Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft
File: H4HG-W0BkJkB20LNehLnmKk_Trc.mft (raw, json)
Hash identifier: DJye8OwisNt5E0hvZwTfoGrI99XxMu3Mn+D3KB3nAdo=
Subject key identifier: 28:8B:2C:D2:5A:72:65:02:C8:E7:0C:1A:5D:FE:7B:88:37:0F:67:4E
Authority key identifier: 1F:81:C6:F9:6D:01:90:99:01:DB:42:CD:7A:12:E7:98:A9:3F:4E:B7
Certificate issuer: /CN=1F81C6F96D01909901DB42CD7A12E798A93F4EB7
Certificate serial: 202F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H4HG-W0BkJkB20LNehLnmKk_Trc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft
Manifest number: 202F
Signing time: Sat 29 Mar 2025 08:28:58 +0000
Manifest this update: Sat 29 Mar 2025 08:28:58 +0000
Manifest next update: Sat 29 Mar 2025 14:28:58 +0000
Files and hashes: 1: H4HG-W0BkJkB20LNehLnmKk_Trc.crl (hash: 3ALLwfqW4OipcYZI7Y1oeJmiik7AMsrTLhTGI6x4kWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8239 (0x202f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F81C6F96D01909901DB42CD7A12E798A93F4EB7
Validity
Not Before: Mar 29 08:28:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=288B2CD25A726502C8E70C1A5DFE7B88370F674E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:01:e3:31:74:77:76:6e:ae:0d:cd:02:f0:
bc:8f:70:47:97:3b:28:21:d6:db:28:68:f6:e0:ff:
aa:18:2b:bf:1a:ca:2f:4d:fe:f9:e7:ab:2d:3f:fc:
42:87:6b:c3:7d:56:d9:aa:22:23:2a:c2:da:1c:34:
18:ed:8e:34:12:5a:25:e2:07:b4:fb:36:5f:43:4b:
99:0f:14:32:bf:c0:25:8f:5f:18:0b:fd:d0:40:02:
36:52:8d:d4:da:1d:20:fe:03:f5:14:ea:12:fe:38:
c2:65:d7:26:af:c1:de:eb:01:0a:e9:e3:0f:31:ad:
0f:93:a4:8a:38:be:e7:e7:a5:45:e6:ce:d1:53:68:
8f:65:85:b4:33:a2:8a:87:9e:24:82:2a:ed:cf:10:
17:15:a5:33:55:04:0b:c2:dd:16:cc:71:33:d6:41:
fd:30:85:e9:d1:17:17:66:48:e2:ec:42:44:c8:07:
b9:e7:06:c5:cc:15:dc:f4:21:55:cc:e2:3e:c2:9a:
4f:60:59:cc:54:b5:d8:29:78:84:98:5b:b3:2d:2e:
61:b2:89:0b:26:91:aa:65:00:2c:ae:8a:82:56:bb:
00:c2:ab:2e:d5:11:4d:b5:46:bd:ef:1a:34:02:d9:
50:f6:5a:0e:93:a1:fd:f9:d1:92:3d:d0:fe:ae:7c:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:2C:D2:5A:72:65:02:C8:E7:0C:1A:5D:FE:7B:88:37:0F:67:4E
X509v3 Authority Key Identifier:
keyid:1F:81:C6:F9:6D:01:90:99:01:DB:42:CD:7A:12:E7:98:A9:3F:4E:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H4HG-W0BkJkB20LNehLnmKk_Trc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:76:5f:3f:0f:03:40:76:c1:0a:92:04:5f:d0:5a:a0:4f:f6:
62:23:2e:4a:86:2c:dd:70:b9:08:d2:65:95:6a:74:4d:d5:da:
f4:8d:19:ad:07:c6:f4:8d:24:36:d4:c2:29:f6:fe:fe:12:41:
34:9d:e9:79:2a:cc:0e:1b:65:c2:8a:ce:b4:00:f2:e9:bd:36:
ee:95:13:19:1d:71:5e:03:bb:cb:90:83:16:98:5f:f6:34:33:
74:6e:5c:ac:49:ff:5f:20:8c:56:e9:13:1d:ab:f0:d8:36:5a:
f3:8e:d1:d9:3f:88:7f:eb:a0:d4:bb:1f:9b:54:8e:73:7b:ed:
7c:3b:26:19:f1:8f:16:4b:ee:2d:0c:58:c2:92:57:b5:6d:7e:
9a:8d:f6:dd:c7:14:78:e6:0f:1c:68:c6:37:95:10:c4:f8:9a:
0c:57:8d:a7:ba:50:3d:88:ed:78:b6:26:95:f1:3e:79:6a:c7:
54:85:fb:6d:e7:3d:c7:37:a1:22:27:2d:55:16:72:62:0a:06:
b1:10:09:92:b7:be:0d:e1:02:0d:c8:84:bf:67:73:46:eb:96:
72:1e:d7:bc:dc:29:68:db:7c:2d:29:34:f8:b8:d2:e9:09:86:
52:42:37:fd:d6:2e:98:10:be:67:c6:96:53:6d:65:4c:36:dc:
92:27:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:02 2025 by rpki-client