Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.mft
File: zOgyIjmPaUMoSGXbIjj6sU-4_Oo.mft (raw, json)
Hash identifier: o2eeNDXAlslAVCscFp7zemDm9A+6fJXnLD43nPt4bvU=
Subject key identifier: 73:AD:EE:D3:68:61:B3:96:6B:05:6D:2A:1B:C9:D7:77:0A:14:66:0F
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Certificate issuer: /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial: 0FC8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.mft
Manifest number: 0FBC
Signing time: Tue 21 Nov 2023 21:17:33 +0000
Manifest this update: Tue 21 Nov 2023 21:17:33 +0000
Manifest next update: Wed 22 Nov 2023 03:17:33 +0000
Files and hashes: 1: 5HV3TFw6tffLjuRgHCtjel-ZKtY.roa (hash: Uf5vWik5RxbrHKeRs6sKu3KDkp7Og+pQdFbbhW/0fmU=)
2: OVVCHEUEt1lSM5zKgRtL0WArDEM.roa (hash: ubGnRnv/TRoEneI2iUovk0ocgZbMO9hot8ZTQe1mRek=)
3: oxt2CoVVk8t1bZzfpMSYBNX_6t4.roa (hash: XyVlVHtwHukVa1OkCW9eVe3IvdVbTjHaSZBOJXJv0rs=)
4: rnc0rloBi_hY9wmm6k52n41q2qI.roa (hash: UVWcMj7J4fJizuIecs7XhSZJ8/KFiddtqLXkdYf0PXI=)
5: zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl (hash: k0q/zmyzVAX7tREdBBUx+t+QdwTYkU7fVn72GP1Pjcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4040 (0xfc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Validity
Not Before: Nov 21 21:17:33 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=73ADEED36861B3966B056D2A1BC9D7770A14660F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:70:e9:80:10:ba:0e:a4:8a:b3:47:a7:d3:
ed:7b:8f:15:50:ea:65:b9:08:a7:9c:fc:77:1c:b7:
33:d8:6f:72:d0:ab:69:c6:c2:18:b2:ad:76:83:0a:
a8:79:a7:c3:26:d9:a9:d7:40:38:ce:e0:67:ed:22:
92:08:ec:e5:be:37:0b:c2:12:38:be:71:55:d7:db:
9f:52:14:2a:10:45:5c:ef:81:86:6b:0b:7f:82:83:
9a:cb:c3:23:9a:9c:34:5e:dc:5f:ea:44:a0:d0:e5:
3f:eb:99:67:3d:d5:52:bc:b3:3c:2c:42:f5:ad:6f:
b6:35:a5:95:be:a0:f2:2f:fe:e7:d1:48:08:87:b0:
68:f4:55:82:7f:bf:86:b5:ef:8b:c8:ee:a0:02:10:
68:7a:e1:3e:ed:bf:9d:59:f7:f6:c6:32:fe:1f:87:
6c:b9:b9:06:ca:96:59:1a:9e:69:05:db:d0:79:46:
1f:97:37:c1:7f:55:2c:05:5c:d3:4c:c5:96:14:94:
76:0c:ac:e1:c0:5c:2a:96:a8:af:df:c0:af:ce:c9:
6f:67:c2:5e:70:a7:fe:05:5a:a5:a0:f4:0a:46:31:
29:95:06:5a:f7:33:a5:82:74:70:38:84:c5:f9:f7:
30:22:64:a2:23:98:35:c8:e9:df:9f:d5:79:6a:7f:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:EE:D3:68:61:B3:96:6B:05:6D:2A:1B:C9:D7:77:0A:14:66:0F
X509v3 Authority Key Identifier:
keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:c7:3a:38:f3:77:46:a7:c5:d4:1e:c1:fb:bd:68:4d:2b:64:
9c:2c:48:29:fa:8a:da:4c:1e:7f:06:cc:e5:1e:f0:e5:61:0a:
42:53:81:83:df:6d:04:4f:3c:86:95:78:93:3d:a0:b6:1f:2a:
00:5e:28:c4:f8:06:4f:9c:a4:2f:27:c2:34:6c:27:9b:ad:50:
de:01:e5:3d:e4:21:7a:a4:ee:3d:42:46:ef:0c:73:ff:83:ed:
0e:fd:47:ca:09:12:d0:cd:9b:62:ad:1b:0e:8e:c1:70:2b:5d:
78:f8:ee:84:2b:e1:59:7d:fb:fa:dc:ca:83:ee:a9:35:58:c5:
ba:b9:a3:15:b0:24:30:01:bc:27:eb:ca:6e:09:9c:86:5a:86:
3e:7d:7b:b6:6d:7a:71:29:51:15:d7:8c:ca:75:21:bb:b5:bb:
91:c9:7f:56:e9:94:15:e4:4f:d4:92:e4:2e:7d:5f:07:0c:57:
62:04:b1:3f:22:05:26:8f:36:c6:14:d6:fa:8a:96:1a:13:76:
66:4a:98:ca:86:9d:97:06:4f:77:94:bf:16:75:9e:4e:b0:0d:
6b:41:68:ba:70:4b:9d:36:df:81:c0:9e:5f:3d:30:4f:d3:55:
bd:47:31:da:10:99:2c:8b:be:82:fc:a4:c6:7c:b3:de:e6:f9:
da:28:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 01:07:49 2023 by rpki-client on console-ams.rpki-client.org