Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.mft
File: TTF1GDx--185pMMrPUT8kM7h4D4.mft (raw, json)
Hash identifier: PUzGigNZoBdRjuswfsMxdwqBLdTj57hgbbC27/GNNjw=
Subject key identifier: 15:8A:B9:0A:F4:78:35:46:D3:BB:66:3B:63:05:D8:7D:69:66:E0:7E
Authority key identifier: 4D:31:75:18:3C:7E:FB:5F:39:A4:C3:2B:3D:44:FC:90:CE:E1:E0:3E
Certificate issuer: /CN=4D3175183C7EFB5F39A4C32B3D44FC90CEE1E03E
Certificate serial: 0A93
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TTF1GDx--185pMMrPUT8kM7h4D4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.mft
Manifest number: 0A93
Signing time: Fri 21 Mar 2025 00:26:56 +0000
Manifest this update: Fri 21 Mar 2025 00:26:56 +0000
Manifest next update: Fri 21 Mar 2025 06:26:56 +0000
Files and hashes: 1: TTF1GDx--185pMMrPUT8kM7h4D4.crl (hash: xKWe4uJh28SGffcg+0EoC/p7gYr48FycdKcelOYE8iw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D3175183C7EFB5F39A4C32B3D44FC90CEE1E03E
Validity
Not Before: Mar 21 00:26:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=158AB90AF4783546D3BB663B6305D87D6966E07E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:dd:16:3b:d3:52:b9:40:2c:40:a0:aa:02:
54:b9:1c:c6:03:94:01:62:71:01:b8:3e:4e:e2:f9:
4b:7e:52:3d:8e:df:ab:93:b5:16:30:1a:99:67:2c:
e0:db:6d:13:d5:9d:a3:9c:53:dc:15:6d:a9:6a:4c:
34:43:c4:d7:5e:61:41:b1:2c:3a:80:06:d4:aa:c0:
a8:85:4c:af:a9:80:ea:92:d5:c0:ca:88:50:08:8c:
e1:dc:dc:49:d0:be:65:95:57:64:3f:c7:c5:b6:c8:
f4:6d:b7:1b:82:71:20:29:d7:fe:bc:f1:12:d8:31:
83:b7:41:c7:c5:79:53:17:eb:bb:42:5a:6d:7a:eb:
70:03:0f:db:3f:19:d2:7b:de:92:d6:d0:3d:f8:4c:
2b:ca:42:0e:dc:e0:3e:8b:33:39:56:0b:cd:fc:9a:
8e:66:0c:5e:17:0d:f1:44:72:51:c4:77:0f:cc:af:
51:9d:ab:a0:d4:f5:9b:7d:68:9f:39:33:e5:7e:ca:
6e:a9:46:78:20:3e:10:05:54:7c:84:17:4e:b8:6d:
e4:87:e3:18:ec:46:33:db:cb:cd:8e:77:52:9f:e8:
ab:d3:66:ee:72:a4:06:6b:2b:ef:d2:a7:de:06:fa:
0c:c2:20:be:eb:85:86:39:58:10:67:1e:e8:8b:f7:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:B9:0A:F4:78:35:46:D3:BB:66:3B:63:05:D8:7D:69:66:E0:7E
X509v3 Authority Key Identifier:
keyid:4D:31:75:18:3C:7E:FB:5F:39:A4:C3:2B:3D:44:FC:90:CE:E1:E0:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TTF1GDx--185pMMrPUT8kM7h4D4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/TTF1GDx--185pMMrPUT8kM7h4D4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:d8:3a:63:24:b6:4a:8e:2b:96:b2:18:47:7a:7e:ae:bf:f3:
a3:b8:f5:50:47:e4:6b:7c:8c:01:ff:5a:1f:76:30:9a:00:d3:
6e:90:f4:0e:93:b6:5e:06:65:f8:ab:8a:0d:34:df:5c:b0:0b:
4d:c5:01:72:cd:90:99:fc:b8:7e:e7:e9:49:10:fb:5c:a0:aa:
1f:d0:b5:33:f5:58:67:3a:65:ef:1c:85:2d:c0:fe:81:6d:60:
71:03:2a:3f:db:4c:7d:fd:e9:34:c0:0d:78:02:3b:48:f3:8c:
f1:84:7d:4e:60:7a:88:66:c0:ae:53:22:48:93:5b:9b:d4:7e:
a7:7c:17:f0:b0:07:20:3e:cf:18:b5:b4:7f:00:b4:c5:75:f4:
6e:a1:b1:46:be:eb:4b:d5:7f:38:da:0f:b8:de:99:45:5e:56:
08:d4:b6:9a:65:3d:4b:86:67:e1:64:af:04:db:a8:52:4f:c8:
cc:73:76:db:eb:cc:82:86:a3:c7:d4:35:75:c5:3c:1b:a3:49:
e7:f7:28:7a:17:6b:96:07:c4:d1:b3:a8:e0:c2:14:d9:b1:35:
78:ff:f9:d6:fb:23:4a:3b:5e:be:df:76:f0:2c:21:44:c3:a9:
01:32:fd:e9:98:6e:6b:22:6a:d0:0e:6d:6c:ce:25:03:a5:37:
ad:b6:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:15 2025 by rpki-client