Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft (raw, json)
Hash identifier: j20OVinXyhEFsiu0W2QAQhIabucmixXIvyTLweiKmI0=
Subject key identifier: 17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1C0E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
Manifest number: 1BFA
Signing time: Fri 31 Jan 2025 15:28:52 +0000
Manifest this update: Fri 31 Jan 2025 15:28:52 +0000
Manifest next update: Fri 31 Jan 2025 21:28:52 +0000
Files and hashes: 1: 4GBpvI2rZ3KgMp2TXs52wMjJ0yE.roa (hash: WUXgzF8/7vTpS4uvfiiFvOe2HOADwHJYR8UuxjhNVm0=)
2: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl (hash: hpBmHLCPytmIwScYxgZea0mfNRuuemkD9IbSeMx7xyw=)
3: NMHb2UFwO_I-h1asoM3p_Xf7X-c.roa (hash: rNnKVfauMNkQjQMCBnzbua+dEEBtDwfUeKuVVJYIlHk=)
4: snw-NI25N0Ia9kFy4kqbaf1-Dz8.roa (hash: MZ8UlnboUaU3f+1a6FsBRFwSkOPQ7Y4u/AxUpRNGThk=)
5: tcNYjLabfsgNtY7A28BVLcZRkQA.roa (hash: VUZerhSHKXntthuMx1ErUjEcpUO2cjj7+J4Ad/TWPuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7182 (0x1c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jan 31 15:28:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1794218645C7CCC4535A9526D8E2540877324BD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:34:6d:ce:47:f1:95:a2:61:f6:f5:f5:c1:
65:10:2c:cd:2c:2c:92:49:21:25:4f:88:4d:68:34:
ae:ae:de:64:4b:2a:6b:c1:d5:6e:a6:80:0e:4e:01:
66:ff:de:82:b5:99:11:9f:2b:e7:38:e7:29:0d:d3:
3f:6b:a7:71:c3:1f:8a:c3:41:9d:a8:d3:14:15:70:
0e:02:fb:99:5e:8d:01:50:4f:76:11:b6:0e:1d:ff:
dd:05:89:97:b2:57:89:c1:ef:0f:e0:ef:b1:25:19:
c4:5f:79:ac:45:ed:6f:c6:f2:a5:2a:45:ce:bb:5f:
a0:b0:9b:9f:ce:39:58:c0:c5:49:2e:7b:07:f9:39:
d2:06:b1:75:6e:a4:f4:b3:a2:e4:69:e7:1c:92:29:
fd:8d:8e:56:d2:da:f9:b5:6d:8f:36:f2:2a:8b:da:
fd:c0:eb:c9:b8:14:c4:b4:df:d9:a1:1b:c8:e2:4f:
52:aa:90:6f:af:aa:aa:87:4f:01:e8:5c:29:98:3a:
24:82:10:3b:82:c0:b9:89:c6:67:93:51:1a:2c:00:
4b:55:2e:44:d3:38:a2:8a:72:95:e0:0c:3f:e0:ef:
da:d3:4a:65:a6:7e:c8:68:9b:82:ea:86:f5:3c:ed:
97:f2:db:e4:07:de:22:11:f8:72:5b:62:14:f4:60:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:21:86:45:C7:CC:C4:53:5A:95:26:D8:E2:54:08:77:32:4B:D1
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:75:25:82:c6:ca:73:a0:a6:ce:46:52:ce:86:e6:be:19:
69:9f:1a:6a:bb:13:bf:32:6b:52:9e:2f:63:26:0b:0f:9c:1f:
19:db:94:a0:52:2c:c0:61:88:f2:18:9b:39:64:ee:f4:7a:4d:
d5:02:0f:55:8e:99:1b:51:49:02:6e:e1:ee:da:12:8b:ab:73:
9d:bd:df:05:5e:01:00:f6:1c:64:72:95:ab:23:a8:15:f8:f2:
78:f0:49:b6:e9:29:f3:d4:c7:2b:ae:df:e2:e6:e7:70:de:74:
00:58:ce:51:fd:cb:e5:7d:79:30:51:1f:e9:fa:c4:10:64:37:
78:b7:05:fd:a9:c5:e0:3e:c5:8c:c6:fc:48:cf:4f:57:ba:c8:
ae:6e:f7:91:08:17:8b:30:d2:89:ad:c5:a2:80:74:95:f8:37:
b6:7a:f8:19:b7:de:b1:94:36:61:d2:76:b5:42:ba:83:b1:47:
c2:c8:29:37:60:e2:0e:da:a1:b1:80:9e:ba:49:0b:cf:a4:cf:
60:2f:c1:8a:aa:ee:dd:ab:1d:41:ff:47:b8:7d:c5:36:1c:14:
ad:06:2a:bc:c7:55:99:0a:b7:b1:a9:03:cd:a2:06:69:e7:fb:
be:5e:73:60:3e:4e:10:e1:f7:49:11:c8:cc:52:c1:0c:48:e8:
73:6b:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:50:39 2025 by rpki-client