Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2578/GBfR2X6KEbbXPxwWXuqul0g9_ek.mft
File: GBfR2X6KEbbXPxwWXuqul0g9_ek.mft (raw, json)
Hash identifier: mWPM7VIFSCEudt4UGdV1tqIgz64FECP+EcHHYupeqcA=
Subject key identifier: DC:F5:46:B5:5E:D1:F6:F2:B5:6F:CC:A8:0F:71:87:38:B3:AE:0C:20
Authority key identifier: 18:17:D1:D9:7E:8A:11:B6:D7:3F:1C:16:5E:EA:AE:97:48:3D:FD:E9
Certificate issuer: /CN=1817D1D97E8A11B6D73F1C165EEAAE97483DFDE9
Certificate serial: 1520
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GBfR2X6KEbbXPxwWXuqul0g9_ek.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/GBfR2X6KEbbXPxwWXuqul0g9_ek.mft
Manifest number: 151C
Signing time: Fri 21 Mar 2025 00:27:07 +0000
Manifest this update: Fri 21 Mar 2025 00:27:07 +0000
Manifest next update: Fri 21 Mar 2025 06:27:07 +0000
Files and hashes: 1: GBfR2X6KEbbXPxwWXuqul0g9_ek.crl (hash: bIh06mfF/ypKz2O+T7pdcjPrx3XG0ukT85fVFKv2GvI=)
2: jeRqT-U67iHCPC6sGRXxmqGg3To.roa (hash: a/ZnvznW8+bmn2gNXwFRyzDr6mmblMwmC0wW6Xa1SWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5408 (0x1520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817D1D97E8A11B6D73F1C165EEAAE97483DFDE9
Validity
Not Before: Mar 21 00:27:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DCF546B55ED1F6F2B56FCCA80F718738B3AE0C20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:72:fe:b5:67:ff:a7:bd:ee:a3:37:9a:07:
07:f1:d3:ae:45:ab:45:9c:d8:1a:ce:7e:23:71:76:
ef:d0:34:f2:16:57:93:24:b3:ce:8a:e2:7b:84:4c:
33:10:37:e5:51:9b:5e:ab:5d:61:1b:53:37:11:32:
45:df:f4:5c:8d:5f:e4:0c:5d:69:c7:07:ce:a2:93:
a0:09:fb:3e:fa:8a:7f:00:6f:dc:f6:b3:e0:0b:62:
22:00:dc:60:32:9f:d2:9a:de:3f:15:76:18:04:78:
7c:62:f4:9d:7c:73:9e:d2:69:64:4d:b8:e7:d0:f7:
93:ec:81:1e:d6:e7:55:2c:cc:3d:16:4c:33:fa:0f:
24:9a:e6:e7:7d:0c:07:88:5c:88:ba:1c:41:c4:6a:
74:89:9a:f9:5a:90:21:63:ac:01:a6:82:be:34:dd:
25:08:d8:64:02:0f:06:0d:41:f1:b0:55:1d:1a:c0:
5e:ad:35:42:de:6e:9d:5c:a7:88:e9:20:88:7f:eb:
dc:1f:14:23:55:f8:80:7c:ca:cf:70:3b:83:60:d5:
22:3d:23:e6:a0:fd:1d:54:21:10:e8:82:bc:5f:78:
f7:82:83:24:c6:9e:04:0b:11:0e:34:fe:31:9d:db:
ba:a7:65:e9:0b:c6:73:7f:c1:50:f3:ec:75:b1:fa:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:46:B5:5E:D1:F6:F2:B5:6F:CC:A8:0F:71:87:38:B3:AE:0C:20
X509v3 Authority Key Identifier:
keyid:18:17:D1:D9:7E:8A:11:B6:D7:3F:1C:16:5E:EA:AE:97:48:3D:FD:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/GBfR2X6KEbbXPxwWXuqul0g9_ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GBfR2X6KEbbXPxwWXuqul0g9_ek.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/GBfR2X6KEbbXPxwWXuqul0g9_ek.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:30:f2:d0:72:2b:c8:6a:c6:96:91:d5:dd:23:1d:81:a6:
ea:14:a1:01:88:d0:84:38:ac:12:29:08:17:65:fa:02:dc:32:
41:da:b8:d0:3f:1a:4c:3b:88:32:e9:94:10:fc:d9:79:be:6b:
fd:5e:d3:4f:39:e6:66:5d:8c:65:c5:99:c5:65:7e:2b:90:b7:
fe:05:87:f1:2b:7a:b4:31:f3:39:c5:55:31:0a:07:a6:35:55:
c0:71:72:09:07:1a:20:06:98:ae:7b:ce:eb:f0:ec:51:75:ac:
1a:32:f3:e4:5a:d5:71:c9:07:17:93:4c:b2:af:65:4b:06:35:
71:15:c7:c7:15:de:12:a8:6b:f5:25:b6:7d:63:ec:60:f2:4e:
72:90:61:c5:d8:e7:f1:f0:3a:4a:2f:ee:93:c7:cb:83:7c:5f:
28:68:ef:fe:69:14:f7:47:26:21:b0:f9:10:36:9d:ae:47:98:
e5:b4:d0:f3:bd:f3:2b:3e:70:5b:54:f1:b8:5f:a1:b8:9c:a7:
fd:f7:4b:10:cc:a3:af:5d:d3:48:a5:d9:9b:ac:3a:9e:cc:35:
b4:7d:0f:4d:f5:91:57:4e:a6:4f:cf:e3:a2:12:17:be:50:4f:
15:a1:b9:78:4b:d4:73:26:c4:92:c3:46:69:67:b2:bd:2e:82:
8c:53:1e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:47 2025 by rpki-client