Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
File: IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft (raw, json)
Hash identifier: izdoZ/7reBpppPcP2Ul0L80YuU+JhrarsDYQCNEVPNc=
Subject key identifier: 8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 2077
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
Manifest number: 2065
Signing time: Wed 09 Apr 2025 01:05:36 +0000
Manifest this update: Wed 09 Apr 2025 01:05:36 +0000
Manifest next update: Wed 09 Apr 2025 07:05:36 +0000
Files and hashes: 1: IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl (hash: 3VLxrD8lONo46LQkBfe58xLqUFgPJ2WJB2Q5STSXpRE=)
2: noTTkGKBBA0IiF1s9t5qUE627a8.roa (hash: 7atMi/MrgnmN/IZ16hRnHqf3SP1bFaVyEPj4clXkIuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8311 (0x2077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: Apr 9 01:05:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8F6708B24768C9A14D5BC9B93B5E04D0CB885139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:aa:75:54:3b:4a:b7:b6:b1:9b:96:0e:b2:
44:eb:c9:95:cf:2a:16:e8:ac:69:9c:59:10:60:de:
9e:f5:06:1f:2f:65:02:b9:44:52:cb:c0:c6:27:9d:
f2:fe:6e:24:5f:b6:c3:1f:23:63:b4:b7:e0:16:28:
4c:fb:88:23:b0:d6:b5:62:95:91:7e:a1:f3:c6:30:
62:5d:ce:0a:45:0e:3c:af:83:73:9f:b1:1e:3a:79:
40:98:40:37:4a:bc:89:d7:3e:f8:90:28:e9:51:86:
b3:a6:36:13:55:5f:cc:08:42:d3:3d:a0:4b:55:6d:
75:a4:1b:bf:32:31:c1:ff:8b:84:90:45:ce:ba:0e:
0d:b4:cf:51:31:40:a7:f9:46:0b:06:67:86:f1:7f:
bd:94:2a:ce:ce:e0:e4:0a:01:eb:79:12:e3:74:0f:
2c:9a:d6:fe:0c:07:bf:2b:b7:bf:92:37:47:cd:db:
14:13:7a:cb:5b:3f:46:ba:2d:91:3a:e7:1f:dd:47:
0b:d5:90:f4:cb:00:47:88:22:c9:d6:72:2c:69:a4:
90:13:97:78:59:20:80:1e:c0:b7:b2:e0:34:01:e3:
ce:e3:92:f7:aa:f0:83:a7:55:f5:b8:30:7c:fb:7a:
7f:1a:47:b2:98:42:cc:c5:8f:80:8e:1a:77:44:f2:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:08:B2:47:68:C9:A1:4D:5B:C9:B9:3B:5E:04:D0:CB:88:51:39
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e0:65:64:68:14:63:1d:c4:8d:3f:54:d6:1a:7f:e6:f4:07:
53:d4:5c:d7:72:c9:06:14:ac:ae:75:e9:47:32:02:97:ec:9d:
0d:78:0d:c2:af:fc:94:90:ab:ae:ea:7b:cc:85:0d:69:ef:2b:
72:da:c2:97:49:01:e4:2b:d0:65:d5:5e:6d:96:a1:69:11:d3:
67:85:40:fc:43:f0:3c:5f:6b:e3:87:e5:a5:86:3d:36:b2:04:
c5:dd:c4:d2:07:ff:4b:5b:dc:53:be:74:4f:81:8e:bc:81:57:
5c:3a:c3:f3:2f:87:7a:6d:86:95:1e:46:88:8f:8b:57:14:ba:
f7:ab:80:b7:6f:0d:5b:cd:74:f2:b1:de:12:44:24:2b:c0:27:
4e:ca:e1:93:a7:aa:dc:28:0b:23:02:5a:9e:89:fc:43:04:d2:
d4:ab:23:46:70:19:d5:5e:97:8b:f4:64:ba:45:1f:46:54:7c:
b0:85:db:fa:bc:c5:40:ab:6d:52:33:8b:14:e0:95:12:dd:ad:
c8:cc:1e:5c:5d:d9:5e:51:18:a4:ce:9d:93:36:8d:b3:8a:2a:
2d:cf:bb:be:e9:34:97:f7:b0:93:fa:bf:42:11:9d:2d:77:e4:
21:93:4a:2f:d1:d3:1e:ea:d9:a6:ba:4f:5e:b4:06:e4:8d:4b:
57:92:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:59:35 2025 by rpki-client on console.sobornost.net