Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft (raw, json)
Hash identifier: OLtMFdsoUXfONesZg5NQt40efEm2EhOSBn3WpMzouvc=
Subject key identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 4D69
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
Manifest number: 4D58
Signing time: Fri 31 Jan 2025 15:25:40 +0000
Manifest this update: Fri 31 Jan 2025 15:25:40 +0000
Manifest next update: Fri 31 Jan 2025 21:25:40 +0000
Files and hashes: 1: 5xiBP9oAgtPkPbuqp_jQN04CKOk.roa (hash: tceHGoGymQUtpl0azpN7OzZGjav6xnOi9XVl7tk4RAQ=)
2: 62dLcW3plavrpsIbNHqw720lfPk.roa (hash: gCTxCmZ8gdoRjQKUaCHDH/9k8CDn24niIaIerASZoKo=)
3: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl (hash: GyV8bGlPKXoHS1/CifNy7vksBUT3F0L27ZI6iPRULTs=)
4: a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa (hash: O0NyOV0UC0NpDn6gKD43mD7tWOO7tpD0289aGPnpmeU=)
5: qhqQ6XGpQKke9iH_XzcMeWU6yJs.roa (hash: SYubhtFtKwSFcNFEuS+OIUJ6kBhpjBEexfpRrZUfZr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19817 (0x4d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Jan 31 15:25:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=339CE041528F9C61F954C6F0EBB8166EFB62E93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:45:9a:5e:6f:d5:e6:df:34:4a:eb:9c:c4:
81:f4:30:d4:e4:49:ab:f8:bc:e5:31:7c:db:aa:97:
31:91:30:9f:12:80:99:cb:5a:5f:c4:27:6b:ff:98:
04:b1:a1:72:03:32:10:d4:8a:4f:15:6c:f9:a6:dc:
e9:7a:3c:4b:e9:3f:4a:06:90:33:ef:9a:76:36:87:
12:62:7d:94:07:fa:4e:d0:ee:c4:f5:00:b7:90:55:
aa:a5:79:23:32:36:02:0b:f3:98:c3:7c:fc:2e:90:
d3:c6:f4:e8:93:b7:f3:54:84:b1:ea:58:82:f0:9d:
6b:10:91:18:df:67:81:8b:c7:2c:6f:51:8d:b8:35:
cd:29:e7:09:5e:91:3b:4c:33:9a:3b:96:08:6d:96:
a1:0d:00:d2:27:04:6c:d1:1f:40:8a:7c:4f:c0:a8:
92:65:1c:41:32:41:37:bc:67:f4:6c:10:94:51:b1:
07:be:ec:21:57:6a:0e:4d:ac:26:1f:aa:c5:19:11:
f3:1a:8b:28:f7:a0:67:25:b5:b5:62:fa:14:9f:5c:
fe:ab:b5:25:c0:eb:c0:f4:c2:57:0f:14:82:e9:7f:
2b:b8:97:cd:4e:3e:53:b5:d8:2c:a2:6d:73:69:3f:
5f:56:4a:94:3b:d3:ff:b7:ff:9f:8f:d8:94:9b:d1:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:fc:5a:5d:31:51:5b:77:fb:f8:d3:eb:40:39:93:b9:91:69:
79:48:93:ff:a9:e7:d9:5d:c3:51:14:13:6a:d6:a4:45:5c:aa:
e1:e1:ab:7e:36:71:ad:d5:fe:8a:08:b4:ce:d1:f6:06:66:74:
61:c9:06:1f:d8:e2:05:37:7d:09:e3:73:10:39:73:1e:0a:ad:
d5:ab:09:f6:66:d1:af:30:f9:61:11:6b:f1:35:43:7d:f7:ae:
1f:9b:43:45:fd:4d:48:f9:4a:43:58:02:b7:88:97:ac:fb:ca:
95:81:9b:5d:72:db:82:64:61:d7:85:52:ab:89:aa:a5:ac:75:
45:24:cf:16:aa:2d:ef:9d:dc:fd:ba:c7:38:3c:6d:61:d3:f6:
c3:e2:08:7e:25:d0:f8:1f:df:d1:b9:b6:0e:9c:18:41:28:12:
90:40:c9:cd:52:27:e0:21:c8:19:c3:01:5d:2e:48:9f:a7:5a:
bd:1b:50:73:6a:ec:42:3d:a5:be:ee:40:0f:29:58:07:b5:2d:
c7:7a:0b:2e:ae:83:be:71:0f:da:3d:ec:ee:58:47:74:33:37:
b2:f9:39:fb:84:3e:51:6b:79:e6:fd:5a:4c:c5:b9:32:1c:51:
17:87:2c:64:8e:67:8e:eb:85:64:3c:78:db:ef:fc:dd:97:6c:
d9:85:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:00:20 2025 by rpki-client