Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft
File: 9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft (raw, json)
Hash identifier: oieYI8DreCKvde0G+j15eJ8xftrssqKsRO1PCYpJHJo=
Subject key identifier: 77:2D:59:F8:1B:38:8C:AD:C0:60:7D:6B:8A:28:46:03:EF:6E:29:6B
Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Certificate serial: 0F83
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft
Manifest number: 0F7B
Signing time: Fri 31 Jan 2025 15:26:24 +0000
Manifest this update: Fri 31 Jan 2025 15:26:24 +0000
Manifest next update: Fri 31 Jan 2025 21:26:24 +0000
Files and hashes: 1: 9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl (hash: T5We4ap4Sz3UTV+6seBbv+o1gxpgWoIyhZCjTEkLgqQ=)
2: BhAPA23_9841Ad-T5RPGRWrr8lU.roa (hash: kYugWE0/6l95HXjqsbTP6qrpO8X0FDHGL1s3owYnbDM=)
3: SC_pkcDhJ5o4NG17MetL3m9J4FE.roa (hash: 3QuKzabkQZa5U+aV6n5UNJwnM3YYQc4z4PuXFHFnB14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Validity
Not Before: Jan 31 15:26:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=772D59F81B388CADC0607D6B8A284603EF6E296B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:a6:65:9c:e4:3f:1a:f8:4c:65:02:42:d8:
44:71:a7:a6:c2:64:48:59:ca:83:76:f1:7b:1f:f6:
e2:c1:10:9d:c4:35:8f:2c:44:94:72:e2:03:e4:6a:
d5:04:79:5a:59:d1:4b:3e:8e:96:65:7c:0a:2b:64:
95:41:b9:10:fd:30:c9:29:d7:48:a2:64:1c:9d:3c:
57:5b:69:17:43:d8:fc:a5:4b:1e:c6:18:7f:c5:d9:
ce:10:82:cb:d7:4e:ca:b7:de:14:c4:93:7d:ae:b4:
84:02:05:92:7d:9c:05:3d:14:ce:a0:ac:c4:e9:63:
ef:0f:67:ea:24:93:25:4a:9c:b0:d6:3b:5c:ea:4c:
3d:09:d0:4b:d7:83:cd:25:46:d6:a3:0a:19:30:9a:
7c:91:70:5b:78:41:3a:fc:65:bf:93:07:10:fe:9d:
95:db:39:84:d9:86:97:e2:e6:b0:0b:be:87:5a:95:
62:74:4f:ae:c9:ee:de:82:4a:26:81:5a:ca:b5:1f:
af:7f:fc:02:4e:8c:2e:5f:c7:10:4e:9b:70:15:f4:
10:d1:46:d9:1e:bd:ab:19:07:53:79:d6:11:d3:53:
0a:87:e6:03:94:43:c5:46:b3:22:5d:62:d2:6e:b0:
6b:c3:91:6b:96:5a:e8:ec:bc:c1:46:9b:b8:ab:13:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:59:F8:1B:38:8C:AD:C0:60:7D:6B:8A:28:46:03:EF:6E:29:6B
X509v3 Authority Key Identifier:
keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f4:ad:12:5d:2c:e1:d2:78:05:b0:82:75:d8:6e:cf:00:53:
66:64:09:0d:6b:54:99:bd:73:50:a7:da:e8:03:34:f5:39:ed:
f5:9c:33:1a:5d:a9:7a:98:1e:d0:dd:50:cf:a0:e7:ca:68:93:
89:1b:94:e0:34:7a:9f:ee:ee:b5:f6:0e:7a:52:f3:c2:3b:b1:
15:96:80:c9:4b:19:28:eb:15:96:23:33:17:00:4e:3d:a1:2c:
fa:d1:1a:01:83:08:75:e9:fd:4e:13:67:f9:2e:31:a2:95:80:
5c:8c:9b:4f:c7:81:a7:38:41:32:d9:70:d9:4e:d5:cc:40:ce:
d4:e1:b2:26:42:41:79:dd:2e:f8:b4:af:e9:2a:50:bb:2a:99:
3a:2e:3d:17:02:ae:67:d8:cf:93:18:71:ca:f3:1a:99:a5:24:
b6:05:47:f4:de:ca:e7:7c:53:3e:57:40:95:3f:7b:f6:cc:05:
c8:dc:e7:e0:cb:4b:0b:66:73:a5:ec:aa:6a:97:ca:fb:4f:e3:
4c:bd:b1:04:4a:26:84:f8:b6:e6:15:eb:01:dd:23:3f:c3:4a:
80:d3:78:8e:c4:79:ce:51:35:6b:b4:1a:5e:69:65:ef:86:91:
ee:6f:d8:df:e6:35:8d:63:b0:30:85:c3:50:05:ad:68:f2:bf:
d0:e3:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:18:34 2025 by rpki-client