Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft
File: g2eaAxes-IsHQxilTVxsUgNpgus.mft (raw, json)
Hash identifier: LYBdfKSKLnjZfMU5GN9lAq5sMJ6N9KY+TbXfOxC6JVw=
Subject key identifier: 9A:8B:3A:34:1B:CD:FC:F8:C0:5C:78:AA:96:B5:29:FA:04:AA:66:99
Authority key identifier: 83:67:9A:03:17:AC:F8:8B:07:43:18:A5:4D:5C:6C:52:03:69:82:EB
Certificate issuer: /CN=83679A0317ACF88B074318A54D5C6C52036982EB
Certificate serial: 1CDA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft
Manifest number: 1CDA
Signing time: Sat 26 Apr 2025 13:10:46 +0000
Manifest this update: Sat 26 Apr 2025 13:10:46 +0000
Manifest next update: Sat 26 Apr 2025 19:10:46 +0000
Files and hashes: 1: g2eaAxes-IsHQxilTVxsUgNpgus.crl (hash: 7pUjvIbnCvGTwY9V4QS8VeVAmZ0vS09A0eC07JmISm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7386 (0x1cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83679A0317ACF88B074318A54D5C6C52036982EB
Validity
Not Before: Apr 26 13:10:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9A8B3A341BCDFCF8C05C78AA96B529FA04AA6699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:12:79:e3:f6:44:c5:72:aa:8c:bd:ac:5c:
7a:57:ce:c2:f2:cf:ad:3f:97:24:2b:ea:80:c6:fb:
2a:7d:c2:79:63:ce:86:94:c0:a0:50:4b:26:d6:62:
a8:2b:31:e0:5f:ec:a4:20:ba:fa:ba:4b:ab:8e:3c:
89:7a:fb:1d:c0:d2:18:6e:4e:13:04:91:e7:f7:68:
bb:ae:ef:01:be:dc:96:b2:f6:39:fa:58:6e:ce:d4:
e2:2c:21:ec:9e:20:25:4f:20:41:72:40:5b:5c:29:
bf:32:13:ee:13:5a:26:a7:a8:5f:d0:47:5d:a9:0d:
cc:62:69:8d:39:25:19:fa:fe:6b:e9:a8:c4:32:45:
8c:0d:68:55:92:90:20:b8:26:68:05:0f:84:5d:9c:
78:5b:9b:5f:74:ab:85:c5:ed:75:bb:93:b9:38:21:
52:fd:70:e9:ca:ab:73:11:9c:2f:b7:55:3a:a7:df:
2d:49:6f:2a:87:65:fe:e6:81:5d:0e:cf:e5:ae:14:
fa:8d:35:fd:fc:8b:f3:15:18:0f:f9:dc:79:04:e4:
03:80:aa:47:56:1f:f7:e4:85:92:a3:53:cb:cb:c4:
fe:4c:d8:75:09:74:f7:67:b1:6a:e9:62:49:eb:3c:
f5:88:30:bd:5d:bb:8a:2b:dc:cd:8a:37:aa:d3:46:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:3A:34:1B:CD:FC:F8:C0:5C:78:AA:96:B5:29:FA:04:AA:66:99
X509v3 Authority Key Identifier:
keyid:83:67:9A:03:17:AC:F8:8B:07:43:18:A5:4D:5C:6C:52:03:69:82:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g2eaAxes-IsHQxilTVxsUgNpgus.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/g2eaAxes-IsHQxilTVxsUgNpgus.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6f:ad:93:54:65:6e:85:18:8d:1a:ec:08:e4:a2:31:fd:dc:
10:1c:a3:07:7f:97:58:81:8a:fa:e0:59:b6:02:eb:41:e6:f0:
07:33:02:ac:68:e9:42:7d:74:54:94:b6:bc:72:de:ab:a1:2d:
ec:23:81:de:79:3e:84:57:22:6b:b3:b8:66:14:33:ab:c9:27:
d5:4d:00:94:0f:27:6e:60:63:e4:7f:24:b8:10:8b:94:0c:a7:
95:a1:e9:a6:f7:f5:85:d7:ac:f1:65:d7:2e:86:5c:bd:74:e6:
34:1c:a1:d0:a2:5e:6d:1a:1b:1b:88:95:e5:41:f7:1d:2c:ca:
ae:83:db:c5:de:cc:33:1a:f7:70:5f:9c:08:23:fb:d0:63:62:
ff:10:6f:38:24:bd:a6:35:0a:ed:f3:88:aa:5e:4c:4f:c2:a3:
c9:d2:b9:1f:4b:9d:11:8c:2d:44:50:74:bb:c6:81:a1:7c:fa:
b4:be:94:9a:bd:ab:8b:dd:24:70:bb:b5:f9:d2:50:35:f2:99:
6f:a0:bc:2a:b3:77:ec:7d:03:c5:55:25:6f:3f:30:94:f2:37:
f2:f9:8b:df:93:ca:71:d1:ad:26:e4:db:f8:a9:70:f4:eb:22:
b3:d3:f7:82:1b:37:6a:46:d0:fe:85:a4:98:47:99:81:52:fe:
5a:ab:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:28 2025 by rpki-client