Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft
File: tWGZILjL08qnMy3Uu5GM4uZcmlI.mft (raw, json)
Hash identifier: K3ecJha2Xh5Hq+yeMV5zsVKySDbf/DVyaMjOe7bPAkw=
Subject key identifier: 84:E2:E5:99:8E:9D:9B:86:DF:96:33:76:93:CD:0B:BE:7F:8A:5F:54
Authority key identifier: B5:61:99:20:B8:CB:D3:CA:A7:33:2D:D4:BB:91:8C:E2:E6:5C:9A:52
Certificate issuer: /CN=B5619920B8CBD3CAA7332DD4BB918CE2E65C9A52
Certificate serial: 07FE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tWGZILjL08qnMy3Uu5GM4uZcmlI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft
Manifest number: 07FE
Signing time: Fri 21 Mar 2025 01:27:02 +0000
Manifest this update: Fri 21 Mar 2025 01:27:02 +0000
Manifest next update: Fri 21 Mar 2025 07:27:02 +0000
Files and hashes: 1: tWGZILjL08qnMy3Uu5GM4uZcmlI.crl (hash: O4oqvvSWB4oU/U43ah3g43QoAURk3rLHp0zrIbbp9vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5619920B8CBD3CAA7332DD4BB918CE2E65C9A52
Validity
Not Before: Mar 21 01:27:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=84E2E5998E9D9B86DF96337693CD0BBE7F8A5F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:2b:f3:96:58:10:7e:78:29:d4:13:8f:3c:
52:d7:5f:79:f2:df:f2:3d:23:ee:1e:b0:ee:a2:85:
29:7a:e7:03:0b:09:48:d5:02:50:f6:01:14:47:c4:
29:47:5a:0b:41:5c:49:a6:a8:4c:c4:24:91:36:3f:
f8:cf:0d:3f:11:1e:0b:2c:ee:04:36:4f:22:84:b1:
8e:0a:c3:4a:82:86:3d:54:da:0d:22:3b:27:bd:3f:
d4:44:79:04:eb:db:4a:50:01:0c:6b:7e:48:8b:fe:
a2:83:96:bd:d1:b3:1c:6d:fc:8f:0f:23:92:f0:ae:
2f:99:1f:68:14:25:c9:97:f1:88:1c:a9:d4:cd:d7:
a8:3d:a5:5b:fd:56:4b:ab:07:53:ec:37:f8:37:1b:
09:6c:04:6e:b0:e4:fa:c4:81:a5:ff:d8:e0:7c:99:
ad:9f:ae:ce:d1:0e:34:22:fa:b6:bf:f2:d0:13:89:
cb:5c:88:89:31:ef:f1:05:3c:95:df:13:7d:9a:a4:
63:4d:b5:2b:2a:b7:db:bc:af:6a:c0:b7:ad:ed:4b:
6a:e9:f0:65:76:d6:b1:06:e3:f7:a8:5b:d1:0a:68:
a7:58:90:83:27:b7:52:b6:67:02:fb:3d:4e:8a:2e:
56:45:f6:de:5e:7a:54:ca:bf:96:af:9e:50:00:25:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:E5:99:8E:9D:9B:86:DF:96:33:76:93:CD:0B:BE:7F:8A:5F:54
X509v3 Authority Key Identifier:
keyid:B5:61:99:20:B8:CB:D3:CA:A7:33:2D:D4:BB:91:8C:E2:E6:5C:9A:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tWGZILjL08qnMy3Uu5GM4uZcmlI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/tWGZILjL08qnMy3Uu5GM4uZcmlI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:00:5d:b8:db:91:c5:a2:91:ca:94:b2:ad:05:b9:dd:d6:b0:
58:6c:ea:8a:62:b4:19:6f:44:f0:b5:0e:54:5a:58:23:1e:dc:
83:0e:05:05:f1:45:e0:cf:b1:8e:4c:f6:28:21:08:98:06:b4:
4b:d1:28:8f:8e:79:87:9a:6e:43:05:57:ad:58:c6:b4:4a:55:
d5:42:7f:59:8a:1e:42:7d:bf:e2:30:9c:6a:06:ab:49:e0:97:
d0:40:5f:a4:79:3a:4d:e4:7f:eb:f4:70:bf:d9:a4:91:f2:00:
d0:4c:b5:88:07:71:c2:d8:89:60:f6:23:50:46:c0:2d:80:6d:
30:59:44:39:90:10:fa:7a:2e:18:df:fa:4a:51:70:44:72:6d:
de:a2:d1:04:f7:3d:6b:b9:9e:46:d1:b2:30:1c:e1:2c:e2:df:
1c:1a:f7:86:b6:46:4c:79:af:c6:09:e5:3e:d9:30:a6:3c:f0:
49:13:17:0b:55:9f:a5:de:2c:9c:ad:c4:fd:7d:a2:66:90:a6:
7f:ef:a5:b6:20:b4:88:c7:1d:6a:b6:33:9b:c1:61:01:e4:cb:
64:50:6d:c5:c4:77:94:fa:24:c7:f5:0f:2d:7f:f1:70:b3:19:
87:b0:a0:70:8d:31:20:07:e1:32:9e:93:40:82:e6:f5:31:9a:
8b:9d:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:44 2025 by rpki-client