Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.mft
File: US2EFBC7rlHMv-gS2kHngUc5tSw.mft (raw, json)
Hash identifier: 1waqWwR37n/QntFWCHp/+IIDXtpRRrVvEaZqNJ+sdvY=
Subject key identifier: 28:33:7E:39:BD:A0:34:E9:27:16:20:D1:15:2A:F5:8B:D1:A2:50:77
Authority key identifier: 51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C
Certificate issuer: /CN=512D841410BBAE51CCBFE812DA41E7814739B52C
Certificate serial: 0BAA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/US2EFBC7rlHMv-gS2kHngUc5tSw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.mft
Manifest number: 0BA3
Signing time: Mon 18 Jul 2022 01:19:07 +0000
Manifest this update: Mon 18 Jul 2022 01:19:07 +0000
Manifest next update: Mon 18 Jul 2022 07:19:07 +0000
Files and hashes: 1: US2EFBC7rlHMv-gS2kHngUc5tSw.crl (hash: 0pvGeQGbv5JwvSS2/Jdx/pVl5lB3RNDCTuLaFSmf4k0=)
2: uskT9eCdc_rOY60_4uWGqJkJBhY.roa (hash: OTKOZJHz2G5utaU6ArSfQ9jXS5A3mqE2VQRCjfmKWKw=)
3: xHoHFRvOBlIR8gv-eWgCjqIvkj0.roa (hash: id3EI84uyRrxEIhRNbMpZUnojnVxtq7FQM5BPB10iyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512D841410BBAE51CCBFE812DA41E7814739B52C
Validity
Not Before: Jul 18 01:19:07 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=28337E39BDA034E9271620D1152AF58BD1A25077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:8a:02:8d:c9:41:fb:4b:74:df:85:7a:77:
de:32:99:9b:58:d4:64:d7:38:9c:d9:54:3a:df:b4:
1e:60:f7:05:db:68:0c:27:01:a5:ef:c2:f0:ac:7e:
3b:d7:ae:c4:a1:86:02:16:77:63:f3:79:5d:c7:a2:
48:45:ea:a7:7e:15:f6:6d:70:a9:53:c2:66:c3:39:
82:8a:77:7d:8b:f9:e8:e8:2f:5d:1b:89:91:f2:23:
3d:b3:c7:15:ee:a9:76:53:fd:a7:7b:65:3b:d7:74:
6c:16:2b:fd:fd:42:a6:af:cb:4b:fc:f0:32:f1:8a:
b7:64:36:22:76:92:61:1d:61:09:60:10:2f:4d:74:
86:8f:42:c8:45:08:e5:51:19:14:1f:24:f0:08:42:
de:90:08:a4:39:58:88:dd:7f:e1:ed:f9:b8:31:33:
aa:7c:6e:d0:68:e5:9d:35:32:c1:66:74:65:06:c4:
58:b6:a4:48:ab:54:6f:87:be:56:55:a6:02:34:24:
db:52:4a:73:ef:b2:b0:b7:8d:f3:14:76:ef:b8:39:
ec:c8:53:ee:75:69:93:a9:2e:a5:e6:ad:e6:1f:d3:
14:7e:c0:72:05:25:cb:93:15:c1:c6:a2:8a:8d:c9:
92:39:0c:83:67:97:52:7f:40:b3:e5:48:0b:83:7a:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:33:7E:39:BD:A0:34:E9:27:16:20:D1:15:2A:F5:8B:D1:A2:50:77
X509v3 Authority Key Identifier:
keyid:51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/US2EFBC7rlHMv-gS2kHngUc5tSw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:e9:7b:3c:c3:c8:83:f2:9a:2a:8a:50:af:32:df:4a:33:
40:2c:a5:8b:cc:85:16:d5:02:82:bb:f3:13:d2:a7:2a:82:a5:
08:5c:70:19:b5:d2:c6:37:76:bf:6c:38:c5:79:c5:d8:3a:35:
3b:59:b7:64:32:0d:49:42:7a:bf:f4:57:6a:62:56:8a:2d:bb:
4c:90:59:3d:1b:2c:2a:26:74:81:62:93:81:a0:2a:af:b4:5b:
ce:5e:a6:fa:38:f1:23:f1:aa:08:2a:8e:db:cf:27:d6:c2:7c:
06:10:b9:69:ef:20:59:0d:0d:43:b4:60:61:1c:37:1a:93:29:
43:1f:96:eb:1c:87:dc:65:bf:26:3f:26:57:ac:aa:c7:d3:16:
67:94:08:4f:39:65:38:ff:e9:5a:e0:3e:7b:bb:de:de:ff:11:
7d:cd:00:f5:64:64:a4:f1:4e:67:02:a5:4e:60:3e:be:f0:c2:
d7:32:90:11:14:f8:61:c2:13:44:f5:b6:e2:a5:84:37:59:4a:
4c:c1:1b:43:31:26:5d:7a:5b:30:26:1e:aa:f7:be:f6:87:7d:
24:03:f8:ec:bc:20:95:64:f3:3d:5d:15:e7:51:fa:64:38:aa:
0a:1e:3d:2d:7b:8b:66:a1:9e:ce:6f:4b:b8:ac:eb:dd:dd:88:
5b:41:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org