Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
File: 4gVcAoq4tapUsWMav0wjwUIFSro.mft (raw, json)
Hash identifier: flkxX605qpyk+CPbRa342sDgYOVdon8DkYRu8UGNxgA=
Subject key identifier: F0:A9:86:ED:F2:89:F4:96:B6:B6:C7:F3:4A:4E:7A:81:2D:48:11:59
Authority key identifier: E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA
Certificate issuer: /CN=E2055C028AB8B5AA54B1631ABF4C23C142054ABA
Certificate serial: 012A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4gVcAoq4tapUsWMav0wjwUIFSro.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
Manifest number: 012A
Signing time: Mon 17 Feb 2025 18:55:41 +0000
Manifest this update: Mon 17 Feb 2025 18:55:41 +0000
Manifest next update: Tue 18 Feb 2025 00:55:41 +0000
Files and hashes: 1: 4gVcAoq4tapUsWMav0wjwUIFSro.crl (hash: 7AGU7GDizJVoK2dtZx+j0xqN56xgFzUTZV3npjpqKqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2055C028AB8B5AA54B1631ABF4C23C142054ABA
Validity
Not Before: Feb 17 18:55:41 2025 GMT
Not After : Dec 20 00:30:32 2025 GMT
Subject: CN=F0A986EDF289F496B6B6C7F34A4E7A812D481159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:36:19:22:9f:71:ad:7a:63:bb:6d:8b:e7:
14:2a:9b:8d:34:51:1c:0e:75:78:49:2e:e6:1f:fa:
50:bb:c2:1c:21:41:42:02:70:84:ef:dc:73:16:29:
c5:f7:b9:b0:7d:85:66:c8:39:58:34:d1:fe:f8:d9:
19:e7:e7:66:9f:22:a7:e5:c4:60:c9:72:73:a9:c8:
1c:3e:74:0f:e0:be:69:09:6d:b6:73:75:46:b1:0a:
da:32:84:3e:76:c4:9e:4f:c2:a4:45:02:5d:29:cf:
e9:bf:a9:f7:24:5e:07:3f:5c:1f:ad:7d:1a:b9:ec:
b4:c9:02:8a:fa:bb:c4:53:70:98:5a:c3:76:1f:54:
a8:d4:65:a9:28:b9:af:a6:79:39:b2:78:f2:2b:35:
5f:69:07:25:b6:70:b1:bd:5d:12:79:5f:00:c9:84:
bb:1f:93:d1:a7:ac:bf:eb:78:65:3a:c6:62:f0:ae:
e5:ec:e3:d4:93:d5:8e:f2:0c:70:2b:a6:48:00:65:
dd:eb:b1:d2:3d:ef:14:d5:87:01:24:a7:fd:92:63:
b8:13:f6:f3:8b:96:3b:fb:41:29:d8:b3:d9:26:ae:
74:31:3b:56:6d:ea:dc:ec:12:5d:84:67:14:be:25:
85:e0:19:49:ad:55:c1:73:ea:e2:94:c1:9d:43:0c:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A9:86:ED:F2:89:F4:96:B6:B6:C7:F3:4A:4E:7A:81:2D:48:11:59
X509v3 Authority Key Identifier:
keyid:E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4gVcAoq4tapUsWMav0wjwUIFSro.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:e5:d9:e8:bc:e8:8c:f1:a1:52:3b:fe:6a:12:64:0c:08:8c:
9a:ef:9b:b6:73:9d:69:c7:1a:25:42:53:a2:3c:93:9e:89:2b:
82:8b:7c:b5:c5:09:54:32:cb:e3:28:29:54:96:93:df:1a:72:
da:87:d2:13:a9:5e:b6:c5:d0:9d:af:f7:7b:0f:b1:06:23:97:
7d:7c:99:6c:21:26:34:2f:9b:c8:a6:aa:9d:c8:34:54:38:8b:
48:39:b5:ed:35:06:44:57:52:6f:49:d3:58:f6:bb:2e:61:71:
cb:ca:2e:cc:70:94:c7:e4:89:5f:af:0e:4b:ce:46:d8:7b:aa:
7c:30:68:71:92:69:8f:d8:28:5b:69:d0:e0:02:af:b4:76:f4:
3a:36:4a:37:ba:fe:52:c1:70:b9:19:c3:7d:8f:8a:57:ec:f9:
fc:5e:74:4e:9a:78:d9:4a:91:a7:fa:2d:d1:1b:c7:cd:c2:9c:
f7:2b:57:e8:89:1e:97:ae:17:91:7a:a3:91:69:da:ce:f3:bf:
b9:d1:68:ae:8f:68:b0:ce:01:84:d6:71:97:39:7e:c3:0f:7a:
72:fe:eb:80:15:57:68:f1:3e:56:95:b9:46:43:7e:37:35:32:
7e:63:44:27:df:bb:d7:15:a8:87:d7:77:22:e2:c5:09:93:a2:
1f:3f:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:14:40 2025 by rpki-client