Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
File: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft (raw, json)
Hash identifier: XU9O5kuHG1Qb59J8FZsHfkYFpQTMOe1qv9s47SKvNxs=
Subject key identifier: 07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3
Authority key identifier: 3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA
Certificate issuer: /CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA
Certificate serial: 095F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
Manifest number: 095F
Signing time: Fri 04 Apr 2025 19:08:11 +0000
Manifest this update: Fri 04 Apr 2025 19:08:11 +0000
Manifest next update: Sat 05 Apr 2025 01:08:11 +0000
Files and hashes: 1: PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl (hash: sdyoRR+wkiTgC+l0NZxRezy/5JQKRcgZPPNUNlCSeKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C08EFD59809C19FA13AF4464F074EF2D8230FBA
Validity
Not Before: Apr 4 19:08:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=074D0AC2BAE811F7784C6BDE285A83A1EF259DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:6e:10:c5:a5:7f:48:a5:30:8d:d9:ff:92:
31:c7:f3:6f:c3:9d:87:43:8f:17:92:1a:0b:87:a4:
43:d8:0e:5b:24:2c:4a:38:51:ec:89:c8:49:67:de:
82:53:ee:cf:e4:25:36:e2:54:0a:be:24:0e:76:ef:
2e:ca:ba:ba:7a:f4:ff:8f:ae:f6:d5:6c:05:ae:4b:
50:2c:e3:0b:19:92:f3:29:c6:c6:91:d2:5f:03:77:
e7:45:26:7f:b9:40:6e:ff:99:ab:7e:c1:7f:d0:ce:
cd:e8:10:3d:57:31:c8:c9:d5:d6:5f:3f:98:44:b7:
08:d3:40:b9:ae:6c:31:22:77:c9:2d:2d:a3:6a:85:
f8:ba:a1:bb:e2:15:e4:a5:a5:1c:fb:d9:09:63:11:
95:e5:43:0e:8f:68:79:ad:a8:0e:4a:2f:c5:be:02:
5d:22:fc:f3:8a:26:9a:24:52:de:83:52:02:a2:89:
58:ae:c3:eb:dd:64:a2:b8:bf:d3:94:98:da:20:8b:
84:4c:6d:7c:bf:6a:e1:62:af:a6:0d:85:69:8a:44:
15:cd:b3:3a:32:ee:df:ac:e9:eb:74:33:a5:2b:91:
25:40:77:44:08:1d:74:2d:1f:d9:5b:1e:51:bb:6f:
40:73:63:fb:88:5c:1f:8e:2d:aa:ab:12:d5:a6:41:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:0A:C2:BA:E8:11:F7:78:4C:6B:DE:28:5A:83:A1:EF:25:9D:E3
X509v3 Authority Key Identifier:
keyid:3C:08:EF:D5:98:09:C1:9F:A1:3A:F4:46:4F:07:4E:F2:D8:23:0F:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3247/PAjv1ZgJwZ-hOvRGTwdO8tgjD7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:68:61:b3:73:35:d1:3c:b9:da:bf:4e:4b:23:16:40:33:21:
e5:36:50:ed:fb:66:3e:e2:b2:9d:1f:69:9b:ab:fa:53:de:3c:
53:71:ab:a3:fb:81:8c:b3:0f:4f:1d:99:7c:0c:c3:04:3a:47:
3b:60:12:81:a3:d4:91:7d:db:3f:ec:6a:ab:ef:92:bc:1f:79:
e5:bb:8f:83:88:9d:cf:a6:56:b5:2f:bb:d5:27:18:d2:48:ce:
1d:97:fa:38:b2:a9:1f:ac:b6:ba:57:2f:1f:a5:04:1a:f9:bb:
e7:58:19:1f:25:bd:a6:9d:bb:39:b6:19:5d:2f:11:f5:1d:b0:
b9:d0:2a:04:29:26:23:45:9a:60:34:31:cd:8d:6a:8c:4e:c6:
f5:ed:fd:a1:3d:a6:d3:61:99:72:56:4f:10:e8:f6:90:86:00:
af:8b:21:27:bd:8e:4f:26:9a:1b:6c:55:ff:46:43:8e:13:22:
74:33:68:0a:c9:06:a5:86:b3:49:a2:33:0a:75:2d:2b:02:b1:
3b:06:a7:9e:84:f0:93:66:9f:e4:26:55:3c:04:2e:d6:bc:ac:
c7:99:6e:17:20:42:6d:eb:83:7e:82:9a:42:6f:a7:8a:a3:ff:
9a:da:c9:3e:ab:e1:3f:f6:96:8a:83:77:63:ce:01:45:46:1b:
23:07:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:52 2025 by rpki-client