Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft
File: pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft (raw, json)
Hash identifier: uuCPIb2L6gtbYau0FeOuNHMGHlkdilXaCcp/nJAQ2hE=
Subject key identifier: AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B
Authority key identifier: A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4
Certificate issuer: /CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4
Certificate serial: 0587
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft
Manifest number: 0587
Signing time: Sat 29 Mar 2025 10:31:14 +0000
Manifest this update: Sat 29 Mar 2025 10:31:14 +0000
Manifest next update: Sat 29 Mar 2025 16:31:14 +0000
Files and hashes: 1: pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl (hash: T9XfakKnvSZKF1GkGXpPq2DBIkoXdSUj+ckWh8eDKU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1415 (0x587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4
Validity
Not Before: Mar 29 10:31:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AAE353CF829C997E97DA5A7218E20D6338F6E57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:89:a9:dc:32:8c:41:48:14:7e:01:c2:c1:
24:1e:8c:32:91:86:49:0f:04:c3:54:bb:af:16:1c:
e6:81:ca:ad:5e:93:ae:c8:fc:3b:e8:66:88:d3:40:
95:e4:33:c0:75:de:8c:a3:07:6f:4e:7d:76:1a:4a:
08:36:01:53:36:22:ca:c9:1c:c4:72:05:ec:68:8f:
5f:8d:64:7a:70:30:9d:0f:c4:96:0c:35:9c:35:3f:
75:13:fb:79:a1:41:e2:4b:83:94:06:0a:98:ba:83:
32:2f:1a:5d:df:79:12:6b:7c:a3:f4:d9:07:bd:89:
aa:99:a8:99:72:e8:73:13:bc:82:84:77:50:60:64:
d2:fc:16:05:b3:8f:32:62:16:de:1e:0d:72:05:05:
a6:e7:20:f4:8f:a1:05:d7:60:67:d3:e6:84:b3:4c:
9e:91:60:50:45:70:2c:c2:f0:6c:25:80:af:95:53:
75:3d:ef:37:3c:4d:bf:c3:a2:f3:87:8f:74:a2:da:
36:63:7b:06:6f:32:e3:c8:f2:bc:e3:99:12:1c:5a:
fa:24:be:5d:f5:39:00:19:a3:0a:70:8d:fe:7a:3c:
11:66:36:2f:22:4f:d9:4d:94:22:4e:26:dd:df:15:
21:e5:5d:b6:7b:7f:1f:ca:e6:7e:92:1b:1a:74:a1:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B
X509v3 Authority Key Identifier:
keyid:A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:98:96:7f:10:9c:ec:e8:d7:e3:55:c8:a4:36:8d:11:23:4f:
7e:0c:17:4a:c4:56:cd:f1:a5:d6:99:24:1f:5e:66:83:3f:79:
db:fc:e7:3c:c1:db:d8:09:16:63:38:ba:bd:34:e3:4f:8c:42:
0f:29:73:06:64:20:35:c5:a4:8f:d5:9e:b8:eb:74:15:d8:fa:
b8:f3:bc:23:4d:64:95:c4:bb:17:91:20:d4:ba:1b:b9:27:c6:
90:1c:7d:ca:93:4c:51:9d:42:79:c5:22:fe:3e:0c:b9:9c:9e:
b2:f7:9e:96:74:3b:83:79:89:58:1a:cf:d8:2e:90:c9:6b:a5:
fd:5c:7f:19:53:b0:63:53:34:dd:af:a4:58:2f:0b:6d:f0:8a:
b2:6e:4f:b0:75:ee:fd:c7:d0:59:49:7e:c0:6a:8d:1f:42:28:
c3:68:cb:40:f9:53:e8:01:5b:ba:95:f5:8f:ca:d6:7e:33:52:
b2:e0:84:eb:8d:88:e7:27:01:9b:89:d6:99:3c:b7:72:62:0c:
6b:dd:b9:a7:88:96:b9:dc:ba:87:00:73:ce:ed:18:8b:ab:f3:
cb:04:71:ac:08:ab:0b:0d:15:31:15:f3:55:88:7b:ee:f2:71:
5d:40:5a:14:1a:53:db:7a:ea:fa:ce:71:49:8d:c4:e8:ee:54:
37:d3:ed:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:37 2025 by rpki-client