Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
File: IGM8jmnuaH1MQSPQwJea0UTlXrc.mft (raw, json)
Hash identifier: MWet7FVNVTyDGokMztHLfwjEiSpUiPkBRnSd/IDHUcA=
Subject key identifier: 8A:73:24:BA:58:30:A5:5C:DA:6E:BE:7C:2F:41:0F:BC:89:0A:40:04
Authority key identifier: 20:63:3C:8E:69:EE:68:7D:4C:41:23:D0:C0:97:9A:D1:44:E5:5E:B7
Certificate issuer: /CN=20633C8E69EE687D4C4123D0C0979AD144E55EB7
Certificate serial: 51CF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IGM8jmnuaH1MQSPQwJea0UTlXrc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
Manifest number: 51CF
Signing time: Sat 29 Mar 2025 08:27:27 +0000
Manifest this update: Sat 29 Mar 2025 08:27:27 +0000
Manifest next update: Sat 29 Mar 2025 14:27:27 +0000
Files and hashes: 1: IGM8jmnuaH1MQSPQwJea0UTlXrc.crl (hash: 5cv0/Y5rE+bdwdkY088vpjoiA6+XAOC8MbvZ052Wyl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20943 (0x51cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20633C8E69EE687D4C4123D0C0979AD144E55EB7
Validity
Not Before: Mar 29 08:27:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8A7324BA5830A55CDA6EBE7C2F410FBC890A4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:60:9d:02:16:1f:62:3c:eb:5a:2b:b6:b8:
f7:29:bc:cd:7e:af:3c:eb:15:1c:b0:23:41:af:c5:
a1:d6:bd:a2:51:84:8e:75:24:28:c9:8b:dd:10:55:
35:51:72:b6:86:35:dc:47:8c:55:85:96:be:e2:fd:
92:d3:8f:b8:ed:f7:23:02:ec:f3:6c:d0:12:fa:26:
b0:59:a5:a4:43:33:f9:1a:39:42:0b:97:62:9a:27:
bf:42:79:32:2e:9e:8c:d8:09:45:03:93:4a:6e:93:
07:69:53:64:bc:61:96:2b:44:51:5b:39:ef:45:97:
ec:47:cd:4c:55:99:99:1c:c0:b7:00:9f:0b:a2:80:
d7:da:2d:b8:f6:05:6c:ac:40:f9:fb:13:31:27:65:
99:a6:29:19:4e:50:8e:e3:87:01:9e:ea:2f:5f:12:
58:39:0e:95:61:f3:27:52:7a:a6:27:0c:c9:16:46:
53:d9:de:02:b1:93:64:46:17:37:f6:06:10:e0:a7:
94:6a:75:78:62:a3:fa:5b:41:e7:35:8d:53:a9:5b:
14:0f:cc:44:2f:09:4b:fc:2c:ac:c5:77:33:78:10:
c3:06:ed:f9:ef:e9:c0:ef:b4:9e:4f:82:f9:66:e4:
2d:37:53:91:e5:d4:0b:2c:14:74:0b:84:15:03:94:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:24:BA:58:30:A5:5C:DA:6E:BE:7C:2F:41:0F:BC:89:0A:40:04
X509v3 Authority Key Identifier:
keyid:20:63:3C:8E:69:EE:68:7D:4C:41:23:D0:C0:97:9A:D1:44:E5:5E:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IGM8jmnuaH1MQSPQwJea0UTlXrc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/IGM8jmnuaH1MQSPQwJea0UTlXrc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e0:c9:f2:ca:18:12:27:14:c7:86:8a:71:ff:93:28:2a:e0:
8f:27:59:d8:8a:91:c2:9f:7b:26:71:aa:af:23:74:e4:ff:a4:
53:17:34:39:08:19:cb:a5:12:e4:a4:91:81:cc:aa:67:ca:3a:
5d:9e:05:7d:cb:de:e3:75:91:a2:ff:65:25:f1:be:ae:cf:5b:
b9:fe:00:44:ae:56:0e:78:18:2c:39:09:34:13:0a:75:fa:8f:
72:6d:5d:20:7f:67:e2:07:a4:f3:97:f7:e2:9b:a2:d7:3f:ec:
e5:12:bb:e7:4d:90:a6:28:a9:1d:52:e9:03:25:38:79:40:6c:
69:c4:bb:df:7c:b9:86:c2:de:e2:9b:75:e9:77:29:65:50:eb:
59:36:5c:6c:f0:54:b3:fe:62:72:35:f3:5a:4e:a2:6a:05:7d:
c5:1d:1a:35:ba:ba:65:93:f9:07:0f:b7:ae:07:c0:ee:91:81:
a5:af:71:b0:a6:ac:89:b5:d7:ea:2a:28:0f:ff:20:7f:23:4a:
5b:42:a3:2a:71:64:b0:f0:2d:4f:9b:2d:fb:b4:17:43:78:1b:
27:9f:d3:1c:7f:b0:a1:a9:b8:b9:16:04:2b:04:0a:0f:28:83:
ea:19:d9:62:a1:0b:fe:56:8e:53:a6:6c:88:63:00:53:df:dc:
ed:10:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:27 2025 by rpki-client