Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft
File: DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft (raw, json)
Hash identifier: IBzlWOo7TzC8Uy+A7Fjo0BWMudgxB0GnB1/PYqyu4tU=
Subject key identifier: 7D:AB:FD:44:50:65:43:14:07:FE:10:1E:68:1B:A2:E0:B8:B8:15:D6
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 21F9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft
Manifest number: 21DA
Signing time: Fri 31 Jan 2025 15:28:12 +0000
Manifest this update: Fri 31 Jan 2025 15:28:12 +0000
Manifest next update: Fri 31 Jan 2025 21:28:12 +0000
Files and hashes: 1: 0VbvmI5KKX2GATRgqxHabBCN954.roa (hash: cmpkZvU77v26o8dnFCRM2D9WAkScFYq312Ual1tdjtg=)
2: Bvhrqon81saoI-g_kt147a4MO6A.roa (hash: AUUB7fEMbMUMXAuHrAhESx1qDRAkiRkWHtXmBbL108M=)
3: DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl (hash: gjyIxPkV01lR7/luEb5mLZ0p/MciFlHTQhP/uyzKxB0=)
4: a5-Wj5I5VErLom0wWrhgv_mtkeo.roa (hash: I2TkRHnUDrdO/PPyUrEFoEYsEfVK7Siv+A+c5NtH1PM=)
5: yN4DvNXFlXUW83wyq2-0SDLJLGg.roa (hash: IXnRarYgIETuQL3VF0Svu8KbqA1NoxIjBkuzUUuArGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8697 (0x21f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Jan 31 15:28:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7DABFD445065431407FE101E681BA2E0B8B815D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:ca:f4:e4:22:a3:14:60:63:4e:86:00:cc:
34:f3:de:41:83:23:1c:7f:5d:fc:2f:bc:dd:8b:19:
b8:22:1b:4c:8a:45:ed:e2:b2:0b:f0:8e:f2:cb:b0:
57:4f:8b:77:3a:c0:05:98:64:0d:ce:75:91:18:e3:
98:5c:cf:bf:79:c4:f8:23:c9:bc:0d:48:df:25:e1:
16:ed:b3:f5:d4:97:c4:de:f8:75:b2:36:2b:00:0c:
f9:0a:03:e6:8f:f5:67:ea:c7:99:12:78:62:d8:66:
4c:62:d3:70:31:0c:86:0e:03:e9:75:48:9c:12:49:
97:3f:cd:9a:98:e1:81:07:be:c8:f1:31:ce:90:68:
17:af:a9:3e:0f:17:50:c2:1d:5f:bd:8b:64:09:72:
a5:ee:55:4f:b5:4c:2a:b4:09:a3:d0:41:b8:f2:2f:
bd:f1:a8:90:c7:2a:91:10:15:54:77:7a:ae:c6:68:
ed:45:29:46:7f:20:1c:b2:89:3d:b9:ae:02:87:06:
74:54:b6:4b:bf:8f:a7:d3:22:59:59:da:03:dd:f4:
cd:b9:52:95:70:07:4e:9f:93:30:85:8d:40:f7:dc:
8f:23:d6:45:f9:d3:82:a1:0d:2f:8d:e7:21:1b:ed:
f8:ad:2d:b1:57:f1:2e:a8:b1:21:d3:62:92:eb:3e:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AB:FD:44:50:65:43:14:07:FE:10:1E:68:1B:A2:E0:B8:B8:15:D6
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c7:ea:9f:bb:bc:35:ef:db:c9:27:54:d0:41:2d:2f:74:87:
01:71:ef:d3:49:a1:4e:62:6d:80:2c:59:e5:00:8f:bf:4b:a4:
8b:ca:cd:bc:31:d2:61:ae:fc:b1:6a:cc:f0:4d:b8:88:ce:35:
a1:33:8a:fc:c6:80:3b:75:5a:01:ee:50:61:f0:07:59:52:4c:
34:40:e6:ee:91:37:a6:82:30:aa:b2:2d:57:86:2a:97:2b:83:
5d:cf:3e:83:59:f5:42:df:be:33:0a:e2:f9:4d:2a:28:b5:c2:
39:92:98:d4:f4:06:e7:be:f1:ba:e5:13:ca:5d:69:35:ba:9e:
1e:77:7b:7c:21:12:2e:3d:1b:7d:a4:18:47:18:7a:ee:71:e5:
0e:3b:50:fd:32:dd:f9:e2:f7:ab:70:c1:34:cf:a8:ab:75:81:
c1:5c:70:f1:bf:06:cc:b4:22:f5:4f:d9:08:0e:71:2c:4e:de:
f3:b7:54:13:2a:b5:e2:f8:0f:48:2b:e2:98:ae:cf:dc:86:55:
2a:2c:31:ef:c7:53:78:8e:66:ed:bb:68:d9:88:74:5b:75:10:
7b:2e:47:83:ac:8b:50:8a:ff:24:eb:14:57:9d:66:23:2e:35:
e8:61:2c:8b:2c:d9:b0:e5:70:3c:68:80:0f:20:25:51:9e:ff:
0b:14:85:21
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICIfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB
NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTAxMzEx
NTI4MTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdEQUJGRDQ0NTA2NTQz
MTQwN0ZFMTAxRTY4MUJBMkUwQjhCODE1RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2Lcr05CKjFGBjToYAzDTz3kGDIxx/XfwvvN2LGbgiG0yKRe3i
sgvwjvLLsFdPi3c6wAWYZA3OdZEY45hcz795xPgjybwNSN8l4Rbts/XUl8Te+HWy
NisADPkKA+aP9Wfqx5kSeGLYZkxi03AxDIYOA+l1SJwSSZc/zZqY4YEHvsjxMc6Q
aBevqT4PF1DCHV+9i2QJcqXuVU+1TCq0CaPQQbjyL73xqJDHKpEQFVR3eq7GaO1F
KUZ/IByyiT25rgKHBnRUtku/j6fTIllZ2gPd9M25UpVwB06fkzCFjUD33I8j1kX5
04KhDS+N5yEb7fitLbFX8S6osSHTYpLrPgLVAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUfav9RFBlQxQH/hAeaBui4Li4FdYwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa
1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz
NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvREtUeGc4Wlo3VmY3
UnRXYTFVZzliLW16VDA0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAMnH6p+7vDXv28knVNBBLS90hwFx79NJoU5ibYAsWeUAj79LpIvKzbwx0mGu
/LFqzPBNuIjONaEzivzGgDt1WgHuUGHwB1lSTDRA5u6RN6aCMKqyLVeGKpcrg13P
PoNZ9ULfvjMK4vlNKii1wjmSmNT0Bue+8brlE8pdaTW6nh53e3whEi49G32kGEcY
eu5x5Q47UP0y3fni96twwTTPqKt1gcFccPG/Bsy0IvVP2QgOcSxO3vO3VBMqteL4
D0gr4piuz9yGVSosMe/HU3iOZu27aNmIdFt1EHsuR4Osi1CK/yTrFFedZiMuNehh
LIss2bDlcDxogA8gJVGe/wsUhSE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:29:43 2025 by rpki-client