Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json)
Hash identifier: 7M5Y+/orqs3qRCzTrVPOrJr73UeBwrcuqQoEDetVcDI=
Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7
Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7
Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7
Certificate serial: 08A0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
Manifest number: 08A0
Signing time: Sat 29 Mar 2025 09:27:17 +0000
Manifest this update: Sat 29 Mar 2025 09:27:17 +0000
Manifest next update: Sat 29 Mar 2025 15:27:17 +0000
Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: +ojgatu0M5ZlyLz4l0pPowNbqMSilyjKBlDhakKMxFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7
Validity
Not Before: Mar 29 09:27:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14:
e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e:
04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9:
5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0:
c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed:
66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9:
23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b:
63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d:
28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1:
58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b:
3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55:
bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb:
3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e:
63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7:
92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05:
75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c:
37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7
X509v3 Authority Key Identifier:
keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:33:38:33:ed:57:8b:9a:42:97:f7:f1:bf:ba:1a:a9:65:
40:c4:18:a8:0c:16:ed:f7:e1:79:64:ed:f2:3c:2a:58:de:e0:
e8:e9:8a:b1:b0:02:9e:ea:14:4b:a6:96:1e:e6:f2:78:dd:7e:
2b:4b:ef:70:d3:28:ba:63:68:69:23:57:64:75:97:4a:44:b7:
c3:94:f3:14:6b:5c:c2:7d:25:42:48:26:0c:ca:b6:80:f9:d3:
3d:d2:e2:e2:16:d3:e6:81:91:3f:50:ba:97:a5:bb:82:19:bc:
ca:bd:09:70:dc:95:76:57:a8:8d:e9:c1:b2:00:68:83:05:42:
ec:02:81:e9:ed:a0:bf:8c:17:0e:24:de:49:40:54:52:6b:e3:
5a:f7:1f:30:12:6b:b5:ae:cb:8b:e9:bc:dd:cc:ed:c1:28:a9:
e9:fa:e5:1c:f7:ad:2e:7d:f1:5c:01:0f:31:1f:8d:34:b7:f4:
7b:d6:34:9e:32:01:e8:c3:b7:82:34:04:c2:8a:3b:1e:8c:11:
f5:b1:c8:0b:d8:23:5c:fc:42:3a:4f:cd:ff:5c:2b:28:1b:2f:
b1:0b:20:8b:c6:3d:b3:a7:a1:87:2f:92:95:ee:5c:bd:7e:cb:
4a:9b:05:ca:2a:5e:f1:46:c8:aa:ed:2c:6f:db:40:d1:dd:fd:
63:ee:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:01 2025 by rpki-client