Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
File: cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft (raw, json)
Hash identifier: Z5R5oUQ8ivOhV8ksn53Q0RwkvTIRGU0MBMtg+RkF5Mo=
Subject key identifier: AF:20:10:86:E7:90:35:AF:0B:91:20:18:05:79:21:3F:D4:E5:D8:D7
Authority key identifier: 70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
Certificate issuer: /CN=706580629A7148E4B22189E7B91F146791116370
Certificate serial: 135A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
Manifest number: 1346
Signing time: Mon 17 Feb 2025 20:27:59 +0000
Manifest this update: Mon 17 Feb 2025 20:27:59 +0000
Manifest next update: Tue 18 Feb 2025 02:27:59 +0000
Files and hashes: 1: cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl (hash: a+BGz4bjkkjwy12V0SRlv71jwCCKahJD45nkRNwszSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4954 (0x135a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706580629A7148E4B22189E7B91F146791116370
Validity
Not Before: Feb 17 20:27:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AF201086E79035AF0B9120180579213FD4E5D8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:0f:85:6d:61:c5:f1:31:54:e6:28:ab:e0:
97:54:f2:ac:8f:c4:fa:8c:76:7c:49:2e:a7:3e:42:
17:71:5a:f2:ad:51:11:93:65:07:26:25:65:11:6f:
eb:6e:f7:58:c0:75:c5:07:24:dd:89:01:31:8d:cf:
4d:a5:35:63:0d:30:b9:12:a6:e1:85:0f:4e:3b:9b:
f6:72:4a:b8:85:eb:be:73:94:30:62:ed:df:53:eb:
b9:60:ca:29:89:24:1d:f8:4e:69:7d:b5:2a:ce:09:
bc:4e:b6:ef:a9:28:d5:2f:f7:02:f8:88:1e:f8:99:
5d:f9:0d:46:1f:dc:67:00:0b:20:ec:54:f3:a3:77:
43:3f:22:7d:3d:c9:18:11:34:2a:f6:4d:8a:06:51:
3a:35:a0:fb:17:37:f7:c5:37:ab:25:da:45:9e:0f:
c6:3a:ea:97:36:17:29:c2:27:17:ea:e9:67:19:1e:
a0:6d:8e:a6:a5:ac:3e:88:e1:fa:b6:c6:76:15:aa:
63:b4:48:84:32:2f:f3:8d:42:dd:ce:98:af:cd:88:
2b:c3:0c:bc:91:5f:55:2b:fd:2e:d5:7f:d5:b0:0e:
18:35:e5:1a:a0:cc:39:dd:d0:94:88:27:85:52:d0:
44:10:97:d0:ad:9b:f1:41:9c:5e:b7:41:91:75:a9:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:10:86:E7:90:35:AF:0B:91:20:18:05:79:21:3F:D4:E5:D8:D7
X509v3 Authority Key Identifier:
keyid:70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ac:79:d9:eb:04:e6:9c:52:14:c4:c3:ae:c6:84:e6:6f:dc:
f8:cf:fe:55:c6:db:70:0b:66:b2:1c:d1:9e:f8:79:c0:e8:b6:
d6:6f:96:d6:86:34:28:b6:6c:f4:4a:c5:d0:ee:1a:40:1e:6d:
00:22:06:66:8c:eb:67:7e:3e:66:12:8d:7c:d5:f8:e3:87:b1:
04:cd:75:a4:0d:6e:96:66:12:04:b1:f3:a2:5f:52:0c:93:8e:
d5:da:58:82:a1:a7:fa:4a:ad:7d:ea:13:2c:a5:b2:a9:dc:78:
b4:c2:9c:e2:6f:9b:42:6c:6a:26:b1:3a:a6:70:8e:1b:9c:4b:
44:fd:0a:48:ed:65:d1:3c:d2:5d:2f:0c:7f:5c:3c:10:78:ce:
24:ef:bd:20:a4:9f:69:68:65:1e:c7:d1:ed:59:57:01:fa:5b:
44:82:de:e8:ee:8d:ad:b5:e0:4c:4d:c6:20:03:aa:78:c1:95:
e0:33:e4:ab:d2:47:ec:77:2c:a1:94:92:b9:56:cc:ed:dc:ad:
5a:2c:02:77:29:bb:f2:e3:64:8c:16:71:70:83:4c:12:9c:f7:
73:72:cf:cc:94:72:cf:e5:ef:23:cd:0e:c6:ad:f6:c6:2f:a5:
a2:c4:ee:a6:95:7c:3b:a6:db:e6:30:bf:07:2f:23:e2:d0:09:
d5:8f:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:48 2025 by rpki-client