Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
File: Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft (raw, json)
Hash identifier: ldsLO6ajaN/coJO5hSXP4fwyVCa7RfuGB9wXbZVPTAk=
Subject key identifier: DD:92:D5:BD:8C:24:D5:0C:47:4F:15:C9:47:C7:FD:BB:5D:95:46:6E
Authority key identifier: 1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
Certificate issuer: /CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Certificate serial: 0EB4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
Manifest number: 0EAF
Signing time: Tue 09 Jan 2024 11:49:16 +0000
Manifest this update: Tue 09 Jan 2024 11:49:16 +0000
Manifest next update: Tue 09 Jan 2024 17:49:16 +0000
Files and hashes: 1: AFoYC7kS3mkPZ4TZOMri9d8Q92s.roa (hash: RhtrWaM5L9cxUiirKuLP/Y3MLDSbLl8+5grxpHqUc6k=)
2: Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.crl (hash: RSpblbi4oLVi1WaR+0qD2eKl62ji+ZPd4Fc7YDTnRzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3764 (0xeb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Validity
Not Before: Jan 9 11:49:16 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=DD92D5BD8C24D50C474F15C947C7FDBB5D95466E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:af:d2:4a:7a:2f:66:ad:00:38:35:9c:df:
b3:36:b4:e7:4d:b1:9a:c6:ff:d4:c2:6a:de:91:47:
f0:15:15:2b:d3:88:c1:27:a0:ae:dd:d9:37:cc:3e:
5e:bc:f7:58:b0:ae:a7:cd:10:42:5f:6c:be:66:21:
22:5d:16:b8:95:01:3d:82:d4:9e:c4:8c:c6:18:f2:
25:d5:61:92:85:d8:57:5b:c3:07:1f:d7:53:4b:61:
43:db:c1:c5:16:76:29:29:c9:95:3a:32:2b:d2:0d:
77:34:17:3d:3b:79:72:28:a8:6a:10:a4:e0:02:de:
24:2f:e9:8a:7b:4c:74:66:02:9a:f9:91:22:2d:f4:
36:2b:ee:ed:a4:f5:45:d4:f1:b0:d2:60:d7:e8:c8:
22:77:fe:96:88:b3:01:3e:fa:e2:aa:9b:3b:d2:d0:
33:dd:aa:e6:ae:17:ec:86:d9:9c:bb:43:2c:50:58:
2c:1d:10:5e:ed:96:9c:39:b9:34:e7:23:f4:a2:be:
85:1d:0d:7a:99:3a:fd:68:08:47:d5:04:c8:43:fa:
7c:f1:7d:cd:97:8e:de:24:07:0e:16:8d:f7:d5:60:
29:aa:10:46:bc:17:41:49:2b:d2:a5:ba:d6:bc:0e:
ec:be:91:e6:8c:1c:5b:ab:92:8c:ae:e9:10:d8:a6:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:D5:BD:8C:24:D5:0C:47:4F:15:C9:47:C7:FD:BB:5D:95:46:6E
X509v3 Authority Key Identifier:
keyid:1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:05:50:c6:aa:07:c5:5e:c2:b0:67:99:ed:44:82:cd:4c:
4e:4a:89:81:de:e2:fa:b7:68:86:5d:d3:04:71:2a:35:87:2c:
24:dd:e5:0d:ae:66:9c:36:60:7d:b1:26:9e:c1:ea:31:d8:82:
03:b4:07:7c:e7:07:c7:11:0e:47:55:c3:83:b7:a0:75:45:8e:
75:85:63:d0:91:f8:cd:4a:4e:21:ec:37:de:4d:a3:b0:62:42:
13:9a:51:41:c8:dd:51:e1:22:65:8a:25:9e:07:0a:88:9e:d5:
e6:fa:5d:d7:bb:21:cf:f3:7f:b9:83:9c:fd:47:3a:ab:7b:98:
ae:d8:19:d6:bc:31:82:a9:e2:0c:01:71:eb:eb:4e:94:02:d5:
dd:aa:48:e1:f3:22:75:03:be:01:cd:ee:96:59:83:ca:21:18:
3e:4c:24:0f:d8:6c:28:05:40:3f:07:0c:88:ff:2f:d7:fb:f4:
80:ec:cd:79:97:73:17:93:be:29:46:8e:b6:3d:b4:2e:63:5d:
ba:c2:e2:ad:76:60:b5:b2:58:c7:19:ec:eb:dc:23:6e:4a:64:
36:0d:4e:f2:4c:db:55:33:72:ac:25:67:8a:33:40:77:87:b4:
e4:bf:fc:da:64:61:24:10:6e:41:94:73:d2:f4:7e:02:f5:28:
4a:54:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:14 2024 by rpki-client on console.sobornost.net