Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json)
Hash identifier: CnqZRtYs+g1wcewkN0fPVk7X4PLJUHEm4Kp4x9C5kSI=
Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Certificate serial: 055D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
Manifest number: 055D
Signing time: Sat 29 Mar 2025 08:27:07 +0000
Manifest this update: Sat 29 Mar 2025 08:27:07 +0000
Manifest next update: Sat 29 Mar 2025 14:27:07 +0000
Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: HmG7HUhoiL1kVWqY4G9JIGrWOG6ouwuX2lUnfkQQpu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Validity
Not Before: Mar 29 08:27:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce:
e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b:
b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d:
13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65:
ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30:
6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee:
3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50:
e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd:
66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59:
56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa:
72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36:
46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24:
db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97:
4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a:
e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea:
83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8:
4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
X509v3 Authority Key Identifier:
keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:bd:d8:9a:22:d2:5f:af:de:19:ea:a0:af:41:c4:f9:8b:
b6:56:92:9b:e6:90:73:f5:04:75:2e:59:60:97:e1:25:3f:c0:
5a:ec:ab:ce:78:ee:21:03:f8:bd:ae:31:2c:86:16:28:eb:a6:
f9:ea:63:51:0c:f2:fb:00:83:a6:03:25:b7:b0:b7:aa:18:6e:
5d:b3:10:e1:55:aa:cb:f6:ea:0b:f7:ec:81:60:2c:e3:3b:f0:
20:20:d6:d6:5f:c2:01:be:e2:f5:b7:f2:ec:e8:13:d5:e9:3d:
86:4f:25:3f:ab:55:b9:93:d4:f4:2c:c5:be:ba:ec:6e:77:3d:
10:b9:5e:29:7c:34:6e:b8:9a:e1:cb:25:3a:0f:c9:88:64:19:
dc:9b:e2:3d:61:a2:5a:56:55:d6:cb:e8:f7:7e:4e:77:77:b1:
7a:2e:94:ce:7c:77:3a:91:64:37:47:48:51:0d:26:44:ce:4b:
c2:45:39:65:a2:e0:cf:0b:ac:03:d3:79:ed:19:eb:e9:c9:b0:
6f:6b:dc:ee:8c:19:75:81:36:f6:0c:27:a8:1a:bd:20:19:a3:
9a:85:b3:47:3b:4c:b5:bf:b0:cf:4c:94:20:46:db:5e:f0:31:
0a:6f:1e:aa:18:b0:64:e7:4e:a4:7f:2f:b2:5a:0b:b0:e4:06:
83:ed:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:23 2025 by rpki-client