Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft
File: RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft (raw, json)
Hash identifier: r+LxWjvr0Dnmf31cXCQoQGw50b11ask8oDSglUbszJk=
Subject key identifier: FF:38:D7:50:CF:9E:B7:6C:98:0B:08:BE:20:2D:1D:D2:B9:73:B9:DA
Authority key identifier: 46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23
Certificate issuer: /CN=46E7400FC97FC7A2093E054CF0DF42CB77564023
Certificate serial: 0286
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft
Manifest number: 0282
Signing time: Fri 31 Jan 2025 15:28:30 +0000
Manifest this update: Fri 31 Jan 2025 15:28:30 +0000
Manifest next update: Fri 31 Jan 2025 21:28:30 +0000
Files and hashes: 1: 1S59-P5SWwas5ZHiepf_RfnweqY.roa (hash: sfm0B+UynP7MeHXhur0Hw3inRRYVSvBRKv83Wsg7qyo=)
2: RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl (hash: +LKUjDSBdhlx6Qg5L/7GgUMCH73eQ5E3jjxHJlq/suI=)
3: U-B3ogXeY-wwWRdqIqwuT-4qN10.roa (hash: jrDdvfnk8B/sYKgkj77NjX6xZgBgV9xbm9nmRo8AyvQ=)
4: ayu9kcpWhG5hIjkYHUhRn1_OmFo.roa (hash: BG+85GQegt3hbdSsNTDNvGqZWNrmlQ4Pi4MwUcJAZRE=)
5: yfvPex2Bv8fj70JMombPB9eR9JM.roa (hash: 0tkl5Cb65JEm4umqPw3YujQtcmrx7NqySi3D3sojVx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46E7400FC97FC7A2093E054CF0DF42CB77564023
Validity
Not Before: Jan 31 15:28:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FF38D750CF9EB76C980B08BE202D1DD2B973B9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:f6:80:09:fd:8e:25:14:8a:6a:1f:ea:4b:
17:5d:da:08:ec:38:de:57:5c:17:d2:1c:61:c7:a4:
0b:48:2e:1a:b7:ab:5b:d0:f0:29:a8:7a:08:18:38:
3c:26:65:f7:1b:f5:c8:ca:c6:0f:ec:c4:5b:bc:b6:
dc:d7:ce:c9:85:9a:77:ac:db:17:54:02:12:2b:b1:
d2:95:df:eb:ed:f8:4e:41:ac:f0:09:88:ca:48:cd:
3f:32:3b:34:43:92:11:f4:84:bc:e2:6b:ce:9a:f2:
ba:bf:c7:8d:3f:24:80:70:be:e4:39:40:10:d5:e3:
33:e0:95:c9:2a:ad:d6:8a:7d:36:82:d7:d1:22:8d:
78:f5:ab:b7:18:30:2e:1f:d4:4a:f5:2b:da:2e:99:
fb:e4:82:c4:28:c4:04:e1:98:68:c5:e9:7f:3a:b0:
26:7d:b5:c3:c6:6b:d3:54:80:1c:fc:f5:f0:b5:67:
fb:fb:71:cb:04:24:c8:4f:93:4c:f6:70:66:b1:27:
4a:df:3e:fe:0e:60:67:aa:a1:9f:50:ec:48:d5:fe:
a0:c6:9c:0b:53:a9:dc:e7:29:16:81:db:0e:3c:50:
6e:37:1c:93:95:0e:5b:e2:59:f1:2c:f6:80:a5:11:
d1:ce:d7:c3:81:c0:db:da:26:05:c3:2e:4d:22:41:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:D7:50:CF:9E:B7:6C:98:0B:08:BE:20:2D:1D:D2:B9:73:B9:DA
X509v3 Authority Key Identifier:
keyid:46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:70:0d:03:f1:71:fe:f2:e5:2b:7f:08:31:7a:9f:a8:48:7a:
67:7a:be:6b:bc:89:63:23:65:6f:de:f1:41:7d:c9:4a:3b:cf:
8f:0e:06:ea:44:f3:e5:2d:e6:82:8d:37:fc:cd:3d:11:13:68:
01:81:0b:2b:74:30:06:0e:84:73:15:61:b5:f9:f5:07:e7:75:
65:c4:8a:33:46:bd:38:02:3e:65:2c:44:72:e1:72:91:76:40:
d5:40:91:3c:b4:a1:0f:5e:56:90:33:8a:ea:ec:33:a1:6e:33:
c1:19:d4:db:ca:84:ff:87:c7:bb:df:62:f1:c5:e9:b4:f0:0e:
95:aa:79:e1:5e:54:9a:ae:e3:b6:6d:04:38:a0:75:fa:0b:65:
8d:e0:4a:b9:57:68:fa:58:d6:71:f4:77:ed:3f:a6:61:13:bb:
52:1e:5d:d3:2c:f7:4e:97:3c:d8:95:d0:cb:b6:9a:64:32:56:
31:20:4b:e6:4d:17:fc:be:94:81:75:1e:11:b2:17:1a:70:5a:
1f:d1:d9:51:d8:7a:9b:5a:ee:d3:74:4f:d0:02:81:cc:60:01:
0f:0f:a4:bf:b1:cf:3d:cb:ce:b2:1c:be:62:3d:49:a3:12:97:
5f:17:e0:e4:de:d0:f1:6b:02:a3:1f:b9:9a:0e:5f:67:d4:37:
be:0f:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:00:12 2025 by rpki-client