Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1229/NKMZtXsB8bh1GeWM7pzZIQ8akBE.mft
File: NKMZtXsB8bh1GeWM7pzZIQ8akBE.mft (raw, json)
Hash identifier: LmOxnuZGL42sEhCgQ9fTVQvfFRcsbPE/tBF8o8ZMhiY=
Subject key identifier: B5:BE:8D:F7:7B:78:40:67:1B:C7:71:45:49:43:A5:5C:F3:70:36:3B
Authority key identifier: 34:A3:19:B5:7B:01:F1:B8:75:19:E5:8C:EE:9C:D9:21:0F:1A:90:11
Certificate issuer: /CN=34A319B57B01F1B87519E58CEE9CD9210F1A9011
Certificate serial: 26D7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NKMZtXsB8bh1GeWM7pzZIQ8akBE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/NKMZtXsB8bh1GeWM7pzZIQ8akBE.mft
Manifest number: 26D7
Signing time: Mon 10 Apr 2023 06:16:18 +0000
Manifest this update: Mon 10 Apr 2023 06:16:18 +0000
Manifest next update: Mon 10 Apr 2023 12:16:18 +0000
Files and hashes: 1: NKMZtXsB8bh1GeWM7pzZIQ8akBE.crl (hash: wHbGe5eg1pWNHufu5ZAFYZXj1IfyTyyw4RxFrlqiM9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9943 (0x26d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34A319B57B01F1B87519E58CEE9CD9210F1A9011
Validity
Not Before: Apr 10 06:16:18 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=B5BE8DF77B7840671BC771454943A55CF370363B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:eb:d7:6f:6b:ef:2e:59:59:73:eb:7f:a6:
eb:24:fc:a5:27:c7:ae:f9:21:60:c2:31:a5:5e:09:
8b:0e:7a:bf:cd:33:76:32:bf:d4:75:cd:8b:1a:79:
93:47:90:fb:74:9f:1b:e1:ec:64:33:59:fc:19:e3:
7c:8c:d3:d0:b6:0f:c4:28:be:89:08:eb:9e:09:f7:
d0:8e:6f:d8:cf:ea:d6:01:94:37:b7:1e:54:b7:51:
fe:8e:82:79:d4:b9:6c:fb:fa:32:af:3c:6d:16:a9:
23:90:11:b9:70:e7:50:15:43:4b:53:ba:76:5f:ba:
c2:6d:d1:00:aa:f0:60:87:59:b9:58:ca:c4:70:48:
eb:bd:49:f7:c5:cd:ed:9d:a8:9c:33:a9:0e:3f:c2:
90:a6:23:11:6d:e7:1e:9b:34:d5:28:b6:34:8f:9f:
a0:9f:c1:60:fb:0a:a4:0f:b7:08:75:0b:d6:09:ff:
3c:4e:48:9b:be:10:aa:14:b2:c0:16:0f:a8:4e:d8:
53:92:76:1e:40:90:c5:1f:9b:07:d4:98:28:a2:69:
86:7d:07:a6:54:e5:45:2f:e0:4e:95:52:73:5c:28:
57:a9:90:56:49:ff:cd:1b:bf:36:19:e4:50:45:a3:
ac:f3:da:5e:50:32:0b:ba:d0:6a:f1:a5:cc:ff:96:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BE:8D:F7:7B:78:40:67:1B:C7:71:45:49:43:A5:5C:F3:70:36:3B
X509v3 Authority Key Identifier:
keyid:34:A3:19:B5:7B:01:F1:B8:75:19:E5:8C:EE:9C:D9:21:0F:1A:90:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/NKMZtXsB8bh1GeWM7pzZIQ8akBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NKMZtXsB8bh1GeWM7pzZIQ8akBE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/NKMZtXsB8bh1GeWM7pzZIQ8akBE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ea:f6:4f:b4:30:ab:55:de:91:e5:59:ab:fe:e1:19:dd:2f:
f7:3e:42:1d:ad:ed:a8:37:f8:c0:88:4b:c4:ce:5d:c1:c2:95:
1d:3b:22:3e:8a:63:12:f9:5a:64:af:5d:88:b0:88:30:ce:8b:
bf:40:5f:ef:76:07:4c:84:7c:1a:55:9a:26:f6:32:b9:9b:69:
0f:c8:c1:be:cd:f5:16:ae:b5:49:9c:9e:55:48:2a:1a:7e:72:
a9:7d:79:0f:53:9e:6c:45:bb:b7:70:dc:fd:8e:d2:1c:6d:31:
26:e2:b5:3d:9b:94:ea:94:08:7c:df:4e:be:5a:c2:e2:fc:4b:
21:48:2d:73:50:ac:d9:ba:e2:b4:53:8c:08:45:02:f9:59:3a:
6e:b2:7e:f5:c0:bd:d3:89:dc:88:27:3a:bc:30:ef:05:11:3b:
3b:23:2c:9d:ba:c5:f1:31:ad:4f:52:45:bf:56:df:e7:d5:b5:
a7:e4:21:df:56:ba:14:76:04:72:9e:a9:57:ba:b5:eb:63:51:
fd:67:11:06:28:ce:56:d5:e7:61:97:40:43:ec:bd:31:ff:e3:
52:a2:67:3d:8b:fe:da:2e:85:5d:f2:c1:52:13:63:c9:d3:ca:
d1:0d:36:36:78:47:d6:49:81:7a:86:59:9e:49:55:05:05:8c:
8c:db:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org