Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
File: ewmQZr0q8jQpPIeRezOxq4YZcO8.cer (raw, json)
Hash identifier: wwql3PQF21Vx6w7pXR/o+b+WJlxP66ZoNZtzAGwXSu4=
Subject key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 37A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:51:41 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 139.159.96.0 -- 139.159.115.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14245 (0x37a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Sep 27 02:51:41 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7B099066BD2AF234293C87917B33B1AB861970EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:7d:17:dc:c5:f0:a0:7d:79:83:13:92:19:
93:73:13:35:ed:fc:61:3a:8a:62:8c:c2:76:f5:f5:
34:43:9c:36:93:1c:b1:83:d5:b6:0c:b9:89:11:a8:
9c:1a:ed:32:c4:25:30:62:21:b7:89:58:7a:39:a3:
81:00:d1:34:d0:92:85:e8:aa:84:2d:e5:33:72:fe:
5c:a0:f2:c6:31:be:f8:81:c4:0d:89:f7:29:f8:9c:
cf:83:27:a2:fc:d3:4a:1d:81:37:ea:e5:48:2d:61:
4d:c9:42:7b:91:57:7a:4e:46:b1:70:31:2d:aa:74:
58:7c:d6:73:93:c9:bb:21:cc:ae:33:ae:15:f5:ac:
19:a3:b8:85:fe:b8:b6:4c:3d:95:38:b3:86:24:62:
c1:96:2e:69:ac:73:49:a9:d2:72:d0:ae:34:f8:8b:
eb:4e:40:35:01:80:27:62:9b:53:37:74:a9:e3:41:
63:43:27:4f:14:07:e4:54:c9:fc:8d:5c:08:ff:a6:
46:bc:cb:17:1c:90:41:78:0c:b0:0d:2f:3f:08:55:
48:85:97:de:f3:b4:34:16:3a:2a:ef:96:5d:1d:33:
55:51:61:09:0c:9c:66:ce:74:3b:a6:0f:d9:0f:08:
36:39:09:3a:5a:7b:fa:70:d6:8f:5e:af:95:c8:73:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.159.96.0-139.159.115.255
Signature Algorithm: sha256WithRSAEncryption
10:4f:4a:57:a6:51:3d:88:b5:69:c7:e7:df:27:52:18:ed:fe:
ff:f8:20:f4:bc:97:1d:dd:20:e1:82:e3:bf:9a:cc:08:fd:06:
88:aa:42:81:39:c4:a9:4f:0a:55:be:9b:63:2b:21:29:e9:e9:
82:76:5c:d6:97:98:28:12:ef:1e:da:25:44:ac:2d:ef:c8:e5:
17:0a:e8:ad:86:13:42:c4:6c:b7:7b:53:58:af:68:02:4a:60:
06:2d:c9:12:4f:15:9f:b6:e0:6b:74:9c:2d:c0:f4:bf:1c:37:
26:08:c7:92:48:c4:c6:df:1e:29:35:f0:53:ee:65:28:f9:b5:
85:73:24:b5:d3:b2:a2:fa:32:56:10:54:ba:ae:17:f4:0d:b7:
fc:35:6f:c9:09:13:64:71:79:22:1c:ac:63:29:09:9a:e1:9d:
4f:94:eb:71:cf:91:54:0d:73:98:af:4a:6f:2e:4c:93:8e:09:
fb:8a:99:1a:c2:45:a4:b2:4e:83:13:0c:4f:19:f2:0b:83:37:
84:c9:a4:60:c4:ea:76:b4:6d:ea:65:fe:86:3a:a8:ce:d5:57:
a9:d1:28:b8:dd:7a:e8:e4:03:8d:80:b8:3b:7d:63:09:a3:e3:
fc:3f:d9:26:ce:6b:2a:33:14:85:0b:c3:0a:6e:37:3a:aa:d7:
73:0f:bd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:56:05 2025 by rpki-client