Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft
File: e13JVZm-TeRUqZwMJXU9HgDHQU8.mft (raw, json)
Hash identifier: zcYjLr9W+V15R3O1w5WFrgO8TRxson07esifXAdQFOQ=
Subject key identifier: 22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E
Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Certificate serial: 07E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft
Manifest number: 07DB
Signing time: Fri 31 Jan 2025 15:24:12 +0000
Manifest this update: Fri 31 Jan 2025 15:24:12 +0000
Manifest next update: Fri 31 Jan 2025 21:24:12 +0000
Files and hashes: 1: 0c9Dpd_fmCCojb9ROkhUQPHsCMc.roa (hash: NLo7OOzXP2h0U/Nq2VInDVYM7g3dQTjbCRAd2XCOTUU=)
2: e13JVZm-TeRUqZwMJXU9HgDHQU8.crl (hash: xCf9voZ/THnrgYHNviCcasumX5hNUuS7aXRK3TVqYww=)
3: pDho9MjJ_TSqsxDyEtREO0DkXR4.roa (hash: +F4f0iEvFp09RN5eOqprEsyEJioxSwoVwMJ8lPEGTHg=)
4: qv7jmQZZzsvvxaso_WqyEH6osTk.roa (hash: e3Xk5CPCwhadVOiQcNYD2/43mnX1RtmEaogikQg6AT0=)
5: xzgnXL4X4Mnp8vjJl7KMYz-fSDo.roa (hash: nYWQt5bArg3VV2bHWLfeb/ZRysXVjsaV65sDVImttJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024 (0x7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Validity
Not Before: Jan 31 15:24:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=224038AAD84194E3A8920113F5E51774F436363E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:66:18:f4:fa:4e:97:03:2b:82:ef:26:5e:
9f:c5:a9:bd:97:41:e4:21:b0:41:c9:2c:19:9d:04:
b3:73:de:57:74:4e:2e:bb:16:80:b2:2a:e4:f6:8d:
89:26:69:1e:73:14:7c:67:78:1c:c7:30:7c:19:e3:
5b:33:0f:1c:87:8d:d2:bf:d8:67:57:08:b5:50:93:
01:d7:c8:dc:21:61:9b:75:60:64:85:b1:b1:5e:cc:
0d:d9:5b:23:e2:83:70:17:7c:db:90:58:80:ed:1d:
01:7b:d0:df:18:e2:90:77:d1:4c:3e:b3:66:59:3d:
c3:00:e3:2c:ec:c3:fb:30:93:c2:2e:a2:0a:59:49:
e5:04:da:28:3c:f8:01:3b:41:4d:07:05:92:b0:00:
f7:a7:3c:c3:b7:5f:0a:d1:22:17:49:68:48:be:fa:
10:05:87:55:0e:6b:3b:a4:8c:86:90:ce:de:69:dd:
68:48:c9:76:3a:c6:2f:95:bc:41:87:96:87:fb:cd:
11:01:52:d9:b0:b9:c9:28:8d:d2:42:72:bf:b6:5f:
a7:af:50:a7:5a:1b:e4:3b:58:c8:52:00:7f:c5:da:
d0:22:3b:c7:b1:c6:29:f7:1e:1a:1c:16:0a:76:62:
f8:ce:e2:88:db:cb:a7:71:12:10:21:a6:2d:41:85:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E
X509v3 Authority Key Identifier:
keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:49:b0:4f:2e:29:02:d2:a7:7a:89:18:5d:42:3a:e7:c1:
eb:ef:68:e6:2a:c2:c4:04:c7:7c:46:c6:43:0f:47:12:e7:b9:
39:3a:90:0e:aa:da:92:4f:c6:17:b1:e4:ad:81:e1:30:8b:ff:
6f:38:36:fd:06:7f:f7:30:d7:b4:45:3d:44:3f:d6:94:4a:bb:
05:b1:03:26:66:34:36:b2:c2:de:87:06:27:cd:6e:1f:9a:6e:
f2:df:30:df:a2:b5:ea:8f:15:26:a6:c6:7f:6b:12:0e:23:d1:
db:a6:90:10:94:cf:6f:d9:d8:61:d8:e0:5e:3d:85:63:7f:02:
5e:be:8e:45:15:37:de:61:e3:0b:1c:b5:f2:07:ba:51:78:35:
8b:24:a2:7d:bf:e8:62:98:0e:db:a8:50:7c:69:9e:17:e8:f8:
13:39:2c:04:74:a5:e7:41:42:bf:04:f7:b9:60:91:74:93:fc:
61:f4:fa:db:03:a6:c4:40:cf:16:84:95:3e:50:af:ff:92:18:
18:03:50:7e:6a:43:b7:63:14:1a:93:a8:c8:03:58:fc:52:18:
99:4f:04:ae:d6:d8:c0:55:76:b3:98:21:bf:6a:02:7c:3a:30:
b1:ad:df:cf:02:31:86:93:eb:df:69:a2:63:5b:17:62:9d:56:
da:2d:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:53:50 2025 by rpki-client