Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2724/ZRcvdabhV5dnqOKKm00Sd_X2HmI.mft
File: ZRcvdabhV5dnqOKKm00Sd_X2HmI.mft (raw, json)
Hash identifier: POeS3oApleQHFDxjtP0BhQR5eKRzRp8hClaiohcp0qE=
Subject key identifier: C1:85:DF:FA:4A:B1:4E:EE:FF:BC:F0:DD:AF:54:B5:83:59:AB:AE:47
Authority key identifier: 65:17:2F:75:A6:E1:57:97:67:A8:E2:8A:9B:4D:12:77:F5:F6:1E:62
Certificate issuer: /CN=65172F75A6E1579767A8E28A9B4D1277F5F61E62
Certificate serial: 0B85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZRcvdabhV5dnqOKKm00Sd_X2HmI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/ZRcvdabhV5dnqOKKm00Sd_X2HmI.mft
Manifest number: 0B85
Signing time: Sun 14 Jan 2024 19:20:46 +0000
Manifest this update: Sun 14 Jan 2024 19:20:46 +0000
Manifest next update: Mon 15 Jan 2024 01:20:46 +0000
Files and hashes: 1: ZRcvdabhV5dnqOKKm00Sd_X2HmI.crl (hash: Vqu5R6TvO2iQWdMfUPwvv48pMKGbY53Xnfip+y4rcxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65172F75A6E1579767A8E28A9B4D1277F5F61E62
Validity
Not Before: Jan 14 19:20:46 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=C185DFFA4AB14EEEFFBCF0DDAF54B58359ABAE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:53:01:54:e0:96:69:d2:7d:05:20:bf:af:
0c:48:74:75:6f:0f:85:9d:f0:84:10:2e:56:bd:eb:
02:d0:a9:b9:48:35:bf:b1:a1:a2:e9:56:75:04:34:
33:fc:27:99:90:24:c1:d5:4c:cf:06:27:35:0e:a4:
6e:6e:e1:bd:05:2f:12:7d:af:55:a1:4b:45:d2:b0:
78:80:7b:c3:e8:59:09:3a:95:c2:f0:3a:df:5b:9f:
05:d7:ce:45:a9:b1:00:7b:4d:e9:fc:47:bf:dd:d7:
9b:e0:58:29:68:01:ba:d7:04:e6:94:f8:9d:23:a6:
df:60:6b:73:57:df:ea:78:7d:a1:de:f1:c5:c0:a4:
41:f6:ae:62:0f:6f:ca:b2:f9:0e:6b:ba:ed:c2:f0:
25:28:26:54:86:7e:73:53:5c:97:6c:67:6b:5d:20:
d0:8b:c1:79:06:0c:96:3d:da:86:e8:0d:1c:2b:67:
f0:2c:64:0d:51:d8:ef:99:9b:82:d3:1b:ba:5a:90:
57:4d:34:39:98:9f:e0:cb:f1:12:be:50:c0:fd:6c:
22:97:4e:67:97:b3:61:e2:07:17:98:01:e5:37:fa:
09:66:c4:91:00:28:bc:bc:ea:c2:c5:be:77:17:13:
4b:75:58:48:18:9e:22:81:e5:38:12:2d:87:6d:b4:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:85:DF:FA:4A:B1:4E:EE:FF:BC:F0:DD:AF:54:B5:83:59:AB:AE:47
X509v3 Authority Key Identifier:
keyid:65:17:2F:75:A6:E1:57:97:67:A8:E2:8A:9B:4D:12:77:F5:F6:1E:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/ZRcvdabhV5dnqOKKm00Sd_X2HmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZRcvdabhV5dnqOKKm00Sd_X2HmI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/ZRcvdabhV5dnqOKKm00Sd_X2HmI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:97:26:4f:f0:65:3f:3b:b1:bb:e6:4f:fb:78:8b:4e:d0:92:
5b:31:4e:86:a3:06:a0:93:69:f9:7c:4b:d6:ad:b3:57:74:64:
61:fe:92:dd:09:14:6d:8f:38:be:d3:b9:c9:e7:ad:07:ca:da:
6c:6d:d1:6c:e5:f1:4f:df:27:62:83:3f:03:51:31:1e:42:cc:
be:33:27:b9:ee:b1:77:cf:e2:72:49:81:02:25:95:9f:aa:e1:
fc:6c:24:14:a5:0b:d2:40:40:3a:ab:0f:b1:c2:2d:7c:09:19:
54:b8:fb:d5:c9:05:ad:5b:0a:ba:1e:56:eb:09:4c:1c:92:79:
5d:0f:47:f4:98:74:9e:97:f3:ad:30:e7:c4:c1:eb:c8:70:35:
46:8f:c2:1b:a9:b4:d9:12:36:c3:c6:d3:51:52:a8:b5:69:a8:
9b:74:cb:9e:9a:3e:8b:75:a3:ef:bf:8b:7a:a5:7f:47:fa:cd:
f4:33:b3:5f:e1:81:6a:c6:3f:af:8c:68:3a:2d:df:37:6f:5b:
89:76:4e:c3:12:39:10:35:7a:6e:f3:82:f5:03:22:92:72:28:
c3:73:fb:7e:6c:ea:98:ba:39:df:9a:08:68:ff:a2:65:81:c5:
3c:8c:c7:1b:a6:07:31:c0:3f:5b:30:c5:65:ff:5f:b5:92:06:
5c:a9:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:13:47 2024 by rpki-client on console-fra.rpki-client.org