267BC48C9B39347A9F32A7D3B40F9F728958
Certificate serial: 1303
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/c8Mme8SMmzk0ep8yp9O0D59yiVg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 15:29:25 +0000
Manifest this update: Fri 31 Jan 2025 15:29:25 +0000
Manifest next update: Fri 31 Jan 2025 21:29:25 +0000
Files and hashes: 1: c8Mme8SMmzk0ep8yp9O0D59yiVg.crl (hash: SqDB3vgIbgCqJ/wyYFOu/FptGBezUpmA8uygdwhxEWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4867 (0x1303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=73C3267BC48C9B39347A9F32A7D3B40F9F728958
Validity
Not Before: Jan 31 15:29:25 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=BAB1FF40E1F19236AD576AB374FB21F5DF65FDAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:78:4d:bc:1f:fc:53:cb:3e:e2:d6:06:4e:
b4:ce:85:ef:e1:f0:be:ae:4d:b6:ff:e0:05:91:16:
79:1c:d3:36:e9:e3:c1:3c:98:ce:e9:a2:dd:2c:c9:
5f:67:2d:40:cf:b5:25:d5:10:e5:ce:1e:4e:c4:1f:
31:c1:08:97:ad:8c:b0:5d:af:0f:af:ed:87:b6:4b:
48:01:ac:20:4d:62:8e:2a:0a:3d:e3:e8:d1:16:dc:
40:71:32:be:f8:58:ad:8d:39:ff:73:23:fe:b3:83:
e4:e7:3c:15:12:4d:63:21:80:10:e5:33:a9:09:f6:
bd:73:a6:1a:30:6c:c4:ed:32:b5:21:80:04:cb:2b:
48:19:d1:cd:ec:99:b2:dc:20:4e:41:15:b7:b5:b1:
79:4f:bb:74:b9:22:03:fd:fe:f9:8e:a6:c9:ab:8d:
8e:20:90:e7:10:32:bc:96:48:c3:8a:e4:dc:9f:e9:
95:30:9e:fb:e8:b0:ff:c1:ab:7a:64:cc:d2:b0:e0:
03:78:96:f8:f6:0f:0a:8f:db:38:fe:99:ec:5b:f4:
5b:95:f2:37:aa:13:21:25:e6:a6:f8:89:75:cb:b5:
c8:45:47:c2:0e:ab:0b:fa:6c:b6:f8:cc:d7:78:c4:
36:f0:ab:8e:38:a9:7c:69:03:1a:11:6c:72:7f:bd:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:FF:40:E1:F1:92:36:AD:57:6A:B3:74:FB:21:F5:DF:65:FD:AD
X509v3 Authority Key Identifier:
keyid:73:C3:26:7B:C4:8C:9B:39:34:7A:9F:32:A7:D3:B4:0F:9F:72:89:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/c8Mme8SMmzk0ep8yp9O0D59yiVg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c8Mme8SMmzk0ep8yp9O0D59yiVg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:61:3a:fe:bb:1a:d5:77:44:6f:16:ac:0f:5a:38:67:ef:
9a:7f:6a:b3:7c:60:73:a2:57:2b:f4:1e:1f:99:ac:d5:52:69:
f0:8c:78:28:0a:20:e2:68:ce:78:f1:a8:68:1b:88:ef:5d:52:
21:5c:0a:30:d8:89:74:09:b5:72:44:3a:89:99:3b:73:40:4d:
e8:d2:17:b0:7e:a7:be:90:98:1d:47:e3:c2:b4:7d:b9:ad:f8:
b2:71:ca:6e:53:68:a2:32:c7:20:5a:99:5c:f6:67:b5:89:52:
6e:54:a2:70:e8:81:d0:12:28:fc:8e:e0:02:d8:c9:c0:be:e3:
11:be:ce:1e:61:11:35:ec:e6:96:83:a6:d1:ba:b8:00:77:46:
d5:2b:e3:ed:58:3f:2a:da:94:b4:f4:92:64:e8:6a:88:c5:35:
63:45:d8:d7:31:6c:57:24:82:72:d2:a2:37:ab:e9:17:4f:af:
8d:55:d8:0e:61:ab:55:03:75:2a:3d:21:02:b4:b5:29:ca:0d:
8a:aa:c5:35:a7:e1:62:c6:dc:1b:44:56:92:92:fb:53:b4:35:
09:68:69:61:29:c5:e3:04:b8:0e:46:ee:10:6d:97:62:69:11:
20:90:9c:69:56:7b:33:87:93:ad:ec:70:15:44:65:91:3d:c8:
41:61:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:13:06 2025 by rpki-client