Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2765/Q9LyUD904KH3KxBUoP3rv1vOEPU.mft
File: Q9LyUD904KH3KxBUoP3rv1vOEPU.mft (raw, json)
Hash identifier: yA5bWBFt9qEBbCPh1ZJ8xU8OLMtqzH2jLpCoCz5+8b4=
Subject key identifier: C2:FB:B7:5F:7B:F7:91:CD:97:F2:D9:3F:35:21:70:F6:F5:DC:8B:43
Authority key identifier: 43:D2:F2:50:3F:74:E0:A1:F7:2B:10:54:A0:FD:EB:BF:5B:CE:10:F5
Certificate issuer: /CN=43D2F2503F74E0A1F72B1054A0FDEBBF5BCE10F5
Certificate serial: 1482
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q9LyUD904KH3KxBUoP3rv1vOEPU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/Q9LyUD904KH3KxBUoP3rv1vOEPU.mft
Manifest number: 1482
Signing time: Tue 09 Jan 2024 12:50:13 +0000
Manifest this update: Tue 09 Jan 2024 12:50:13 +0000
Manifest next update: Tue 09 Jan 2024 18:50:13 +0000
Files and hashes: 1: Q9LyUD904KH3KxBUoP3rv1vOEPU.crl (hash: EogYSGW0bwzBPweikS+bU7GuzvlUmoIejUZ7BAnFNmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5250 (0x1482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43D2F2503F74E0A1F72B1054A0FDEBBF5BCE10F5
Validity
Not Before: Jan 9 12:50:13 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=C2FBB75F7BF791CD97F2D93F352170F6F5DC8B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:8e:c0:ad:e6:b2:c9:b9:3c:05:a9:9b:09:
0d:de:30:c9:7e:b3:fe:6c:17:3b:ed:36:48:cb:0b:
e5:31:f1:40:68:ec:f1:2e:ed:e2:11:5f:bb:8b:4b:
50:bb:51:0f:bf:2f:ec:f0:15:28:ba:cf:91:68:c1:
9a:eb:0c:43:5e:98:cf:42:f8:a7:3c:ab:55:e0:a7:
ad:19:ff:76:ee:ea:3b:fc:7d:e8:7a:b4:ec:80:d1:
ed:4c:5d:10:52:25:5e:0f:6c:3a:89:62:b5:ca:d1:
ba:71:fa:d2:94:d5:a1:f9:04:c5:b4:7d:f7:f9:31:
9c:29:74:16:93:60:0f:db:d3:26:49:36:66:f1:fb:
ae:36:24:77:9d:5d:e7:91:46:95:48:2c:ae:b6:33:
e9:7c:c1:5c:10:01:e3:3d:26:3d:49:43:4b:83:98:
8d:e5:76:05:25:dc:d2:98:70:96:ed:ab:a2:b5:28:
5a:53:f0:fa:a0:39:a4:1f:68:81:5a:42:ce:48:cd:
ad:3b:be:8c:bc:2a:ec:fc:89:e3:f1:7d:20:40:3f:
e9:1f:06:2e:7f:5d:03:52:da:09:d0:15:00:08:9d:
f9:38:8e:4f:60:45:54:87:68:6f:da:06:04:d9:37:
db:02:4e:b0:f9:30:0d:b6:f4:84:a4:74:67:0c:33:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:B7:5F:7B:F7:91:CD:97:F2:D9:3F:35:21:70:F6:F5:DC:8B:43
X509v3 Authority Key Identifier:
keyid:43:D2:F2:50:3F:74:E0:A1:F7:2B:10:54:A0:FD:EB:BF:5B:CE:10:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/Q9LyUD904KH3KxBUoP3rv1vOEPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q9LyUD904KH3KxBUoP3rv1vOEPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/Q9LyUD904KH3KxBUoP3rv1vOEPU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:55:c5:bb:ed:8c:55:65:4f:fc:1e:02:36:a5:1d:a9:41:c8:
b8:12:8a:9b:0d:c5:53:f0:54:ee:56:ab:45:fe:b0:93:d8:7a:
f4:2a:0d:2c:b8:79:b9:92:6f:92:b8:0a:10:a8:30:2c:9e:df:
66:90:71:e4:14:5c:69:c8:f3:88:68:c9:0b:c1:20:71:0c:47:
24:37:40:6b:f3:1b:a7:97:50:79:65:52:07:3c:83:ee:b1:f9:
b4:75:79:ea:70:9d:91:6b:2e:0d:32:03:87:14:55:6d:96:96:
6d:49:98:13:13:c4:1d:aa:4c:58:cb:6f:ee:ac:03:3f:37:4d:
a0:ab:ca:a2:72:ca:a7:f4:b3:35:cc:ba:89:1f:17:72:6c:a7:
d2:89:a8:26:5e:cc:52:0d:3e:03:41:53:e9:dc:f4:e5:d3:ba:
ee:dc:a1:0d:e7:cb:8d:a5:d7:21:fa:63:76:a2:35:be:c8:47:
91:fa:13:e4:5e:de:fb:d2:55:d1:25:93:dd:1e:9d:03:eb:bc:
d3:0a:f9:a5:5b:69:b1:39:7b:b9:a8:1c:30:d5:fd:8f:f9:7c:
fd:8a:86:ec:59:5b:63:aa:5d:1d:f0:8d:15:59:38:67:08:d4:
19:62:37:15:25:49:35:ef:34:c4:18:b2:10:54:dd:7f:63:b5:
61:e6:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:14 2024 by rpki-client on console.sobornost.net