Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
File: OrqLQlIyvliWg5beMqjrWgXuplg.mft (raw, json)
Hash identifier: ltOuBwVMpD9PPEyOJihhLuUKV2AvohzWPKNYCblaSLo=
Subject key identifier: EE:3D:61:32:5F:A4:15:8F:6D:D8:75:32:51:AA:A0:A4:34:31:9D:AF
Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Certificate serial: 1C19
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
Manifest number: 1C0F
Signing time: Fri 31 Jan 2025 15:27:16 +0000
Manifest this update: Fri 31 Jan 2025 15:27:16 +0000
Manifest next update: Fri 31 Jan 2025 21:27:16 +0000
Files and hashes: 1: 9BneQEOFwVmbNV9qi1-Mifgisio.roa (hash: j8Zpmg3gffAltASgieZws8QEaUrwW5YvuNKDhkgVhao=)
2: OrqLQlIyvliWg5beMqjrWgXuplg.crl (hash: HfqQ4sMqlH7EZ4UeDiTAr22VewZBx9ggkOk8BXyGazc=)
3: tRswCJdL2GSrkhJ4sEMCKesQ7Qc.roa (hash: G0Oe7HR1J3rXDzcBIqEhXwBkH9bfb0Jw85W7o7SLlc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7193 (0x1c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Validity
Not Before: Jan 31 15:27:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EE3D61325FA4158F6DD8753251AAA0A434319DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:bf:c1:b3:f6:44:ba:99:72:56:cb:1f:b3:
33:33:73:4e:03:34:6d:68:51:d4:2e:d3:f3:99:db:
a5:47:b5:52:24:59:1f:31:c9:99:f2:42:a3:78:6b:
29:d6:70:26:97:8c:3d:d1:bf:0c:04:01:6e:72:9f:
9b:41:14:eb:2d:bc:db:b6:ab:ed:2b:5f:1b:a6:f1:
56:0b:6e:15:69:89:4b:3e:1f:d3:ce:ae:90:48:ab:
fd:07:de:04:40:7a:ef:52:20:c2:c1:bd:b8:2e:19:
11:71:82:24:72:ad:09:42:84:cf:0a:ac:7e:6a:f4:
93:5e:20:86:65:82:6a:7a:15:fd:29:8e:59:74:0d:
0f:73:3f:78:d7:3b:11:e6:7c:af:e1:75:1b:58:82:
89:37:b1:c9:6a:b8:11:00:35:25:51:ff:81:2d:9b:
80:d6:88:03:10:90:f7:49:06:81:1f:ca:b1:fc:4c:
29:f1:db:4c:ca:e2:47:0d:52:28:cb:a5:9c:a0:09:
2d:ea:c8:95:1a:a0:bd:2e:93:af:0c:f6:c2:d2:89:
66:bc:0a:82:9d:2b:6d:40:29:8c:68:8b:06:85:7f:
b7:85:1e:05:92:30:d7:7c:86:66:cb:9a:41:a4:52:
7b:e7:f9:ab:be:06:f1:8a:48:85:23:b5:45:f7:6f:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3D:61:32:5F:A4:15:8F:6D:D8:75:32:51:AA:A0:A4:34:31:9D:AF
X509v3 Authority Key Identifier:
keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:d9:93:47:ec:b1:1f:97:92:ad:c3:1d:a8:33:25:75:96:
86:69:05:59:0f:bc:e8:74:dd:2b:27:5b:65:40:30:64:fe:45:
96:4a:48:54:8e:44:e3:84:0a:b3:1d:4c:57:48:f5:f9:51:80:
b7:b5:24:ce:db:2d:ad:e6:70:84:32:53:4d:8c:5b:7c:71:06:
02:f3:94:62:ff:95:1e:22:a4:7d:3e:9a:49:1d:94:08:d8:1a:
67:01:bd:f9:83:aa:1f:9f:f6:90:6d:1f:f7:5c:cf:0e:87:54:
5f:87:da:a5:f0:de:16:23:b8:88:21:1d:6f:dc:5d:16:c7:a8:
db:c0:90:77:c4:6f:98:44:5a:f1:ce:9d:f6:8f:55:20:c2:73:
bc:6f:59:e5:a0:e6:5f:40:11:71:d8:7a:3e:be:34:87:55:f9:
66:82:fd:5e:7e:55:1a:84:aa:d5:6a:15:f2:12:28:4b:3b:20:
eb:2d:a0:a6:84:ef:0e:8a:1b:91:5b:8c:6c:7f:13:9f:53:2d:
ec:53:76:3b:75:30:0d:7a:a0:dd:12:b4:ae:ca:be:03:c9:81:
da:b6:24:60:a8:92:70:b3:0f:13:d2:f3:b6:c1:3a:f8:af:00:
48:46:e1:ca:f6:a1:82:23:d2:a2:5a:e8:ba:0c:f1:e1:87:3a:
d4:1c:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:18:02 2025 by rpki-client