Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
File: Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft (raw, json)
Hash identifier: p/2nlKEBlgy9xmlnHM65di84QK/RF8VD2rCq9Hw8sv8=
Subject key identifier: DD:92:D5:BD:8C:24:D5:0C:47:4F:15:C9:47:C7:FD:BB:5D:95:46:6E
Authority key identifier: 1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
Certificate issuer: /CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Certificate serial: 0EC1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
Manifest number: 0EBC
Signing time: Fri 12 Jan 2024 03:19:24 +0000
Manifest this update: Fri 12 Jan 2024 03:19:24 +0000
Manifest next update: Fri 12 Jan 2024 09:19:24 +0000
Files and hashes: 1: AFoYC7kS3mkPZ4TZOMri9d8Q92s.roa (hash: RhtrWaM5L9cxUiirKuLP/Y3MLDSbLl8+5grxpHqUc6k=)
2: Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.crl (hash: xTbqB4LexqXxz6ZUwPSaDCxWGj284CkEfDJ9OFrAZSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3777 (0xec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Validity
Not Before: Jan 12 03:19:24 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=DD92D5BD8C24D50C474F15C947C7FDBB5D95466E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:af:d2:4a:7a:2f:66:ad:00:38:35:9c:df:
b3:36:b4:e7:4d:b1:9a:c6:ff:d4:c2:6a:de:91:47:
f0:15:15:2b:d3:88:c1:27:a0:ae:dd:d9:37:cc:3e:
5e:bc:f7:58:b0:ae:a7:cd:10:42:5f:6c:be:66:21:
22:5d:16:b8:95:01:3d:82:d4:9e:c4:8c:c6:18:f2:
25:d5:61:92:85:d8:57:5b:c3:07:1f:d7:53:4b:61:
43:db:c1:c5:16:76:29:29:c9:95:3a:32:2b:d2:0d:
77:34:17:3d:3b:79:72:28:a8:6a:10:a4:e0:02:de:
24:2f:e9:8a:7b:4c:74:66:02:9a:f9:91:22:2d:f4:
36:2b:ee:ed:a4:f5:45:d4:f1:b0:d2:60:d7:e8:c8:
22:77:fe:96:88:b3:01:3e:fa:e2:aa:9b:3b:d2:d0:
33:dd:aa:e6:ae:17:ec:86:d9:9c:bb:43:2c:50:58:
2c:1d:10:5e:ed:96:9c:39:b9:34:e7:23:f4:a2:be:
85:1d:0d:7a:99:3a:fd:68:08:47:d5:04:c8:43:fa:
7c:f1:7d:cd:97:8e:de:24:07:0e:16:8d:f7:d5:60:
29:aa:10:46:bc:17:41:49:2b:d2:a5:ba:d6:bc:0e:
ec:be:91:e6:8c:1c:5b:ab:92:8c:ae:e9:10:d8:a6:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:D5:BD:8C:24:D5:0C:47:4F:15:C9:47:C7:FD:BB:5D:95:46:6E
X509v3 Authority Key Identifier:
keyid:1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:97:d6:ff:e0:12:2b:8f:02:86:df:ff:51:22:5a:6a:00:94:
5b:b0:76:e0:05:67:7a:43:52:11:33:02:b0:b3:0e:f5:c5:f4:
28:25:ac:22:de:8a:c2:3c:e0:2f:51:0e:25:bc:f1:e9:2f:29:
ee:fa:4e:c8:13:e6:4e:7f:b4:a0:bd:a8:16:d4:1f:ae:78:d3:
e3:b2:0c:23:c5:0f:5c:2a:00:2b:38:8a:5d:3e:ae:22:d3:27:
af:98:54:ec:e0:56:0d:ee:31:ee:c8:f5:4c:17:b1:e4:75:a0:
58:fe:15:b4:80:ba:98:4a:cf:e3:e1:58:7c:f0:7e:3c:dd:3d:
e6:5b:70:02:a2:e6:57:bc:dc:02:d9:98:e6:d3:e8:e0:2a:63:
b3:ea:41:a1:aa:18:4b:8a:b0:0a:c1:09:7b:0f:8b:32:e4:c0:
16:ec:79:e8:af:4d:69:fd:5d:ce:ea:39:57:3e:b2:51:0f:fc:
ef:b0:72:52:28:a3:9e:93:a3:94:5d:02:26:78:f4:35:42:97:
77:f4:39:b1:12:6c:e2:f4:ea:e7:94:0c:28:8e:20:c7:e0:b0:
94:63:5a:82:9d:67:2c:6a:a7:6b:f1:68:6f:ef:89:1e:eb:c0:
bb:42:de:62:b0:5a:b7:75:56:91:c9:7f:ca:76:f6:8c:74:d4:
b0:70:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 08:02:23 2024 by rpki-client on console-ams.rpki-client.org