Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft
File: 0eqai1ElBZBymdo4zqW8zmEJh8s.mft (raw, json)
Hash identifier: cWBiWy5Tj0OYkjD36hS5C5ydm+sMlYZI8Vsj1SZSzuI=
Subject key identifier: DA:64:DD:94:12:FE:5A:7D:2E:8F:1E:EE:27:B2:AE:CD:D8:FB:68:F0
Authority key identifier: D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB
Certificate issuer: /CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB
Certificate serial: 200D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft
Manifest number: 2007
Signing time: Fri 31 Jan 2025 15:26:21 +0000
Manifest this update: Fri 31 Jan 2025 15:26:21 +0000
Manifest next update: Fri 31 Jan 2025 21:26:21 +0000
Files and hashes: 1: 0eqai1ElBZBymdo4zqW8zmEJh8s.crl (hash: wcwXzY5dtW/fynTDGAK9gVUX6GvEujI8ceTUkobzjEg=)
2: jZb4pO6hNr2kqo_3TfgMx_5Dmig.roa (hash: gToiYgyZRMBcIApnLZrMA7yq3vrsRdKvwtqkTnYj0fI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8205 (0x200d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB
Validity
Not Before: Jan 31 15:26:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DA64DD9412FE5A7D2E8F1EEE27B2AECDD8FB68F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:9c:66:a0:bd:f0:07:47:2f:65:43:92:8f:
a8:01:be:ec:cb:37:1e:87:37:d9:4a:be:5a:08:95:
cd:c4:88:d0:b2:81:02:c3:ce:f4:ea:18:a0:60:c9:
55:c6:88:7e:60:9c:07:30:bd:88:73:85:27:08:16:
3f:c4:88:67:f3:37:72:e2:0e:96:c6:30:85:f7:d5:
ef:34:f2:42:97:98:d3:b5:f0:cf:41:43:8e:b7:03:
52:8a:c1:6d:62:fd:3b:c0:da:24:07:38:55:f5:b3:
95:53:b7:ad:ea:54:90:73:f4:63:f5:44:0a:53:77:
05:88:fa:a9:52:62:e7:ba:61:c3:64:92:3d:cc:ac:
c8:38:54:85:d1:d4:a2:6c:1b:12:bb:b9:6b:68:05:
4c:13:b3:33:79:f4:69:8c:b2:4a:6d:99:96:69:a9:
98:2e:14:5b:52:84:a2:96:4a:dd:00:38:d3:22:d6:
58:36:c7:9f:4b:fe:9f:7d:96:2f:93:85:b0:65:18:
25:32:45:04:2e:17:58:4b:5d:ac:83:cb:2f:e7:88:
f0:e3:f0:7f:93:07:d8:a6:4c:20:4c:47:21:1d:f3:
5c:18:ce:81:34:79:f0:cf:ba:81:de:da:bd:de:10:
7f:c1:5d:dd:a6:b7:ce:91:ca:61:cf:c3:39:fe:a1:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:DD:94:12:FE:5A:7D:2E:8F:1E:EE:27:B2:AE:CD:D8:FB:68:F0
X509v3 Authority Key Identifier:
keyid:D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:c2:1e:43:51:d3:8d:95:11:19:08:67:87:7c:3d:2a:09:
cf:0f:ed:34:ce:c6:d1:82:c7:18:24:a1:da:0b:91:be:77:ed:
28:1a:88:d4:95:73:e7:23:fe:e8:d0:ff:10:f3:02:85:79:f7:
26:1b:d3:f4:c6:30:12:79:03:75:03:34:cf:ed:47:f0:42:5d:
e5:09:88:62:12:c9:f7:90:41:38:17:5e:3e:8b:95:a1:6a:5d:
70:e0:aa:f1:31:c5:ee:81:7b:39:ea:18:fb:cc:e6:55:55:86:
b4:ca:bb:5c:e9:d3:55:67:27:61:8d:fa:a4:d5:23:3d:b1:02:
2d:e3:91:dd:f9:ad:3e:e9:fa:a5:39:ea:73:59:1a:f5:ca:d2:
37:12:1f:e2:12:cb:f3:a0:cb:5b:cb:ce:cc:4d:33:cd:a6:fb:
78:fc:5d:df:ef:ab:da:b5:20:c8:82:dd:fa:f0:ea:d5:9e:d9:
fd:b2:eb:91:55:83:ad:6c:50:27:cc:bd:95:81:bd:af:b3:a5:
70:aa:cd:22:98:11:60:ff:e8:6f:14:73:12:be:12:19:3b:aa:
5c:34:2d:f6:14:1a:3b:c1:a3:39:39:8c:ab:03:e3:d8:05:c7:
cb:c6:ad:44:26:68:4f:f1:2f:a5:9e:b3:ca:30:ed:2f:54:38:
4b:61:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:37 2025 by rpki-client