Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.mft
File: _70kcyBFw5hrQE607oXp9AdJ-ms.mft (raw, json)
Hash identifier: 5+t1M7GC5YpHXAvJCJWLjQpVGrBwa9YWx/CMMmSGpHY=
Subject key identifier: 89:84:9C:CA:62:FF:0C:CC:9F:B3:7F:92:EE:15:EA:3C:26:B6:35:7C
Authority key identifier: FF:BD:24:73:20:45:C3:98:6B:40:4E:B4:EE:85:E9:F4:07:49:FA:6B
Certificate issuer: /CN=FFBD24732045C3986B404EB4EE85E9F40749FA6B
Certificate serial: 0A41
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_70kcyBFw5hrQE607oXp9AdJ-ms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.mft
Manifest number: 0A41
Signing time: Tue 22 Oct 2024 23:51:00 +0000
Manifest this update: Tue 22 Oct 2024 23:51:00 +0000
Manifest next update: Wed 23 Oct 2024 05:51:00 +0000
Files and hashes: 1: _70kcyBFw5hrQE607oXp9AdJ-ms.crl (hash: etCS/reQG1/Q0kmjs680iS2vaufE+3jcMykdbVhEjJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFBD24732045C3986B404EB4EE85E9F40749FA6B
Validity
Not Before: Oct 22 23:51:00 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=89849CCA62FF0CCC9FB37F92EE15EA3C26B6357C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:73:7b:29:fd:f8:ba:bd:d1:5b:1f:6f:05:
82:2c:de:ee:dc:8f:1b:91:66:ba:56:83:9d:c4:2d:
f5:57:c6:c9:f9:fc:22:07:31:d5:64:a6:58:2e:21:
82:e1:cd:d4:f2:cd:4c:c7:28:58:bf:30:0a:49:e8:
c2:46:68:52:16:98:11:65:68:7b:25:f3:ef:eb:8c:
15:8e:b5:39:4f:ae:52:f2:95:ff:d3:55:1f:3a:57:
fb:cf:5e:b6:81:9f:20:5e:44:ff:70:37:d6:4e:d8:
52:d4:db:35:9f:fa:f3:b5:47:0d:15:a1:b6:07:91:
df:3b:ef:b1:b2:dc:3b:e6:d1:05:dc:55:f1:bb:c6:
32:b5:ad:1a:60:66:b8:98:89:91:3e:fe:31:12:92:
f8:14:60:0c:4e:d8:eb:a2:6b:ee:48:49:88:53:68:
f6:f7:a2:eb:b7:04:30:c2:a7:a7:c7:97:20:53:0b:
c5:65:99:f3:be:16:9c:89:50:fa:a7:15:56:55:df:
51:be:a4:0e:1d:c8:ec:d6:64:f5:c1:a9:4c:a6:e5:
37:95:e1:53:63:72:15:e3:34:70:30:68:cb:6b:e9:
86:59:a7:99:f7:5c:2e:0a:63:9e:e6:32:55:c0:94:
f5:d9:b4:d4:73:23:b2:0b:59:72:b8:74:8f:be:94:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:9C:CA:62:FF:0C:CC:9F:B3:7F:92:EE:15:EA:3C:26:B6:35:7C
X509v3 Authority Key Identifier:
keyid:FF:BD:24:73:20:45:C3:98:6B:40:4E:B4:EE:85:E9:F4:07:49:FA:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_70kcyBFw5hrQE607oXp9AdJ-ms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:f5:c3:6d:59:a7:de:52:f7:a0:b6:34:fc:2e:f6:0b:f2:d1:
8f:7b:cd:45:ff:a5:bc:1e:1e:6a:c7:7f:18:c2:1f:02:d2:ea:
00:ae:98:cb:aa:d2:2b:bb:09:f2:15:94:34:43:72:f9:48:f5:
d4:9c:2e:b9:30:76:3f:16:cf:a0:75:83:97:e7:86:ec:c2:7d:
1a:3f:a0:c1:af:1c:35:e1:56:a7:99:72:63:ee:a9:29:63:10:
8f:3d:f8:28:df:ba:a1:3b:50:17:87:50:35:f4:52:3b:06:f0:
14:54:dc:9c:14:17:46:a2:18:5f:de:45:15:57:b4:5f:be:b4:
f8:de:77:0a:d4:05:1d:60:5a:21:3e:f4:65:f4:19:85:c8:24:
6c:75:b5:24:db:11:99:f8:16:1b:57:cc:5f:c1:f6:14:9e:f3:
8b:c7:2d:06:c9:03:0c:2f:bd:a5:ea:ae:2f:44:ef:1f:f8:52:
43:93:33:c7:2e:6f:7b:bc:f0:f7:68:5a:ca:68:fc:a8:20:c7:
2a:55:82:2b:00:1a:88:e3:43:01:8b:f1:46:8a:08:b5:92:d6:
bf:7e:18:d1:a9:41:f3:0a:68:11:8f:e7:3c:3c:5e:98:fd:1a:
4e:5e:ac:8c:e1:a0:9b:e6:f2:29:c5:39:81:bc:52:31:ee:86:
3e:85:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:54 2025 by rpki-client