Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
File: Ecx0P_pgKFVeC5k8550d_TD1MSU.mft (raw, json)
Hash identifier: cNDD1HieLsa6p71f8aOxUSZpu/Iiu6UOUji4Ah8y2ac=
Subject key identifier: 56:E1:40:C8:49:05:DC:87:D1:6E:10:6E:6A:5A:AA:A5:1B:99:6D:FE
Authority key identifier: 11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25
Certificate issuer: /CN=11CC743FFA6028555E0B993CE79D1DFD30F53125
Certificate serial: 0152
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
Manifest number: 0152
Signing time: Mon 17 Feb 2025 19:27:23 +0000
Manifest this update: Mon 17 Feb 2025 19:27:23 +0000
Manifest next update: Tue 18 Feb 2025 01:27:23 +0000
Files and hashes: 1: Ecx0P_pgKFVeC5k8550d_TD1MSU.crl (hash: f5/y2Fw0vJvLFU2F82DtB3mA/7yMbPFRNxRUDb9Yrec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11CC743FFA6028555E0B993CE79D1DFD30F53125
Validity
Not Before: Feb 17 19:27:23 2025 GMT
Not After : Dec 10 08:49:25 2025 GMT
Subject: CN=56E140C84905DC87D16E106E6A5AAAA51B996DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:eb:87:5d:c6:d2:5b:8c:27:b5:5d:cf:fa:
5d:ae:21:6f:e3:5c:5f:50:55:c9:8f:a2:60:52:05:
16:4d:a2:47:59:f4:88:12:b4:01:e3:f7:86:70:3b:
b8:11:21:98:bd:74:af:34:95:e3:6a:5d:b1:88:72:
6e:25:12:73:d6:41:7c:78:86:e2:6d:64:92:97:fe:
5d:26:97:01:66:96:30:f8:e2:66:d6:ee:27:c5:5d:
a7:d8:a7:18:35:4c:8f:34:42:a5:d2:f2:99:40:4e:
71:5a:cc:ff:dc:94:5c:82:c3:55:90:ce:78:09:83:
e7:00:d5:e9:df:f3:92:b6:7a:65:71:ea:63:09:d8:
84:4c:cd:d8:71:b9:b3:0f:84:f7:17:c3:96:3d:f7:
3f:d8:f9:6f:88:a0:dc:96:36:76:bb:ee:a4:dd:2d:
4f:17:bc:79:15:2d:f6:fd:f8:6b:c6:15:38:39:cb:
6f:98:b3:71:46:af:30:a2:53:62:9f:13:f6:1c:37:
ff:e2:a4:ca:ad:66:d9:e7:6a:17:8e:56:18:8f:38:
97:20:2b:7d:28:d7:67:b6:3f:ee:cb:16:71:b5:c2:
e4:d2:f1:47:3e:b3:2f:4f:9e:05:27:4f:c9:33:a8:
6e:44:59:bc:e2:34:b1:85:64:12:74:67:e7:79:28:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:40:C8:49:05:DC:87:D1:6E:10:6E:6A:5A:AA:A5:1B:99:6D:FE
X509v3 Authority Key Identifier:
keyid:11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:79:8f:eb:f0:4e:bc:e4:55:ca:54:9b:b8:78:df:4b:4f:5c:
36:fd:6c:87:9c:56:41:54:1a:05:bb:d2:b4:1e:77:1f:a9:06:
98:c1:9c:4b:2c:cc:b8:ed:5f:9c:a0:44:e6:74:25:46:7b:fc:
3c:b5:46:d8:3a:f6:3d:df:93:7d:2b:99:ac:39:68:33:70:a2:
12:ad:e4:b4:0e:17:43:9f:2d:4f:04:e8:ec:0c:85:df:26:ac:
46:16:13:6c:f8:9a:bb:9e:ac:fa:f8:0f:be:17:c5:f4:69:b7:
69:ae:ab:08:46:30:24:d1:1b:7d:07:3f:9e:fa:39:e7:fb:ea:
d9:01:01:b9:1e:18:35:dd:de:0e:66:91:3d:98:12:15:c7:fa:
3c:c6:de:f9:9b:5b:5a:de:d4:19:30:ea:de:9f:d2:25:70:1b:
07:e7:78:d2:64:d6:42:08:ba:d4:3b:64:e8:86:2d:9f:35:05:
64:56:9d:da:71:85:fe:38:09:e1:97:46:22:31:61:7a:44:3c:
ad:53:a5:e5:5c:0a:87:e5:f4:44:e2:04:7f:a2:15:b2:b2:80:
2d:69:38:14:4f:85:a5:15:37:ad:7b:00:99:66:06:1c:e5:d9:
ea:bb:49:22:76:62:92:c2:97:97:8f:37:96:d5:d9:95:ca:af:
cd:da:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:12:36 2025 by rpki-client