Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
File: KJHRbBFPOs_eoosPXIzhRucxndI.mft (raw, json)
Hash identifier: QMt3H7JJkrzffGkpmownc9PrRS8cmpjOZcevdc2fO44=
Subject key identifier: 12:8B:DB:25:00:09:62:16:0E:FF:52:5F:45:07:AD:10:7D:B3:F9:1B
Authority key identifier: 28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2
Certificate issuer: /CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2
Certificate serial: 0319
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
Manifest number: 0319
Signing time: Fri 21 Mar 2025 00:31:06 +0000
Manifest this update: Fri 21 Mar 2025 00:31:06 +0000
Manifest next update: Fri 21 Mar 2025 06:31:06 +0000
Files and hashes: 1: KJHRbBFPOs_eoosPXIzhRucxndI.crl (hash: /1CUDcIrMb3m21VI88uBUHQC2GhwxpW7Vb231h/Sd+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2
Validity
Not Before: Mar 21 00:31:06 2025 GMT
Not After : Oct 12 07:27:43 2025 GMT
Subject: CN=128BDB25000962160EFF525F4507AD107DB3F91B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:32:54:75:d4:88:03:09:4a:b8:38:b3:ac:
8a:72:6a:ae:84:fa:a4:62:00:c6:29:9e:8d:7d:78:
ea:51:85:44:72:ac:10:c0:b3:16:be:fc:71:b7:76:
20:63:98:f5:48:d7:1f:57:8d:98:ea:88:a5:75:39:
c8:2e:df:7d:ba:6f:4e:c7:5c:fc:cf:09:e2:70:f1:
eb:07:9b:38:ac:1c:84:ca:36:f7:31:c5:de:b3:31:
d3:ff:30:3b:86:d1:4a:0d:ed:88:5d:d0:d8:8e:05:
60:0b:d6:d3:68:e0:47:90:15:67:68:4e:6e:97:cb:
aa:3a:96:8c:c4:26:af:59:cf:3c:8d:67:aa:18:be:
49:eb:7a:98:e6:21:95:03:b3:ae:6d:93:b1:90:19:
7a:4d:19:1d:2c:61:a6:93:ec:4c:15:f5:cd:b2:c2:
29:26:6c:24:61:90:49:01:90:5b:f7:70:94:58:42:
73:4f:0d:b2:3e:fe:cf:6c:0b:f5:d7:fe:1d:9f:31:
51:ff:22:f9:cb:da:ab:18:e2:bb:e8:5a:a0:64:cb:
09:99:b9:29:58:a0:7b:5c:fd:9c:c9:44:83:14:9b:
80:78:6c:16:90:08:d8:95:7d:15:63:d4:b9:13:c9:
11:7a:1a:b7:5e:53:8c:12:98:e2:61:e2:3a:c0:80:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:DB:25:00:09:62:16:0E:FF:52:5F:45:07:AD:10:7D:B3:F9:1B
X509v3 Authority Key Identifier:
keyid:28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1a:c2:f2:84:45:9b:68:45:04:e5:38:04:40:30:3f:a8:e2:
31:a2:49:25:07:e6:90:72:4e:38:95:d8:d8:19:45:28:d9:75:
da:55:56:72:d0:4c:8c:e8:09:88:e5:42:58:fd:f8:a0:59:69:
5f:46:39:f1:9d:f2:8c:6c:b9:22:10:b4:5e:7f:bd:ff:31:48:
66:5e:82:9a:98:00:79:72:b7:85:04:16:ad:43:c9:ed:21:33:
e2:31:5d:8c:ec:57:c0:5d:a2:97:67:13:22:78:d8:9c:bf:1e:
11:63:7d:ad:8f:c1:86:f3:f1:ef:41:d4:76:7a:28:82:0a:58:
c7:8d:c3:4a:b2:5e:ce:a2:b8:b6:85:46:9a:56:4e:db:43:56:
19:00:0b:29:d3:49:5a:08:99:54:63:5e:e9:6a:91:e0:f6:47:
f2:15:07:4d:d3:4b:58:e1:53:ab:c9:87:ad:e4:9d:af:c0:4c:
23:c7:d2:87:46:80:95:e2:2e:cf:13:80:41:85:57:21:39:84:
d9:f8:2c:3c:a9:a4:84:07:82:10:28:79:18:dd:12:41:7c:99:
4c:34:bf:17:59:0b:64:d7:3f:d0:f8:b0:70:7b:17:a5:18:1b:
5b:a1:b3:bb:05:b0:96:81:9b:c2:7d:7a:99:aa:49:0b:47:e6:
ec:24:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:16 2025 by rpki-client