Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
File: duBG4-yhC5KEmfIqXnZcBBamCk8.mft (raw, json)
Hash identifier: zboHKbD4kcJedTNWYvukJxrrSb/MQXXGJ5YdrcUeaVY=
Subject key identifier: 1F:44:50:DA:9B:90:A5:0F:69:84:DE:1B:10:F0:B0:D4:44:71:B4:DC
Authority key identifier: 76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
Certificate issuer: /CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
Certificate serial: 5C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 15:29:53 +0000
Manifest this update: Fri 31 Jan 2025 15:29:53 +0000
Manifest next update: Fri 31 Jan 2025 21:29:53 +0000
Files and hashes: 1: -pOXMMTVuNVGKhJq4oVS9X0lPjQ.roa (hash: iXzhCp0U5w+K/Q1XAD2w9nTfhkMuQ1L2woREzYBgcic=)
2: N4VoeXRmbTCfdWn-G1RCRF_auPY.roa (hash: OPRIP+qSDei+QWOU020Lm+y3XMbTygW8/4+15pFKOt4=)
3: duBG4-yhC5KEmfIqXnZcBBamCk8.crl (hash: T0jATyWZ9bEqJK6X7xxfyPe84MbleCbW0s9kSX0zEXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
Validity
Not Before: Jan 31 15:29:53 2025 GMT
Not After : Jan 14 03:00:41 2026 GMT
Subject: CN=1F4450DA9B90A50F6984DE1B10F0B0D44471B4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:22:8b:10:0a:7d:bd:e5:1e:85:28:46:34:
71:80:a4:ba:0f:e9:9e:65:fc:e1:5d:a0:0f:19:34:
af:51:68:a3:67:2f:3b:66:25:f1:12:68:7b:5b:04:
35:c1:0c:b2:12:72:84:90:04:1b:d4:d5:a0:60:ca:
55:4c:1c:4a:35:d2:c4:ea:6a:09:12:aa:1a:d4:9e:
ab:17:f2:53:2c:55:3c:6d:11:e9:3c:d6:b9:8a:51:
ec:34:d8:6a:61:b7:b4:07:77:68:5a:71:74:c9:5f:
ff:4e:68:4b:f0:f8:ea:50:79:34:03:4c:0f:be:be:
82:23:87:56:55:12:71:77:20:f0:62:c4:7a:b9:0e:
38:00:52:a5:4b:6e:5a:b7:a2:96:31:48:60:22:1e:
82:51:d9:85:28:92:82:02:ad:7d:78:35:63:b9:c7:
69:cd:fa:ba:6e:25:fa:30:d5:bf:da:d4:5f:7d:ed:
2f:bf:d3:d9:ea:f7:40:35:02:8a:17:85:da:ca:18:
ac:01:0b:de:45:0d:9d:ff:d6:a7:85:2e:c7:87:6e:
d2:66:b9:a7:74:06:2d:99:dd:9b:5a:59:fb:ec:c3:
86:92:4d:fb:08:24:99:f0:6a:5a:e1:1e:b1:3a:84:
8a:9c:c8:96:ee:56:e6:c1:98:59:c2:28:ad:2b:c7:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:50:DA:9B:90:A5:0F:69:84:DE:1B:10:F0:B0:D4:44:71:B4:DC
X509v3 Authority Key Identifier:
keyid:76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:b5:79:9c:3c:0a:92:e3:f8:97:cf:14:e9:d3:3b:8e:cd:4d:
23:2c:bf:3d:82:23:48:e7:1f:93:a5:c8:55:2f:65:61:42:3d:
26:dd:d8:b3:2b:68:81:4d:30:40:58:2b:e2:d8:83:d2:fb:bc:
5e:e9:f5:81:5d:3b:2e:85:8d:4f:7e:73:1f:74:f5:d3:85:97:
24:06:03:d8:7b:45:02:56:ec:5b:fb:01:2b:70:56:d7:06:85:
8f:35:b8:f8:86:b2:d8:52:63:7d:5c:c6:9b:56:4a:57:22:0a:
2f:fc:22:1a:d3:fa:57:b7:04:76:dc:0f:9c:8e:aa:a0:73:31:
36:e8:ec:68:af:fe:b2:b6:ee:83:22:52:c0:dc:67:45:42:65:
e2:bc:ba:ad:ab:09:cd:6d:0d:f1:c0:92:ad:ed:e5:c1:a7:63:
ae:8e:ab:5d:80:ec:44:07:ed:94:e3:57:da:54:67:aa:8a:1d:
e1:29:40:bf:b3:12:66:f3:c3:c4:1f:31:ec:4b:dd:08:b6:3e:
72:0f:ec:6c:6b:b4:62:47:65:41:d6:12:04:7c:09:09:ef:c4:
5e:0d:20:01:fd:fd:0a:e7:86:7c:c7:4e:18:fe:25:9c:cf:7d:
33:51:f6:a4:af:a8:dd:eb:9a:31:1c:38:48:d3:90:f0:bd:d6:
7c:ab:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:31:32 2025 by rpki-client