Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft
File: _oQChpLxLQXu2qBVm09ecNjMNDA.mft (raw, json)
Hash identifier: w0KDiwG8Ymz9Uo667hEF7C6Wg3MwelO9siHEE3su2AQ=
Subject key identifier: 0E:E5:E8:A1:D3:AC:93:C4:20:D9:9B:5E:CE:10:99:DB:CF:D2:E5:CC
Authority key identifier: FE:84:02:86:92:F1:2D:05:EE:DA:A0:55:9B:4F:5E:70:D8:CC:34:30
Certificate issuer: /CN=FE84028692F12D05EEDAA0559B4F5E70D8CC3430
Certificate serial: 026F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_oQChpLxLQXu2qBVm09ecNjMNDA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft
Manifest number: 026F
Signing time: Fri 21 Mar 2025 00:31:36 +0000
Manifest this update: Fri 21 Mar 2025 00:31:36 +0000
Manifest next update: Fri 21 Mar 2025 06:31:36 +0000
Files and hashes: 1: _oQChpLxLQXu2qBVm09ecNjMNDA.crl (hash: aRKiHPuN6xTOAlfHiCb1ACUsGpj37VTw8JwR2YqExWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE84028692F12D05EEDAA0559B4F5E70D8CC3430
Validity
Not Before: Mar 21 00:31:36 2025 GMT
Not After : Oct 18 02:16:55 2025 GMT
Subject: CN=0EE5E8A1D3AC93C420D99B5ECE1099DBCFD2E5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:0e:60:8f:fd:6f:17:6f:59:0f:25:37:ae:
05:4a:da:1b:89:c7:e0:06:66:85:c9:4a:2d:37:a0:
8b:96:b9:38:70:8e:68:b9:2a:95:e4:28:9f:77:f9:
52:b2:66:e9:3d:24:31:21:bd:3a:1f:9a:38:27:7a:
ad:67:10:5f:76:50:b2:91:9f:9f:d9:8d:1a:17:fd:
8b:b3:91:b4:c2:80:b3:41:63:83:1a:3a:86:a5:b5:
d1:d8:c7:69:6c:8a:ab:08:85:a6:e1:21:55:ae:18:
d2:9f:91:a0:65:f1:5c:55:7e:92:8c:2a:79:98:f9:
f2:b5:43:ec:3f:04:24:24:f9:c3:45:24:bf:c6:4e:
25:0a:0b:db:28:49:61:34:47:b8:00:86:23:db:96:
87:5b:43:69:e5:ee:ce:4b:8a:27:45:99:38:76:19:
b7:cf:e9:6f:ad:38:3f:52:7d:ef:9c:dd:35:ae:1e:
fa:97:2c:e8:f0:2d:d6:1c:67:93:d1:0e:05:48:45:
6a:2f:16:26:58:f9:aa:d8:2a:e0:7e:d2:6f:fd:b3:
87:ae:45:b7:79:cf:2c:84:ad:f7:b7:88:ae:de:7c:
af:8e:3b:f0:6a:ba:ed:b5:a2:01:01:e3:a3:22:6e:
dc:39:31:d5:1c:2d:b5:65:a8:8e:26:67:dc:e5:e5:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:E8:A1:D3:AC:93:C4:20:D9:9B:5E:CE:10:99:DB:CF:D2:E5:CC
X509v3 Authority Key Identifier:
keyid:FE:84:02:86:92:F1:2D:05:EE:DA:A0:55:9B:4F:5E:70:D8:CC:34:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_oQChpLxLQXu2qBVm09ecNjMNDA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/_oQChpLxLQXu2qBVm09ecNjMNDA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:72:4f:d1:df:ae:74:f3:eb:25:c7:ac:f9:64:9e:2b:85:5d:
9d:0b:6f:1f:e6:62:a3:f2:2c:5b:3e:c4:eb:12:d3:f6:fc:78:
36:7f:dc:ac:7a:15:7d:4c:1d:57:8d:e1:e7:69:0e:2a:66:b8:
f1:c7:e6:29:52:c8:de:7a:af:40:04:9f:46:41:91:f4:dc:34:
54:d2:28:29:f9:9d:49:e6:8c:57:07:c3:8d:e9:cf:a7:fd:18:
36:8e:48:60:0c:33:28:a8:f0:ae:f2:1a:43:b6:0f:6d:a3:41:
6c:fe:ee:af:7e:3a:d1:f6:5c:72:96:4c:97:2f:ee:83:ea:ff:
6c:b4:b4:11:1f:4d:58:cc:78:2d:ff:92:48:91:b1:20:b6:bd:
d8:45:a6:00:01:7d:08:9c:c2:c2:5c:20:ab:f6:79:bf:d6:42:
d8:81:74:2a:3c:45:41:17:3d:27:23:51:41:a5:0d:8e:ae:ec:
8d:9e:91:f6:79:6c:46:fd:d5:db:08:8e:a8:71:b7:a4:8c:8a:
21:76:ec:cc:76:c3:be:1f:fb:ce:92:af:db:3c:79:53:7b:dd:
75:ee:9b:e5:49:b4:30:cb:d1:60:9b:01:d0:a7:3d:b8:b2:a8:
02:0b:6d:21:aa:84:43:3b:6d:e7:10:6c:6b:4d:be:85:ee:0c:
0e:e6:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:51 2025 by rpki-client