Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft
File: OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft (raw, json)
Hash identifier: SWPh+FeXOva4OuJ3O/9wbGy+CVd6MwAaNplzo916gFE=
Subject key identifier: A2:B1:0D:87:B2:0C:1D:01:60:A4:67:5C:11:BF:53:A0:49:28:C5:23
Authority key identifier: 39:D2:89:C2:10:E0:ED:08:BD:30:06:0E:C8:FD:CE:6D:68:EE:69:95
Certificate issuer: /CN=39D289C210E0ED08BD30060EC8FDCE6D68EE6995
Certificate serial: 13F9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft
Manifest number: 13F9
Signing time: Sat 29 Mar 2025 10:27:53 +0000
Manifest this update: Sat 29 Mar 2025 10:27:53 +0000
Manifest next update: Sat 29 Mar 2025 16:27:53 +0000
Files and hashes: 1: OdKJwhDg7Qi9MAYOyP3ObWjuaZU.crl (hash: gr8bcCur8nUdhAxpyM588cgwrfLH8iSiLHeKS3Z5gyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5113 (0x13f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39D289C210E0ED08BD30060EC8FDCE6D68EE6995
Validity
Not Before: Mar 29 10:27:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A2B10D87B20C1D0160A4675C11BF53A04928C523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:0f:57:bf:fd:7f:fc:57:01:e7:d8:db:f1:
33:81:b6:c1:f4:14:a7:56:4d:ca:ab:f7:58:59:e2:
9c:ad:d5:06:0a:9d:1d:7d:8e:79:3e:65:bd:2f:15:
f0:d5:85:04:0b:c5:d0:fe:54:e4:6a:41:ee:79:d1:
1a:15:91:74:c2:9d:94:81:82:9d:ca:0a:3b:c2:b5:
6f:6b:50:ff:db:03:c5:02:e8:d1:4b:43:e9:84:ca:
fd:cf:93:a1:d2:ba:14:1d:79:ca:4f:87:dd:56:a8:
2a:6e:be:46:0a:78:f4:86:5d:3f:a4:8c:b0:4b:3a:
ef:1e:e6:c2:ca:e5:84:a3:1b:34:4f:8c:03:9f:09:
6a:b8:c2:ed:33:29:ee:7b:a0:ac:77:13:53:6b:4d:
fa:db:c5:49:1c:6e:c0:47:cb:45:15:b9:8b:ae:b1:
9a:4e:93:c4:7e:d0:46:63:e0:3e:25:bd:f0:3e:3c:
ad:30:ec:f0:a9:32:96:bb:ac:fa:64:6d:a6:0e:87:
22:20:90:96:a4:6d:c8:2f:ad:27:2a:ef:c4:9d:08:
d7:38:a3:52:f2:10:44:5c:33:be:16:86:c9:d7:07:
ac:82:5b:53:fb:9b:45:4c:91:80:fd:04:5f:2b:cc:
74:30:5c:7f:8c:cf:dd:71:2d:a0:2d:45:46:6b:48:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B1:0D:87:B2:0C:1D:01:60:A4:67:5C:11:BF:53:A0:49:28:C5:23
X509v3 Authority Key Identifier:
keyid:39:D2:89:C2:10:E0:ED:08:BD:30:06:0E:C8:FD:CE:6D:68:EE:69:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:45:66:e7:9d:42:ad:39:0e:2b:3f:96:af:11:b8:f4:9b:8a:
37:e5:34:58:3f:84:00:e5:fd:7d:3f:0a:e4:e9:ad:c0:85:1f:
06:7a:f1:28:43:44:66:87:b7:0e:31:b7:3a:2b:6b:3f:b4:0b:
ad:43:32:7d:b5:72:89:8b:c6:da:67:e9:c4:34:46:37:7e:48:
6d:31:c5:52:52:7e:a2:f4:d3:67:1d:c9:35:21:ce:0a:df:58:
95:43:ba:a1:e5:3f:33:e4:1b:bb:19:7b:6f:d4:ff:39:91:f1:
b2:e9:00:16:a3:d9:9d:95:22:37:3c:34:90:83:59:6c:47:ed:
6e:62:23:ba:78:cf:16:5e:56:bd:b4:05:ff:dd:99:5a:46:fc:
68:fd:cd:56:52:a2:1f:0a:8a:ed:df:0f:a2:ff:51:4a:cb:06:
3e:2c:01:51:ef:c1:6a:e4:2b:a4:0a:5b:4e:81:d6:49:aa:10:
e5:38:eb:e0:7e:9c:88:de:c3:48:e1:3f:64:8c:53:91:b2:b0:
a2:f0:43:28:19:88:04:c0:cb:27:45:66:f7:b7:0b:f9:86:c7:
0a:ff:ba:bf:4d:79:c9:65:18:56:13:c5:36:ad:d6:3c:d9:0f:
e0:ff:21:76:9a:06:1d:bf:ea:53:69:60:49:ea:5e:3b:d9:98:
e7:e6:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:54 2025 by rpki-client