Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
File: dTJNO48dXrpXcOZh7havJKdQVU8.mft (raw, json)
Hash identifier: lRlgnwAKshSq9fCYN5zceu6aKZ8eUneMgaC9Jfp/Rbs=
Subject key identifier: 94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 1316
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
Manifest number: 12F8
Signing time: Fri 31 Jan 2025 15:29:27 +0000
Manifest this update: Fri 31 Jan 2025 15:29:27 +0000
Manifest next update: Fri 31 Jan 2025 21:29:27 +0000
Files and hashes: 1: dTJNO48dXrpXcOZh7havJKdQVU8.crl (hash: trCCnfTpYufJhxsTH6EqIBwQU6QudKczAOKErWrcqcE=)
2: s6qZ59C9C3Rx1_dYYkL8Pba15QE.roa (hash: Z5eUU4BhcKqS/6XZ5bO9vhYAIrozt8on0FwXTp8twqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4886 (0x1316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Jan 31 15:29:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=942C98690AF1BD352C2B5C935162D816D0C74B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:6d:b7:ac:cf:e1:f3:f2:d7:14:b6:37:28:
a4:6b:6b:57:e4:32:72:8a:20:2b:43:46:42:a8:cc:
7a:04:9f:3e:d9:bd:ca:36:e9:22:2e:b4:a8:ac:63:
89:e6:1e:5c:47:c6:99:ae:d5:7b:c4:66:62:3a:02:
4a:a2:f4:a4:4e:8a:71:04:a0:de:50:08:81:97:08:
12:25:fc:d1:a0:ac:55:e6:13:01:bb:e4:5f:a8:ab:
3d:df:0b:96:9e:81:98:dd:ba:a1:58:8d:da:3e:74:
f1:7a:a8:eb:6e:8e:a6:df:21:1a:79:1c:80:e5:f5:
12:d1:d8:4a:02:fd:ba:3c:38:d1:1a:10:c1:96:f9:
95:07:be:70:a8:e8:96:d4:94:f2:17:19:44:18:a6:
fb:08:c9:b3:c2:f4:0b:48:85:23:fb:2b:aa:83:ba:
5d:b5:69:9c:16:21:00:7e:f5:40:bc:ec:f2:72:59:
a6:fb:ef:63:34:49:cf:32:0e:81:eb:8a:be:df:c0:
cc:3e:7d:ba:a8:99:86:c0:ec:80:25:b1:73:32:3d:
c4:15:79:23:c5:06:b0:7e:12:03:26:07:82:70:49:
c0:e9:90:30:57:84:96:4a:47:ac:09:dc:39:74:20:
17:bc:d4:93:2d:ee:3e:ef:b0:b0:92:ed:d5:33:0d:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:73:3e:13:96:e5:3d:5f:4d:a5:fc:db:6e:57:d3:f5:8f:3a:
6e:24:28:18:ec:a8:96:c7:a5:34:7c:94:e4:7d:52:c5:f5:0e:
7f:17:99:d7:94:29:77:b9:7b:7d:3d:47:c2:3b:49:d6:79:8e:
78:46:cb:26:3b:d6:f6:d3:a5:d7:f0:88:36:47:f9:57:f9:1b:
a2:6f:b8:13:13:d5:57:22:02:20:f2:26:f4:b3:dc:ef:ef:e9:
30:70:89:dc:8f:23:62:45:c5:3d:20:3a:c7:33:95:9d:ce:b0:
97:84:fb:09:0c:12:f7:6f:72:9b:c7:9e:5f:67:f3:4a:80:bb:
d7:43:39:e0:6f:3d:2e:4c:91:70:fc:9b:0d:fd:84:13:c8:5f:
4e:05:15:cd:46:3d:17:c3:4a:dd:5e:02:cb:15:89:d4:ad:fd:
e5:ef:72:f5:f6:83:27:e2:fe:8e:7d:80:74:e8:ed:c5:8e:31:
c1:38:77:ff:d4:54:4f:9a:d2:75:44:db:cd:e4:3a:9e:65:8a:
e5:ab:31:39:cd:c2:ae:01:73:03:88:6e:b2:c0:ad:99:19:ce:
2c:b6:e1:e8:9a:d3:52:1d:03:14:e6:65:a3:c0:9e:f7:c4:e8:
9d:84:d0:67:41:75:de:5b:9f:7e:fa:27:8f:f5:04:69:e0:00:
93:f0:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:35 2025 by rpki-client