Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.mft
File: _70kcyBFw5hrQE607oXp9AdJ-ms.mft (raw, json)
Hash identifier: GQGFdTqdk87XF+2EsXBZ2Gn8jRxHiV3Z1WLsRXekvHo=
Subject key identifier: 89:84:9C:CA:62:FF:0C:CC:9F:B3:7F:92:EE:15:EA:3C:26:B6:35:7C
Authority key identifier: FF:BD:24:73:20:45:C3:98:6B:40:4E:B4:EE:85:E9:F4:07:49:FA:6B
Certificate issuer: /CN=FFBD24732045C3986B404EB4EE85E9F40749FA6B
Certificate serial: 0A42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_70kcyBFw5hrQE607oXp9AdJ-ms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.mft
Manifest number: 0A42
Signing time: Wed 23 Oct 2024 04:21:04 +0000
Manifest this update: Wed 23 Oct 2024 04:21:04 +0000
Manifest next update: Wed 23 Oct 2024 10:21:04 +0000
Files and hashes: 1: _70kcyBFw5hrQE607oXp9AdJ-ms.crl (hash: TkklXKjpho+czDkQLfhUIpR7MmKCjrmKorphc4ixETo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFBD24732045C3986B404EB4EE85E9F40749FA6B
Validity
Not Before: Oct 23 04:21:04 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=89849CCA62FF0CCC9FB37F92EE15EA3C26B6357C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:73:7b:29:fd:f8:ba:bd:d1:5b:1f:6f:05:
82:2c:de:ee:dc:8f:1b:91:66:ba:56:83:9d:c4:2d:
f5:57:c6:c9:f9:fc:22:07:31:d5:64:a6:58:2e:21:
82:e1:cd:d4:f2:cd:4c:c7:28:58:bf:30:0a:49:e8:
c2:46:68:52:16:98:11:65:68:7b:25:f3:ef:eb:8c:
15:8e:b5:39:4f:ae:52:f2:95:ff:d3:55:1f:3a:57:
fb:cf:5e:b6:81:9f:20:5e:44:ff:70:37:d6:4e:d8:
52:d4:db:35:9f:fa:f3:b5:47:0d:15:a1:b6:07:91:
df:3b:ef:b1:b2:dc:3b:e6:d1:05:dc:55:f1:bb:c6:
32:b5:ad:1a:60:66:b8:98:89:91:3e:fe:31:12:92:
f8:14:60:0c:4e:d8:eb:a2:6b:ee:48:49:88:53:68:
f6:f7:a2:eb:b7:04:30:c2:a7:a7:c7:97:20:53:0b:
c5:65:99:f3:be:16:9c:89:50:fa:a7:15:56:55:df:
51:be:a4:0e:1d:c8:ec:d6:64:f5:c1:a9:4c:a6:e5:
37:95:e1:53:63:72:15:e3:34:70:30:68:cb:6b:e9:
86:59:a7:99:f7:5c:2e:0a:63:9e:e6:32:55:c0:94:
f5:d9:b4:d4:73:23:b2:0b:59:72:b8:74:8f:be:94:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:9C:CA:62:FF:0C:CC:9F:B3:7F:92:EE:15:EA:3C:26:B6:35:7C
X509v3 Authority Key Identifier:
keyid:FF:BD:24:73:20:45:C3:98:6B:40:4E:B4:EE:85:E9:F4:07:49:FA:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_70kcyBFw5hrQE607oXp9AdJ-ms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3217/_70kcyBFw5hrQE607oXp9AdJ-ms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c1:2c:6f:9d:4b:d5:87:0b:9c:fa:06:9e:e9:d1:7c:eb:b6:
03:56:6c:74:e0:ca:73:4e:34:db:f6:3f:fe:1e:fe:33:bf:aa:
9b:af:7e:20:d6:f0:47:c7:34:a8:e1:59:17:66:ba:f5:cb:76:
2f:68:61:d0:ac:e8:37:8c:6f:4f:7b:12:85:ff:fe:29:6d:78:
40:50:03:76:01:29:1a:ab:fe:7e:c8:ce:18:0e:30:42:d3:2a:
e0:a6:97:62:09:1a:cf:cb:0d:a4:e3:1b:d5:9e:d1:2c:13:f3:
fd:29:74:6b:b6:e3:27:8f:c3:cd:52:ad:06:71:0e:f3:2e:db:
3a:e1:ea:e8:96:09:2d:1e:fb:5a:2d:b3:cd:48:33:56:f0:6a:
be:68:40:60:37:be:50:e6:b1:15:ef:d9:63:92:7f:33:4c:25:
f9:7f:67:ee:20:1c:47:68:18:28:99:81:0f:d5:e6:d4:e3:f8:
84:ef:9e:33:f4:93:d4:38:d1:91:32:76:ae:f3:8c:05:96:5c:
76:b5:28:1b:82:7f:a1:a8:1a:2c:25:8a:ac:55:f9:7c:5c:88:
27:7a:ff:6a:a2:42:0d:4c:50:df:9e:b4:30:d8:2d:5b:b9:8c:
27:11:09:51:1d:e2:61:d4:e8:e8:75:d3:ab:ae:c2:67:29:54:
67:46:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 06:29:31 2024 by rpki-client on console-fra.rpki-client.org