Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
File: IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft (raw, json)
Hash identifier: bFHIvfUyvOMitsdznhDk4iG3s56sznpOD6vzQHGfIHM=
Subject key identifier: 8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 2042
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
Manifest number: 2030
Signing time: Sat 29 Mar 2025 10:27:16 +0000
Manifest this update: Sat 29 Mar 2025 10:27:16 +0000
Manifest next update: Sat 29 Mar 2025 16:27:16 +0000
Files and hashes: 1: IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl (hash: vuNqGITPg/7KWzZfCO5OryXjEcz+pAVgao1MjOZskTo=)
2: noTTkGKBBA0IiF1s9t5qUE627a8.roa (hash: 7atMi/MrgnmN/IZ16hRnHqf3SP1bFaVyEPj4clXkIuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8258 (0x2042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: Mar 29 10:27:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8F6708B24768C9A14D5BC9B93B5E04D0CB885139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:aa:75:54:3b:4a:b7:b6:b1:9b:96:0e:b2:
44:eb:c9:95:cf:2a:16:e8:ac:69:9c:59:10:60:de:
9e:f5:06:1f:2f:65:02:b9:44:52:cb:c0:c6:27:9d:
f2:fe:6e:24:5f:b6:c3:1f:23:63:b4:b7:e0:16:28:
4c:fb:88:23:b0:d6:b5:62:95:91:7e:a1:f3:c6:30:
62:5d:ce:0a:45:0e:3c:af:83:73:9f:b1:1e:3a:79:
40:98:40:37:4a:bc:89:d7:3e:f8:90:28:e9:51:86:
b3:a6:36:13:55:5f:cc:08:42:d3:3d:a0:4b:55:6d:
75:a4:1b:bf:32:31:c1:ff:8b:84:90:45:ce:ba:0e:
0d:b4:cf:51:31:40:a7:f9:46:0b:06:67:86:f1:7f:
bd:94:2a:ce:ce:e0:e4:0a:01:eb:79:12:e3:74:0f:
2c:9a:d6:fe:0c:07:bf:2b:b7:bf:92:37:47:cd:db:
14:13:7a:cb:5b:3f:46:ba:2d:91:3a:e7:1f:dd:47:
0b:d5:90:f4:cb:00:47:88:22:c9:d6:72:2c:69:a4:
90:13:97:78:59:20:80:1e:c0:b7:b2:e0:34:01:e3:
ce:e3:92:f7:aa:f0:83:a7:55:f5:b8:30:7c:fb:7a:
7f:1a:47:b2:98:42:cc:c5:8f:80:8e:1a:77:44:f2:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:49:79:7a:29:93:c6:66:04:ef:0f:76:8e:97:b7:fb:36:
a4:a4:9f:55:d5:42:01:2e:79:90:2f:13:89:18:60:5c:b3:e5:
0d:07:33:22:2d:fb:f0:b4:8b:7f:ff:23:71:87:c7:db:78:84:
0f:d4:b3:a7:9b:0b:2e:23:0f:9d:28:1f:a1:4f:d8:d0:5a:e3:
5c:6a:db:bd:6f:6d:a5:99:33:d8:eb:e9:bb:64:35:df:cc:99:
72:16:48:8e:bd:e8:fa:9a:16:9d:f1:ab:c5:47:67:bf:e3:85:
bd:12:72:83:f8:07:ec:e5:97:3b:c0:67:b0:1d:e8:ac:7a:df:
f8:fe:2e:06:eb:27:d1:1f:6a:e3:b0:a4:16:80:e1:7c:c9:ae:
1b:c1:97:95:e6:1e:f2:69:53:73:9a:6c:30:61:7e:79:2c:94:
1b:55:9a:09:97:ad:25:95:b9:e3:9b:dd:80:83:6f:49:07:15:
a8:35:00:67:ff:9d:2a:f8:93:2e:cc:05:58:cd:0d:5a:c2:90:
01:b4:ea:b3:fa:85:d1:ac:ae:ea:56:b9:24:e6:f1:42:47:68:
0a:75:c0:0d:65:7f:29:77:a2:ba:72:14:3f:c6:76:e5:0a:9f:
cc:d8:84:c5:47:ff:99:19:67:f2:e4:df:a6:c0:6b:a0:d6:53:
e0:8c:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 18:20:18 2025 by rpki-client