Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft
File: 3uCPUof2aTE85pkPEXQBsXmEiuE.mft (raw, json)
Hash identifier: hTZETqSfCghhHb2Wzo5UQheL/E41bpyJAo4UKQWJa/A=
Subject key identifier: 73:76:0A:42:48:92:4B:44:02:2C:EF:E6:67:D6:9A:69:43:DA:A4:EA
Authority key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
Certificate issuer: /CN=DEE08F5287F669313CE6990F117401B179848AE1
Certificate serial: 1C04
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft
Manifest number: 1BFF
Signing time: Fri 31 Jan 2025 15:29:45 +0000
Manifest this update: Fri 31 Jan 2025 15:29:45 +0000
Manifest next update: Fri 31 Jan 2025 21:29:45 +0000
Files and hashes: 1: 3uCPUof2aTE85pkPEXQBsXmEiuE.crl (hash: P0GqbwHORYpY5tDDAQKMtoMoeE83mZySjTfkfmKo4e4=)
2: gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa (hash: /ePEyOx0cammh0obLmcE/YBuFH1gX+5nN6CzmwxqWsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7172 (0x1c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE08F5287F669313CE6990F117401B179848AE1
Validity
Not Before: Jan 31 15:29:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=73760A4248924B44022CEFE667D69A6943DAA4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:fe:97:b2:a2:7a:a1:62:92:45:75:1a:ed:
5c:02:01:0f:3b:ca:31:45:89:26:35:14:ff:50:e9:
f0:b0:2d:43:37:2c:11:61:ac:7d:82:b8:8f:62:a6:
f5:f0:b0:a2:bb:25:64:69:8a:68:85:a7:73:eb:a5:
aa:1e:2c:e7:1b:63:27:d8:c9:ce:75:9e:de:7e:4b:
2b:9e:cd:d7:37:8d:cf:bd:e7:1c:79:05:8a:eb:a2:
ac:b5:1c:67:67:88:7f:be:83:e5:29:00:9e:3f:db:
11:ba:25:56:29:68:34:a6:74:af:cd:f2:42:33:da:
76:7b:3d:22:e3:55:62:3f:a6:89:e7:1d:de:62:81:
3d:8c:e7:f8:2e:53:1d:68:88:a3:f3:2a:f0:6e:f1:
96:df:ba:22:bf:24:c7:c4:eb:59:e3:57:5f:e4:ab:
0f:01:13:69:7c:c9:aa:4c:e8:cc:18:f0:3e:4d:f7:
de:b5:a5:8f:df:61:e6:aa:7a:dc:4f:48:43:a0:4f:
51:f5:3e:de:74:ea:fd:1f:c5:d8:b1:e9:7d:32:0c:
9b:51:7a:0d:1f:7c:17:64:3b:63:22:51:b3:95:ba:
ea:0b:07:4b:c4:6b:b3:6f:b1:83:bb:4d:e9:10:82:
a6:5c:1f:18:c9:78:80:8d:c4:38:ef:20:9e:ad:f1:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:76:0A:42:48:92:4B:44:02:2C:EF:E6:67:D6:9A:69:43:DA:A4:EA
X509v3 Authority Key Identifier:
keyid:DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:90:86:fa:17:2c:ef:e7:0d:3a:b3:47:c6:87:9a:d6:19:47:
b3:96:81:86:22:68:bb:6e:a2:e5:89:3d:2a:4a:25:97:ad:0f:
6b:f0:e4:2d:eb:f9:4a:90:59:e6:ec:4a:83:0d:e4:a2:af:bc:
83:3a:0d:38:ed:cc:9d:93:f8:2a:4e:f8:c8:8e:7c:d1:b9:12:
9f:58:60:61:ec:ae:66:26:fe:94:69:2f:27:1d:bc:c1:57:d5:
09:ae:46:c8:40:ed:b0:03:36:34:36:d3:6a:7e:6d:7f:52:32:
43:cd:12:67:79:85:e9:d0:0d:ed:ba:a3:14:ed:77:1f:f0:9c:
9d:c8:10:12:c7:3f:ae:f9:e1:f0:ff:fb:f9:fb:4a:34:02:b8:
58:49:8d:b1:3f:e6:b6:38:00:d7:7d:5e:27:e7:12:e7:29:7c:
52:6d:bb:87:5f:4a:4f:b3:76:01:80:65:dc:ee:53:a0:b6:f0:
7a:4e:21:90:eb:db:03:4c:51:67:a6:8f:74:ea:67:c3:fd:f5:
f5:35:74:8d:07:f3:7a:c0:eb:40:36:05:43:1d:68:ec:96:cc:
98:ca:1e:0c:14:58:e7:c3:5a:1f:fc:39:9a:65:a3:3e:d6:34:
be:1d:33:62:b3:4a:ac:bb:56:96:ef:27:7b:e5:95:8f:ea:a5:
18:5c:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:20:16 2025 by rpki-client