Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
File: jj4CcULGM9VlmEGN9t68Ab3YAIw.mft (raw, json)
Hash identifier: 9c5SVwVEVKJEuJ48vwAaxNgp9w4fHN9N3qujAHt8b0Y=
Subject key identifier: CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 12EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
Manifest number: 12E2
Signing time: Fri 31 Jan 2025 15:26:13 +0000
Manifest this update: Fri 31 Jan 2025 15:26:13 +0000
Manifest next update: Fri 31 Jan 2025 21:26:13 +0000
Files and hashes: 1: 4mivCFMBAf7EEBKKxRo0rub4T64.roa (hash: jz9z1yXxrP3c49QtbOgAGOSwj2Y8ZkTwUpXiF59bJtI=)
2: jj4CcULGM9VlmEGN9t68Ab3YAIw.crl (hash: Fg7+M/mPcfw5J13NlQbqwvnXHsvJWztczeCPFhnT+xU=)
3: kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa (hash: XHI0J5/o5O5ceg1Z+ckCn+FaTtcIPko4W8gNfs++aKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4842 (0x12ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: Jan 31 15:26:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CD0DA4347661962168388026EA8966599564316C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:1c:56:12:f8:80:bf:f0:c2:fd:a7:4d:2d:
16:9e:1d:4d:9e:3e:08:a2:38:57:36:91:63:3d:f1:
e4:5b:44:e8:9e:e7:a7:79:48:59:02:ec:34:53:6b:
ac:59:7f:70:4b:62:43:fa:08:97:27:12:4f:31:13:
e9:1a:eb:49:15:35:eb:7f:75:7c:2e:98:23:ed:f4:
7c:15:ec:81:50:d2:bb:63:2b:70:f6:af:ce:34:eb:
88:fe:46:f2:d3:9f:fa:3c:f2:96:6b:31:26:5a:f4:
c3:7f:19:06:92:95:ae:2c:ac:5e:eb:77:b4:c8:1b:
26:15:84:ec:8e:f0:a9:48:25:5f:d9:46:3a:16:42:
8d:5f:aa:ef:04:6f:2d:5b:7d:68:ea:0f:44:48:d5:
d1:db:ff:ce:07:3f:7b:65:09:55:7b:b2:2f:b0:be:
55:97:02:ef:2e:a3:8b:f0:01:87:57:38:a8:24:bf:
b9:5f:65:23:4a:7d:56:3b:b2:3d:71:04:31:d5:74:
dd:c0:b1:12:81:8f:82:50:8d:5f:3e:50:d6:f6:18:
b4:66:f1:27:d9:90:62:79:c2:c1:0b:d5:d9:7c:20:
12:0c:b6:5b:ce:6f:6c:8a:c9:0e:c4:db:18:65:53:
d6:17:a0:aa:da:28:8e:d2:25:62:50:bd:0e:51:20:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9b:3d:2c:da:96:93:4c:ca:ea:cc:00:09:82:08:09:f9:b2:
4b:ee:19:cc:72:2d:ed:df:95:ac:05:2d:9c:6c:9b:4a:04:34:
c7:a8:75:3f:e4:20:71:cc:2a:cb:a7:4a:32:b3:c5:fe:15:5f:
b0:9f:7e:b5:75:90:48:b6:c7:b2:9e:8f:5a:6f:9b:b1:1c:95:
f9:7d:98:ab:b8:12:80:10:43:e8:31:28:f3:83:b8:9c:97:7a:
ff:42:9b:d9:2f:69:51:cd:76:72:2e:58:81:9e:79:46:82:d3:
f5:54:14:1c:fb:ec:9f:c1:e5:92:aa:b4:11:4c:e0:a6:0d:34:
e3:47:7e:47:1d:4c:4a:94:9a:77:d1:e5:94:c4:c9:ba:f3:ce:
de:ac:7d:cc:0e:90:0d:ab:d7:f7:81:37:af:ab:22:b9:57:fc:
a0:65:62:c7:eb:b4:da:a3:85:67:68:e7:02:f8:b4:31:c0:74:
3e:2c:90:8d:21:b1:de:d9:c3:dd:33:a2:85:0a:95:cd:18:78:
dd:61:b5:77:a0:71:61:e7:ad:6c:15:98:fc:e6:ea:0e:25:4e:
9f:69:49:ba:69:58:94:da:fe:87:9d:9f:05:25:4d:a3:5d:c5:
f4:a6:ce:6c:c9:c0:0d:cb:84:e5:fc:55:cb:a0:e8:60:15:74:
6b:05:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:42:04 2025 by rpki-client