Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier: KxcgVUhEC0U70bI2RgJ0iWl6CbdixAzk0O286SPR5tk=
Subject key identifier: 9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 5F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 15:29:50 +0000
Manifest this update: Fri 31 Jan 2025 15:29:50 +0000
Manifest next update: Fri 31 Jan 2025 21:29:50 +0000
Files and hashes: 1: 1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa (hash: y1yapVOWcFRVM0HkMcu6W1MzSDLeXbZvTAbExv3iZIU=)
2: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: m9fX8XWIp+VSD94Nrt5PNC2xQZ1n2EMK+w/FuWoFgI8=)
3: CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa (hash: hdqcb05bFxknkcwIdqOcWs1KgdleQYiVPEkSdv5OTow=)
4: LW8ZY2UtSYeujZ532V0CQrYeABA.roa (hash: F4Bh2cqcnHVRx++IenMMdugPp5fWZpfnO1OTNFONqyY=)
5: Yg61RxIhCNGDnQvVtwg-egnxOLU.roa (hash: 3XfY+iN0080xE/fEDKYWFBE5T1lbhQ0g9gRDubSk/jY=)
6: si24gGFg-sQtUpvK4DZtlqNS05c.roa (hash: /h7TLGBM959FC9Cv5rtuoN4A205gm+8xj8hpkkz0h/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Jan 31 15:29:50 2025 GMT
Not After : Jan 14 07:53:29 2026 GMT
Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b2:a3:a9:e7:52:c4:9d:aa:9f:7b:ce:0b:74:7a:36:20:78:
8b:a8:cf:f7:7f:3a:35:55:3d:a9:e1:e5:50:c4:97:bd:b2:6b:
cd:e2:0f:61:0c:67:1f:39:d2:b9:35:5b:66:32:1b:c6:01:9c:
b1:0b:14:cc:86:99:55:4d:47:4a:50:75:c1:4d:3a:ca:ab:02:
0f:a1:d4:c7:c6:05:5b:07:cf:ec:1c:b6:29:ce:56:ca:b4:49:
e7:e4:b6:80:c3:1f:d7:5b:62:a8:4c:e1:c0:44:0d:00:22:2e:
5b:0b:ea:df:2b:fb:a8:08:74:03:73:15:0c:5c:2c:9c:43:8f:
1c:e2:a0:c1:2b:73:4b:e4:8a:17:4b:ec:e3:08:57:27:f7:6c:
01:ab:30:a3:94:3c:f6:cd:8e:4d:ac:87:67:33:c1:d6:a6:e9:
ea:e1:f4:28:a0:7d:e3:42:97:ef:b6:85:b8:c2:9c:22:33:f5:
16:02:10:d5:ff:ac:a2:10:6b:eb:13:b8:1e:2e:e8:be:0c:e0:
23:f8:a9:12:4e:2b:20:ee:9a:7f:b4:7b:aa:62:dd:8a:d2:7c:
b8:03:30:71:32:ae:52:59:41:25:9c:f3:6d:72:93:5f:16:57:
34:2a:ef:97:0b:ac:fd:29:53:4b:85:7b:57:e8:08:c8:7b:da:
fc:c9:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:56 2025 by rpki-client