Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3067/_Gk2ekqy0XmZk6A8mryH9BXEdpM.mft
File: _Gk2ekqy0XmZk6A8mryH9BXEdpM.mft (raw, json)
Hash identifier: jINnQ7GKlQkqjRxyXIKTTNpvruj2fABc7iMQ/fRhELs=
Subject key identifier: 8F:3F:F9:70:3E:BC:18:22:82:8D:8E:A7:91:D7:A0:3D:B9:A7:E6:DC
Authority key identifier: FC:69:36:7A:4A:B2:D1:79:99:93:A0:3C:9A:BC:87:F4:15:C4:76:93
Certificate issuer: /CN=FC69367A4AB2D1799993A03C9ABC87F415C47693
Certificate serial: 16D3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_Gk2ekqy0XmZk6A8mryH9BXEdpM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/_Gk2ekqy0XmZk6A8mryH9BXEdpM.mft
Manifest number: 16CC
Signing time: Thu 01 Feb 2024 20:51:55 +0000
Manifest this update: Thu 01 Feb 2024 20:51:55 +0000
Manifest next update: Fri 02 Feb 2024 02:51:55 +0000
Files and hashes: 1: QdM_hfXRKx-tHGJbw5bxfSYyIGs.roa (hash: IQLdv0VEnEiH3Ze5gJMduY8egq8YAAh6+tzmzc/LWB0=)
2: _Gk2ekqy0XmZk6A8mryH9BXEdpM.crl (hash: KhIEVsMQqTPGitTCDue+V6MWSAJ3vhnTuaqR0BX8V5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5843 (0x16d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC69367A4AB2D1799993A03C9ABC87F415C47693
Validity
Not Before: Feb 1 20:51:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8F3FF9703EBC1822828D8EA791D7A03DB9A7E6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:ad:1e:9c:57:b5:3f:2f:86:88:6d:86:82:
4f:e7:ee:c6:57:d9:6a:37:8c:b1:09:e9:09:f9:56:
2e:86:38:c4:24:82:fc:be:df:81:0b:46:b0:8a:db:
4e:80:1b:dc:f7:b4:74:13:c3:11:96:40:30:65:44:
61:ee:82:24:f9:67:fd:bb:4c:21:04:0f:64:de:c0:
93:87:56:26:c0:0b:e6:75:b3:7f:34:84:d7:a3:b4:
a8:a1:99:3a:c5:fa:2e:2f:85:1d:54:ce:45:bb:c6:
7e:0a:84:71:a5:da:b3:22:10:be:e5:17:0d:97:60:
b6:0d:89:08:6a:b5:df:2d:17:ad:a4:b6:5b:a9:41:
72:d7:d7:4b:3b:29:5c:83:1d:43:7d:83:b6:b3:d3:
92:25:0e:fc:a8:88:29:ec:ff:d0:b0:27:1b:5a:da:
46:70:af:15:50:32:51:a4:f6:cd:8e:80:be:39:58:
08:6e:ce:6b:1d:cc:e3:26:e2:83:95:0c:6c:ae:c8:
66:a6:e5:d7:a3:cf:86:c1:d3:85:c9:36:4d:98:c6:
46:9e:ee:b8:b5:b4:22:f7:16:2d:e0:7f:70:7c:6f:
bf:be:4f:08:bf:3c:a2:b9:64:4b:cf:2e:ee:ac:58:
c1:23:f0:c8:f2:ce:f5:47:33:11:4e:4d:a9:d5:14:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:F9:70:3E:BC:18:22:82:8D:8E:A7:91:D7:A0:3D:B9:A7:E6:DC
X509v3 Authority Key Identifier:
keyid:FC:69:36:7A:4A:B2:D1:79:99:93:A0:3C:9A:BC:87:F4:15:C4:76:93
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/_Gk2ekqy0XmZk6A8mryH9BXEdpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_Gk2ekqy0XmZk6A8mryH9BXEdpM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/_Gk2ekqy0XmZk6A8mryH9BXEdpM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:87:25:8e:c5:3c:77:d8:ea:46:c6:4b:fb:41:d0:f6:fd:d4:
ee:32:9e:03:ec:6c:cb:50:cc:37:ab:e6:8c:bd:eb:ce:f8:07:
6d:64:3f:b9:b4:d7:8a:44:aa:f2:ec:79:35:c1:71:c8:e6:6b:
87:9b:57:a3:9c:8d:21:56:c2:25:b2:9d:c7:77:24:ca:df:7e:
48:bc:2a:4b:2c:5e:88:c8:6c:87:11:fe:65:98:43:1f:79:28:
d6:d9:16:87:d0:28:55:c4:9f:ba:83:63:31:71:5a:99:67:d0:
6a:96:9a:d8:28:de:ba:27:33:9d:2b:9e:56:84:8d:1b:91:db:
04:40:2a:0e:6f:d2:92:0e:2e:64:07:58:9b:9b:66:d7:db:75:
05:48:5b:b3:05:a4:a6:3a:6a:9d:8a:90:f3:41:a0:a6:9c:eb:
b1:44:02:5c:c4:2e:fd:7e:2e:c7:3c:e7:28:d3:c4:9a:53:09:
bd:9a:c8:54:99:3a:ff:3a:3a:ab:8b:66:1e:86:2c:c5:2b:34:
72:2b:c9:36:d3:3f:ab:44:27:53:a3:67:a8:74:27:0b:8a:ab:
0f:d4:53:2d:26:f8:9b:c2:14:f9:c8:57:8d:78:25:bb:d0:3f:
3c:af:73:69:04:39:ca:fc:ab:40:dc:2f:d0:d8:a6:1d:86:75:
24:39:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 03:16:35 2024 by rpki-client on console-fra.rpki-client.org