Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
File: TS1a-PNilt7eZELYEcBKdAhswCk.mft (raw, json)
Hash identifier: 00JfnIdigK0exZl/E8gXxHKosc2w9S3xyZc62+jneZA=
Subject key identifier: FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34
Authority key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
Certificate issuer: /CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029
Certificate serial: 1C9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
Manifest number: 1C9A
Signing time: Sat 26 Apr 2025 13:09:54 +0000
Manifest this update: Sat 26 Apr 2025 13:09:54 +0000
Manifest next update: Sat 26 Apr 2025 19:09:54 +0000
Files and hashes: 1: TS1a-PNilt7eZELYEcBKdAhswCk.crl (hash: 9Pi7PKxcDN+26jCdBb30JXkyXCQdPX7U0XG9eWiEKoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7322 (0x1c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029
Validity
Not Before: Apr 26 13:09:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FB05EB7D2AA945F23FDF3EE47C8BEE704F06A134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:4f:7d:fc:28:2d:d7:cd:f1:6e:6e:4e:d9:
d7:54:74:5a:df:76:cd:82:70:0b:4d:ee:b7:b7:8a:
50:8a:b1:fd:c2:a7:0e:ac:0d:35:a3:59:47:52:b8:
da:5c:4c:59:79:1d:ae:1f:06:ce:31:bb:67:03:b6:
18:7e:e6:6f:b9:2d:27:2b:59:a3:bd:d1:b7:7a:f2:
c5:8f:5a:14:3c:c4:51:a6:7f:4b:42:fb:76:88:0d:
7f:f8:2d:36:29:1b:73:31:02:b2:f6:2f:84:c0:17:
67:5c:9e:b7:db:48:f1:e1:f9:1d:53:15:38:19:5e:
9e:3b:65:09:3d:2d:2b:14:9e:e9:44:ee:5c:fb:4c:
6d:31:68:42:0f:12:1f:f5:d2:50:57:ee:dc:a3:77:
c4:e0:1c:65:0a:c3:fc:6d:98:0f:25:b7:51:c6:88:
34:3f:65:e9:e9:5b:8d:6e:64:75:b1:50:74:51:59:
e7:21:fe:84:62:ef:e2:e4:8f:95:08:7e:7e:2f:b3:
b7:d6:09:18:c8:aa:3b:86:c9:89:66:76:c6:c6:07:
8e:d9:19:9f:90:61:8e:3d:27:fb:d9:bc:21:3b:7e:
f5:25:c9:e2:00:6e:22:09:21:da:1e:b3:8d:cd:73:
4c:a5:38:1f:4d:7e:47:0f:6d:cc:38:75:61:6a:b8:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:EB:7D:2A:A9:45:F2:3F:DF:3E:E4:7C:8B:EE:70:4F:06:A1:34
X509v3 Authority Key Identifier:
keyid:4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:9f:39:49:d4:95:4f:94:7a:7a:41:e5:d8:91:18:f4:4a:
2f:a7:8d:42:eb:1f:80:93:ec:42:5c:a5:92:a3:dc:03:2f:b7:
8d:cc:67:9d:01:a1:0c:7c:5f:6f:b2:5b:d5:8f:4d:86:78:54:
63:ec:0e:d6:f7:22:08:2b:d6:30:71:36:2c:5d:86:7b:ee:00:
87:a4:2b:cf:51:9e:df:2e:44:83:49:f8:59:48:80:b9:c5:ba:
ed:17:d3:6a:88:f0:02:dc:b6:bb:0f:af:75:ed:4c:06:d5:c0:
dd:c6:fb:e1:ef:14:f5:5a:20:cc:37:1b:36:6c:40:eb:02:38:
a4:64:e3:84:d5:27:4f:97:dc:0e:a7:e2:c1:e8:ca:04:70:58:
06:05:81:a7:58:ab:3d:00:0d:18:ed:d3:be:45:c1:2d:9a:05:
2a:5d:29:a7:88:09:c2:5d:da:f8:61:7b:24:7d:4a:83:36:7e:
0e:d5:2c:f8:f1:97:c3:46:2f:2f:3a:11:ac:e4:e3:ad:60:77:
89:96:2f:b9:03:b2:85:5f:c5:7e:78:b2:bb:fc:88:1c:3a:5f:
23:38:45:4b:d4:73:3a:59:ed:8d:dc:5a:d9:cd:48:c6:6e:82:
e8:dc:5a:ea:c3:91:b3:8c:bb:84:b0:88:1d:e6:ba:ae:a0:b1:
ec:e6:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:29 2025 by rpki-client