Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
File: 0SIsg1ZJI5e9UFKksq0d30_t-B4.mft (raw, json)
Hash identifier: c1jzH10NiiG2kbCysMriMixOokrPsdr/hcDD4NPCQaw=
Subject key identifier: EF:C3:F9:25:4F:3F:C2:C7:5A:AB:CC:36:94:E2:1A:F7:8B:78:24:A3
Authority key identifier: D1:22:2C:83:56:49:23:97:BD:50:52:A4:B2:AD:1D:DF:4F:ED:F8:1E
Certificate issuer: /CN=D1222C8356492397BD5052A4B2AD1DDF4FEDF81E
Certificate serial: 0399
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0SIsg1ZJI5e9UFKksq0d30_t-B4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
Manifest number: 0399
Signing time: Sun 14 Jan 2024 19:18:21 +0000
Manifest this update: Sun 14 Jan 2024 19:18:21 +0000
Manifest next update: Mon 15 Jan 2024 01:18:21 +0000
Files and hashes: 1: 0SIsg1ZJI5e9UFKksq0d30_t-B4.crl (hash: oDH9PsxomGF0heZup0mS5xM0djBbhrt+yagG28Xt8qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1222C8356492397BD5052A4B2AD1DDF4FEDF81E
Validity
Not Before: Jan 14 19:18:21 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=EFC3F9254F3FC2C75AABCC3694E21AF78B7824A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:ec:3f:b6:fd:d6:7b:ee:74:73:a8:cb:59:
74:96:d6:c7:dc:02:cc:42:81:6b:43:88:b2:84:36:
74:89:31:59:70:17:47:d7:7e:db:ee:17:c8:62:ea:
7b:5a:ef:b7:fa:5f:80:9d:d4:19:1c:94:84:29:bd:
4e:6a:b6:09:da:11:a1:b6:69:9d:7d:2c:72:b3:3f:
e8:3c:1d:bb:5a:bb:70:55:0d:7e:7e:20:48:3f:36:
9f:bf:18:6b:e3:7e:9e:f2:76:82:0c:86:30:7c:4b:
0f:31:df:a0:86:6e:66:9e:40:b5:00:39:00:e9:2a:
41:fb:67:65:a9:de:45:ba:bd:70:78:29:91:f5:81:
24:70:4f:5b:ce:93:ac:ca:38:3d:83:64:f5:9f:d2:
1e:7d:78:33:cc:bc:0a:b1:f4:43:20:4a:5f:d3:8c:
96:ad:fa:57:c9:9a:d8:17:32:2f:55:08:12:72:c9:
4a:ea:f4:71:e1:25:47:5e:8e:61:92:8a:78:75:d7:
62:de:d2:31:05:ac:1d:c4:7d:0a:de:36:ed:ef:2e:
38:8d:d7:77:d7:55:86:be:9b:1b:3a:c6:af:c9:ab:
dd:fe:a3:67:15:02:3b:b0:79:4a:40:cf:46:5a:16:
eb:6e:2a:61:58:f4:0f:17:ca:bd:3c:e8:0e:90:5c:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:F9:25:4F:3F:C2:C7:5A:AB:CC:36:94:E2:1A:F7:8B:78:24:A3
X509v3 Authority Key Identifier:
keyid:D1:22:2C:83:56:49:23:97:BD:50:52:A4:B2:AD:1D:DF:4F:ED:F8:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0SIsg1ZJI5e9UFKksq0d30_t-B4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:13:b1:06:df:04:7c:62:9f:ec:ff:4a:d6:aa:93:2a:cf:8c:
c8:41:97:95:97:34:b8:be:14:cd:d9:8c:d3:54:90:d3:a7:94:
0e:76:05:e9:d5:99:9d:d2:cf:12:c5:3b:49:a1:f7:ad:32:42:
d6:6b:9d:d2:91:c6:d6:d9:88:7d:b5:7c:d5:5f:57:3c:a9:ba:
3b:67:44:10:e4:8f:d1:3b:51:24:85:d2:2a:e9:0f:c3:e1:75:
f3:87:b4:d1:cc:7e:1d:80:0c:6f:e5:20:a8:ff:36:95:03:d4:
68:2b:71:53:36:e3:dc:d9:a5:8b:42:b6:fb:e6:8b:7e:f4:d9:
08:d5:b5:a9:94:f4:e2:f9:28:e0:a1:c2:5a:d6:1e:04:d3:51:
75:93:89:84:45:5c:24:66:1b:77:93:53:fb:0a:01:a8:c8:fb:
d9:24:7f:54:e0:1a:0b:6f:a4:45:ce:3d:27:01:2e:ea:32:6a:
2c:d3:a9:97:a9:f4:b5:67:c3:80:0f:1d:3e:05:59:05:e7:32:
3e:30:0c:fd:36:ce:9e:d0:0f:98:4b:95:86:5e:69:ac:f0:60:
31:e8:22:e2:80:59:0c:9e:a5:0f:4a:b0:cc:64:b6:9d:d8:ba:
23:d8:fd:f4:38:36:ed:71:57:02:1c:52:6a:43:82:ac:1d:9a:
12:94:3e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:08:00 2024 by rpki-client on console-ams.rpki-client.org