Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.mft
File: k-dJ5lSyqdzFv7NMLKmudf2DC90.mft (raw, json)
Hash identifier: ZQLgmHEZCpnDj3uYb/XKI+thCbZK+W+RlAEacRYv1Po=
Subject key identifier: 8E:14:05:B3:62:DB:06:EE:69:A1:83:CE:67:78:93:38:70:90:CF:1E
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Certificate issuer: /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial: 0C8F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.mft
Manifest number: 0C87
Signing time: Mon 27 Mar 2023 21:44:57 +0000
Manifest this update: Mon 27 Mar 2023 21:44:57 +0000
Manifest next update: Tue 28 Mar 2023 03:44:57 +0000
Files and hashes: 1: EEOHKM_SiEKRSNZdHbTaSs7VoNY.roa (hash: DmpWPw456HWUJHEWc4vRIndrueNZNuX2qpOiTAUC5KE=)
2: fIMKmk_AFIe57NJHng24PhyiE2w.roa (hash: npA59nCecgpdpWm5qqmZv1GlS199F3mnvRaiGpiF8XQ=)
3: k-dJ5lSyqdzFv7NMLKmudf2DC90.crl (hash: w0wYKFokqUvfvf0RzqZoyv3Nz3J/Vu0y3cpx/VSK1ao=)
4: t7fW_SSt9XyAuni8aEKN6AQ5VKc.roa (hash: exCwwwQGKtKnxh9xJSu2a4Uj+wp+nLKda1e2ue8ao6Q=)
5: w3-MKPCjNXm_BNH0sEa9xhcMVLU.roa (hash: MxmY6J4zTozGGPmKKZn9VTdS7SFC3n4o72qHUgZMUps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Validity
Not Before: Mar 27 21:44:57 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=8E1405B362DB06EE69A183CE677893387090CF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:12:4f:27:22:2b:0f:12:59:2b:41:c8:f7:
98:12:aa:2f:0d:ad:0e:ea:99:4e:22:c5:87:ab:54:
1b:ae:cf:d1:e6:5d:c9:48:d1:b1:9d:6b:9d:01:d0:
0d:8e:1e:dc:5e:4d:ae:dd:9e:3f:43:5b:a5:b6:88:
69:62:97:99:6f:13:1f:0e:24:9b:65:ee:5e:fe:31:
c7:a8:fd:19:e0:89:2f:2c:e6:dc:e5:d5:bb:bf:5c:
1c:5f:ca:3c:1f:04:d2:06:fc:3c:26:0f:4e:2d:9b:
6e:44:cd:d8:d6:fd:e4:19:2f:47:e3:6e:f5:b3:eb:
ce:27:66:a5:79:ec:61:35:13:3b:26:ac:24:0a:49:
90:88:10:dc:cd:50:8f:f3:b3:62:5b:b8:7c:22:12:
a7:a8:bb:99:df:2b:06:e9:18:75:7b:da:58:40:3f:
2e:d6:f0:25:c2:f1:d6:ee:ea:75:ea:ef:37:99:97:
94:f4:ca:f6:2f:ab:98:0c:6b:0d:f7:0c:b3:ad:77:
28:1b:98:22:f6:df:ce:71:17:3c:f5:33:28:c6:23:
e9:75:a4:1f:0b:10:bc:07:9b:90:b7:70:dd:65:03:
05:ea:e7:87:3f:79:8e:f4:61:90:9d:b8:0c:2c:12:
10:58:dc:6a:b7:c5:87:33:38:7a:eb:ff:0a:15:71:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:05:B3:62:DB:06:EE:69:A1:83:CE:67:78:93:38:70:90:CF:1E
X509v3 Authority Key Identifier:
keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b2:af:eb:f9:12:d6:49:c8:b5:e9:ec:e0:b6:53:ec:84:c1:
39:0c:b5:02:58:91:eb:93:c1:73:c5:2c:5d:ce:df:94:3b:7c:
02:7c:de:d6:4f:d6:77:4c:2e:df:b8:1c:c1:4c:c8:e1:35:67:
38:75:8d:4e:ec:ce:cf:b3:5b:2c:0d:5d:10:2e:16:2f:a0:f1:
e6:08:8c:04:8e:86:e4:8b:c5:13:4e:e7:71:2e:f6:5c:c5:8c:
a4:ee:b6:6f:50:16:16:88:98:80:d1:e1:45:e0:35:60:72:4a:
c7:d7:bd:25:45:31:6d:bd:35:5c:3d:26:7c:db:f1:8a:ac:a1:
52:af:62:a9:16:57:0c:e4:96:b7:3c:d5:60:c7:fd:e7:d2:1c:
1b:6c:60:1a:62:a6:c5:82:c5:62:cf:18:2a:47:d1:2b:c2:84:
de:15:69:17:dc:c9:9b:22:ed:c3:a7:d5:92:c5:b2:11:20:17:
b6:1b:b0:97:b2:b8:98:f6:30:81:90:38:6f:8c:bf:a5:7a:b9:
4d:41:02:5d:d7:41:31:19:d3:e5:9d:9d:ea:be:ad:61:e4:29:
b3:90:77:0e:2c:7e:ce:7e:81:ac:2f:a9:98:33:d1:2e:87:d1:
21:30:d5:54:c8:c7:1d:2c:1e:5e:26:3b:03:b2:85:54:e0:87:
35:52:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org