Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json)
Hash identifier: GOiFMCaX+ethSVvF+p7x7jzRfub02uzqXJVInzzgVLE=
Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Certificate serial: 05EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
Manifest number: 05EB
Signing time: Sat 26 Apr 2025 11:06:22 +0000
Manifest this update: Sat 26 Apr 2025 11:06:22 +0000
Manifest next update: Sat 26 Apr 2025 17:06:22 +0000
Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: JuOx871lq+BtCKdOEsSKIxvzYzSYqlBE+VLfPiIgfUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Validity
Not Before: Apr 26 11:06:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce:
e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b:
b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d:
13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65:
ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30:
6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee:
3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50:
e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd:
66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59:
56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa:
72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36:
46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24:
db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97:
4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a:
e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea:
83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8:
4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
X509v3 Authority Key Identifier:
keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:30:c8:46:64:21:a9:5c:77:72:eb:c9:5d:be:06:30:b6:1e:
e2:e6:48:6e:bf:08:9e:c3:64:49:bc:50:53:83:86:df:57:a5:
d1:7e:15:d3:f2:d6:b4:e9:49:23:fa:8e:e5:a7:41:42:55:6c:
5d:e0:66:85:9e:9b:54:5a:3d:3e:d0:e7:df:33:3f:e1:ac:13:
70:69:c0:da:a7:0c:2a:04:51:cb:15:e2:d8:a5:4d:68:15:09:
cd:38:41:29:c9:1d:aa:54:14:38:08:df:c8:82:50:d3:12:86:
c1:fc:28:78:0b:2e:2a:a2:dc:41:55:20:2b:1e:dd:b5:ec:88:
54:57:2f:2b:e2:dc:9e:84:ef:dc:f3:2b:3a:b0:c2:6d:be:05:
5b:b5:df:1e:05:3f:b9:90:4a:9e:bc:26:a2:d9:1e:96:a3:8c:
5f:cf:0a:43:d0:c2:83:13:08:6a:5f:a9:80:37:06:99:ec:c8:
f4:d3:06:2e:45:9a:54:6a:5b:c4:25:35:73:a2:6b:01:3b:57:
bb:10:88:b4:54:80:fa:aa:40:40:7e:4a:6f:a9:eb:25:fa:3c:
50:f6:6b:de:67:40:3a:f4:59:b2:8a:1e:1f:96:38:a1:03:c8:
9b:b8:59:ea:3d:a6:1f:9c:7b:88:f5:f9:49:c6:c5:7c:d2:b8:
fb:43:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:01 2025 by rpki-client