Manifest
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
File: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft (raw, json)
Hash identifier: /W1fz5pv3PYb052OZWgDyyCiZzPRUCr4jqAJlo2nzqo=
Subject key identifier: 08:A2:8B:90:A8:ED:8B:AE:79:AA:46:A9:08:DD:C5:F5:E3:BE:34:5E
Authority key identifier: 3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
Certificate issuer: /CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Certificate serial: 69447C1E22F71F6D6C88FE83CB3E47CF59A44011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
Manifest number: DA
Signing time: Sun 07 Jan 2024 04:00:44 +0000
Manifest this update: Sun 07 Jan 2024 03:55:44 +0000
Manifest next update: Mon 08 Jan 2024 04:54:44 +0000
Files and hashes: 1: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl (hash: +1df0sKQtOUdG3eXG9MJT72ptTFsjsJGWizKUjrhEok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:44:7c:1e:22:f7:1f:6d:6c:88:fe:83:cb:3e:47:cf:59:a4:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Validity
Not Before: Jan 7 03:55:44 2024 GMT
Not After : Jan 8 04:54:44 2024 GMT
Subject: CN=08A28B90A8ED8BAE79AA46A908DDC5F5E3BE345E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:d1:cd:46:21:3a:c3:62:e1:64:0e:83:e8:
c8:bd:21:84:9c:95:2d:8c:5a:5a:ab:89:3a:2e:be:
63:3b:58:c5:45:9d:6c:45:65:ae:cf:17:78:76:47:
74:50:b0:2b:fb:d9:ba:33:65:43:22:a0:0d:9d:f8:
a0:90:7d:04:32:8b:5d:d0:a1:77:b9:42:fa:a2:2b:
0e:f6:90:00:80:e1:bb:e5:db:90:69:d3:43:3a:27:
75:cc:99:c0:38:ec:54:38:50:27:00:d7:cb:6d:8f:
93:a5:ad:94:88:fb:e9:13:d1:3e:7d:a8:4f:a4:72:
84:e7:7a:48:93:24:ce:2f:b9:1c:43:63:61:9f:1a:
4a:12:6a:ae:5b:cc:dc:3c:12:e8:3e:9a:d7:0a:f1:
3a:61:d5:99:e4:15:f7:8f:8f:e8:f4:73:da:50:3f:
2d:16:90:dd:2b:50:65:f8:36:f9:65:81:71:26:cd:
5e:fc:af:01:5c:64:a5:d9:6b:51:83:34:f6:9f:27:
25:74:15:2d:60:cd:09:e4:0c:e3:f9:9c:4c:ee:cb:
6b:3b:fb:de:e8:e2:5c:9d:70:90:93:33:cd:18:e9:
cd:39:fc:dc:d7:c3:dc:e2:0a:c5:49:47:fd:3a:5e:
a2:b0:57:e8:57:66:bf:7f:c9:bd:92:be:e7:79:9a:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A2:8B:90:A8:ED:8B:AE:79:AA:46:A9:08:DD:C5:F5:E3:BE:34:5E
X509v3 Authority Key Identifier:
keyid:3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:34:7c:cb:fb:76:90:61:ba:e8:cd:aa:23:cd:3e:07:45:30:
d6:31:95:fe:f8:bc:12:af:a7:3a:8f:7a:f4:f2:12:fb:dc:12:
ea:91:8d:8b:6e:6e:77:8f:da:37:9f:12:cb:6a:dd:6f:2e:ae:
cb:90:81:1c:75:e2:2f:c8:9c:1d:c7:cb:c3:8a:9f:b4:7c:37:
e1:f7:a0:b2:4a:8e:e6:4f:48:24:91:2f:1f:b8:c1:81:9a:ec:
3d:de:69:a5:4a:05:da:72:e0:5a:bb:3a:b5:dd:2f:51:40:8e:
d2:11:b3:51:e2:65:d4:82:75:43:fe:fa:ba:22:74:35:73:e2:
25:74:b8:53:99:8c:25:42:ab:0f:55:a7:c0:70:83:2d:37:5c:
36:5b:67:09:ec:54:8e:7e:33:dd:b8:8b:8e:c6:6a:20:55:56:
c7:38:53:e1:0f:4d:44:49:5d:cf:7c:4a:46:4a:46:3a:8c:00:
98:5c:57:db:a8:37:b0:14:dc:23:b0:c1:77:9c:94:8f:b6:81:
48:9f:72:7f:e8:d0:91:a7:16:2b:dd:55:2c:1d:94:33:d4:c5:
93:b4:28:53:9e:cc:dc:ef:67:3a:1a:da:83:77:74:5b:7d:59:
2e:98:fc:01:4d:2d:a0:95:35:8f:a1:52:0b:44:83:4e:c8:4a:
62:91:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:35:41 2025 by rpki-client