Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
File: cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft (raw, json)
Hash identifier: tbBhbA8XzCttrfYl/5vNu+K+ccprs43OanPLiMuKZDw=
Subject key identifier: AF:20:10:86:E7:90:35:AF:0B:91:20:18:05:79:21:3F:D4:E5:D8:D7
Authority key identifier: 70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
Certificate issuer: /CN=706580629A7148E4B22189E7B91F146791116370
Certificate serial: 1369
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
Manifest number: 1355
Signing time: Thu 20 Feb 2025 22:28:20 +0000
Manifest this update: Thu 20 Feb 2025 22:28:20 +0000
Manifest next update: Fri 21 Feb 2025 04:28:20 +0000
Files and hashes: 1: cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl (hash: DMxOQ5v1kOgPdrd/idnRyFZMNhZI1dvzoEk2iTec2oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4969 (0x1369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706580629A7148E4B22189E7B91F146791116370
Validity
Not Before: Feb 20 22:28:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AF201086E79035AF0B9120180579213FD4E5D8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:0f:85:6d:61:c5:f1:31:54:e6:28:ab:e0:
97:54:f2:ac:8f:c4:fa:8c:76:7c:49:2e:a7:3e:42:
17:71:5a:f2:ad:51:11:93:65:07:26:25:65:11:6f:
eb:6e:f7:58:c0:75:c5:07:24:dd:89:01:31:8d:cf:
4d:a5:35:63:0d:30:b9:12:a6:e1:85:0f:4e:3b:9b:
f6:72:4a:b8:85:eb:be:73:94:30:62:ed:df:53:eb:
b9:60:ca:29:89:24:1d:f8:4e:69:7d:b5:2a:ce:09:
bc:4e:b6:ef:a9:28:d5:2f:f7:02:f8:88:1e:f8:99:
5d:f9:0d:46:1f:dc:67:00:0b:20:ec:54:f3:a3:77:
43:3f:22:7d:3d:c9:18:11:34:2a:f6:4d:8a:06:51:
3a:35:a0:fb:17:37:f7:c5:37:ab:25:da:45:9e:0f:
c6:3a:ea:97:36:17:29:c2:27:17:ea:e9:67:19:1e:
a0:6d:8e:a6:a5:ac:3e:88:e1:fa:b6:c6:76:15:aa:
63:b4:48:84:32:2f:f3:8d:42:dd:ce:98:af:cd:88:
2b:c3:0c:bc:91:5f:55:2b:fd:2e:d5:7f:d5:b0:0e:
18:35:e5:1a:a0:cc:39:dd:d0:94:88:27:85:52:d0:
44:10:97:d0:ad:9b:f1:41:9c:5e:b7:41:91:75:a9:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:10:86:E7:90:35:AF:0B:91:20:18:05:79:21:3F:D4:E5:D8:D7
X509v3 Authority Key Identifier:
keyid:70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:04:f6:db:aa:3b:04:36:98:c9:66:ed:2d:37:85:02:6b:a1:
c1:1a:61:62:e0:ee:c7:36:e4:62:07:b2:7c:14:53:38:73:69:
d7:cf:70:dd:8c:99:14:53:e9:4a:4f:59:f3:c1:fd:db:5e:d0:
d0:2d:06:ab:14:15:ad:90:10:da:5b:e5:e9:a0:66:fe:4d:99:
1f:30:46:36:b1:bd:04:4e:60:e9:25:9f:20:61:a7:5d:0c:49:
8e:38:26:13:b1:71:23:41:35:ac:75:ba:6e:c6:26:07:73:83:
f5:27:63:84:13:50:f4:05:f7:82:d1:43:6a:31:34:a8:76:46:
6f:ef:89:82:c6:8f:20:25:51:82:b7:0f:ee:da:88:6f:dd:2d:
47:61:cc:2b:bd:61:bd:03:f8:e0:5e:d0:3e:01:c4:29:51:96:
31:15:9c:85:31:7e:86:a5:f0:65:73:47:14:a7:c3:d2:87:14:
a1:76:1b:93:85:cd:80:27:e7:92:07:48:c6:b4:61:b2:6a:ca:
c0:16:39:68:51:df:78:7a:fc:6c:89:d4:ba:89:94:f5:72:14:
a8:a3:b8:86:40:63:d2:5c:ec:9d:c2:07:7c:e1:e9:d7:23:b0:
92:9d:5c:38:6c:8b:c6:64:20:97:99:1a:d7:f3:21:5c:50:e2:
51:3a:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:53 2025 by rpki-client