Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.mft
File: _8AlXb4GY8FZS87tN_p5a_3z3Zg.mft (raw, json)
Hash identifier: GImcCQR0taRWvnn48M3ed8dH0N0veYtZJDLODMW6XL8=
Subject key identifier: BF:70:07:97:7B:88:38:47:8E:93:99:F4:92:08:7D:96:1C:BA:2A:15
Authority key identifier: FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
Certificate issuer: /CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Certificate serial: 47AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.mft
Manifest number: 4705
Signing time: Tue 17 Sep 2024 03:48:54 +0000
Manifest this update: Tue 17 Sep 2024 03:48:54 +0000
Manifest next update: Tue 17 Sep 2024 09:48:54 +0000
Files and hashes: 1: 4ST2bGFJIVQhLfshJMjA_0T1-XU.roa (hash: 86DCOMm1rNU10PEiJrsqQm8yOs5+XHOXTmiCXL+l7Gs=)
2: ErRi9eKAUzDw-L5ljbYQxPTuU7s.roa (hash: V+H7EpkHA8F2PTs5fNEe+CEdTJHafQvfpMYgSb+LT9A=)
3: _8AlXb4GY8FZS87tN_p5a_3z3Zg.crl (hash: rXEpFe41TnyxJzrt9FSHvhxxUM5hznWHrBx8sDERvRA=)
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18350 (0x47ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Validity
Not Before: Sep 17 03:48:54 2024 GMT
Not After : Sep 17 08:06:57 2024 GMT
Subject: CN=BF7007977B8838478E9399F492087D961CBA2A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:c0:e6:b9:92:f6:f0:ed:ed:0f:03:40:72:
7e:08:9f:ac:52:3d:7d:6e:df:89:8f:1e:a9:cb:da:
3e:eb:3a:ec:c2:aa:9b:2b:f1:56:2d:53:a7:68:77:
6d:e2:0a:e3:7b:c5:ba:13:f3:20:34:19:50:72:b7:
e1:b7:c3:99:a6:ca:6f:9b:2e:c0:a0:2e:3f:4f:e1:
e9:43:b6:42:76:14:39:b0:d4:ae:85:a3:62:2e:5b:
c3:52:97:80:42:ae:2c:69:da:0f:61:f6:31:d8:c7:
d1:32:f5:7d:00:ce:91:bf:01:50:41:c8:ee:72:f2:
55:92:c3:9f:55:8c:4a:26:c3:28:8b:cd:da:17:00:
c2:f0:e6:56:0d:57:c3:c8:39:a7:c4:5e:b8:a4:b0:
12:4b:87:ce:b2:af:53:22:c2:8b:37:ba:9a:f2:0d:
52:a9:dc:c1:7d:d4:42:bd:50:31:2f:30:97:5f:8f:
48:75:21:d8:78:0e:9d:1b:ea:60:34:b3:6b:b9:89:
83:a2:4b:c9:ba:b4:44:c1:d0:b2:12:a2:88:91:2e:
26:f8:50:78:77:ba:6e:3e:05:d6:2d:54:ef:44:3f:
12:4e:0d:6b:c5:1d:8d:1f:23:e9:45:c4:87:9c:b9:
b8:12:24:0e:07:f3:e2:f6:19:f0:df:17:9a:50:f6:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:70:07:97:7B:88:38:47:8E:93:99:F4:92:08:7D:96:1C:BA:2A:15
X509v3 Authority Key Identifier:
keyid:FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:e9:ac:d1:1f:fb:7e:3c:2e:3a:59:98:7e:5d:2c:8e:91:
b7:d5:58:7d:ca:f1:d6:7a:8f:8d:68:6b:66:fb:f0:60:54:a9:
f6:15:c0:fb:fc:10:c9:38:7b:63:8a:47:c4:ea:e0:92:d9:b1:
28:fe:14:fc:6f:7a:2f:30:3b:29:d4:53:72:b0:3d:4a:fc:06:
57:0f:ab:cf:24:14:1b:7d:2e:14:00:59:f8:af:3f:2d:40:59:
da:74:ba:25:8e:82:06:42:e9:0e:c0:6e:cb:f6:a9:3d:2d:40:
a7:7c:87:33:75:cc:42:10:05:20:be:e7:62:38:0b:74:5c:98:
f1:5c:5e:0b:07:c5:54:88:57:ea:55:54:bf:a2:66:7a:be:ac:
df:88:7d:2b:29:b9:82:80:d3:df:03:3b:4e:65:b7:54:fb:be:
b1:51:ba:8f:8e:af:60:c0:15:9a:3f:3b:5e:f5:62:e7:6c:ef:
bd:15:af:e4:9a:2f:a4:85:5d:40:4e:d9:00:d3:16:34:50:43:
37:23:ee:3d:ce:05:33:6f:5e:16:8d:cc:6c:8c:2f:91:00:07:
c4:13:c5:c3:9d:5b:54:33:ca:3a:ea:9a:6a:52:4f:0e:a0:18:
10:12:43:ff:5c:d2:1c:ff:93:c2:a7:03:07:84:b0:d3:7f:e3:
bb:51:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:04:17 2024 by rpki-client on console-ams.rpki-client.org