Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
File: TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft (raw, json)
Hash identifier: GHS5Z9RpUVgpC/31HQxv5SlXlla7Ckmx0TIDsgykfNg=
Subject key identifier: 68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1C19
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
Manifest number: 1C05
Signing time: Fri 31 Jan 2025 15:26:25 +0000
Manifest this update: Fri 31 Jan 2025 15:26:25 +0000
Manifest next update: Fri 31 Jan 2025 21:26:25 +0000
Files and hashes: 1: TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl (hash: T1rkStJtP4p/UTQNt6bGutW6hhl92XN7Q/+rsO3022M=)
2: dRzZBwD8nn9NRnPMSg6KYfYpdwU.roa (hash: 7mntN1EQX9ULdC3vyzx+A7+0SpzueCgIht3TR71acNE=)
3: iYjkiJaRGnBETZlEydSbbSczJUc.roa (hash: sBB96CAbUt4uz7RB43SUEjN8vs1vOjj5Z2ffnfxN60c=)
4: mlMCvl3JtLRELSM0dAmYY_QyXYA.roa (hash: ycbIxVFuxzhTUCuY+uVju6/YdBab59Sazv1Ubu9YxeE=)
5: p4NdksDiCY31k6x-lrJZdHrDyIs.roa (hash: 1Gt4x4TRC2WlKuqrik2KaqorMtbTmxXQngWbLJW6fZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7193 (0x1c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Jan 31 15:26:25 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6800B29027F006269714735503A73430F6BC04F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:27:18:94:1b:76:9e:41:b6:2e:39:c8:17:
73:2e:0c:a1:0b:3a:15:aa:b4:47:bb:81:d1:b1:ad:
fa:96:26:45:24:b4:61:55:47:03:9d:8d:55:6f:a2:
72:e7:a3:d0:95:1d:b8:bc:cb:a9:68:09:ae:7c:a2:
e9:9f:48:05:b0:9f:3d:ce:e1:b3:be:40:53:cd:62:
87:24:c5:7c:41:0b:00:48:83:0a:f9:ec:b4:37:c4:
02:3c:2d:e7:05:0a:d8:f9:a8:3d:17:de:50:03:f8:
9f:d7:4a:06:3a:6c:5d:1b:0c:0b:be:4b:6b:63:0d:
bc:02:bb:bc:44:72:e2:c7:c4:3f:78:62:70:e9:bf:
12:d4:95:2c:4d:c1:e7:52:f3:91:19:b7:0d:79:fd:
8d:b0:fd:a2:88:55:32:07:a4:3f:39:db:94:54:20:
7c:b6:60:f6:3b:47:a0:9f:41:78:1f:59:7e:38:08:
05:5c:a5:c5:d9:f6:18:a6:4d:c0:21:b2:7e:2f:6b:
4e:d0:46:9f:4d:67:f4:19:e4:18:44:74:95:22:04:
8c:9b:e7:ba:af:1f:18:70:4f:72:74:b7:7b:08:66:
da:ab:83:c5:2f:50:71:ae:d8:b4:ae:d1:8e:a8:12:
5a:a1:2c:20:e7:1e:79:8a:77:45:ea:a0:7e:2d:0b:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:64:29:d7:8d:bf:a3:ac:2f:96:40:85:e2:69:38:e7:ce:
d7:73:03:b5:51:49:65:bb:50:64:c3:87:47:d3:7d:38:57:a3:
21:fc:e6:71:10:74:29:2d:3a:e5:bc:d1:d4:cf:44:41:23:b4:
12:12:78:50:7e:41:61:e7:75:38:7d:04:4f:11:9f:ea:f0:5e:
2e:0d:65:14:c1:14:d5:95:b6:50:e9:5f:18:be:97:61:8f:24:
60:21:14:bb:43:ce:46:3f:0e:fa:76:6a:44:3a:d7:41:8e:73:
f4:2a:84:91:6a:24:06:ee:65:c7:04:24:43:72:d7:b6:31:b1:
ae:90:19:3c:8b:37:be:98:b3:68:a3:8f:90:94:70:14:19:be:
85:dd:db:1c:7f:50:2b:d2:31:12:bc:54:01:3e:6a:45:9b:a5:
c9:7c:27:cd:9c:70:d4:d0:bb:1e:5a:a6:1d:34:15:2d:ad:0d:
f6:a7:7e:60:43:3f:fe:65:74:d4:14:48:2c:1f:62:46:f9:66:
be:f6:29:7a:eb:cf:ec:9c:62:c2:00:42:c6:65:bb:67:6a:c7:
23:31:7a:59:90:49:92:52:59:0e:1c:ab:39:8d:45:20:da:c7:
d5:4f:aa:d6:d4:a9:ee:00:9e:35:d3:b6:85:e4:20:ce:b3:7c:
4a:fc:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:17 2025 by rpki-client