Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json)
Hash identifier: DNMWZ9dX3E5emKiuu6kGRaKFTTw2AdZwh+2vGo11eLY=
Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985
Certificate serial: 0691
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
Manifest number: 0685
Signing time: Fri 31 Jan 2025 15:25:57 +0000
Manifest this update: Fri 31 Jan 2025 15:25:57 +0000
Manifest next update: Fri 31 Jan 2025 21:25:57 +0000
Files and hashes: 1: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: b1Q5XjG1C3zjxJb67+WruXNsMAU7R83d2ZN8FH0dFLA=)
2: W4Idow3crSPetth7hod2gZSZIAE.roa (hash: 9g4JXRrzAY2PYgT52UhsnSeQvIPvbGWF/FOEc9mfY34=)
3: zdruxVncnu8sEkhrajuvXfa833c.roa (hash: 18w1Pxtpdmcfs55ZzucgPOeLrrNOEkkFH5LUL2Ht4kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985
Validity
Not Before: Jan 31 15:25:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39:
6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29:
57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f:
b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc:
69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4:
a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90:
c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de:
7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72:
bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7:
32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3:
88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f:
13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad:
74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94:
5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c:
91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a:
00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15:
a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
X509v3 Authority Key Identifier:
keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a7:42:a6:42:8a:20:3b:2a:f2:59:97:13:f5:d8:e5:e5:d1:
1e:8c:fa:36:e0:df:36:75:46:b0:d9:69:fd:1a:f7:fe:60:df:
b3:26:70:3e:49:4f:b4:d8:4a:01:1a:b2:cf:72:57:71:43:90:
4c:9b:46:c3:77:7b:66:1e:4a:0b:01:fc:87:65:be:a8:7b:78:
a2:c5:f1:9c:44:15:49:3c:3e:62:c0:0e:c8:4d:f1:68:22:d9:
52:b5:a6:a5:ef:67:ba:af:02:d1:23:cd:2c:66:5f:65:3d:f6:
27:c9:03:2b:79:04:e4:98:37:9d:fa:8b:57:9d:3e:ee:84:d3:
25:aa:67:6c:46:63:a9:98:e8:54:01:ea:ac:25:cc:a4:3f:65:
87:94:f2:e6:6a:95:e3:c6:22:86:ec:d9:07:9a:17:bf:41:08:
97:6d:d6:b0:a5:8a:06:89:63:9e:7c:b9:4e:d9:c7:18:03:55:
8b:3f:2d:d2:b0:71:cc:4d:60:fa:3d:08:90:8f:fa:6f:9d:9a:
65:1f:cf:6b:73:c1:ab:32:43:e1:42:99:3b:eb:81:93:eb:95:
25:9a:e7:82:2f:2d:e7:c7:4e:b0:fd:4a:e3:ac:72:4e:ef:25:
31:de:50:ba:a9:ca:b2:aa:3b:a5:95:7b:66:09:49:7a:bf:16:
cb:20:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:02:46 2025 by rpki-client