Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
File: Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft (raw, json)
Hash identifier: FrVB6rKwmnqZrclocRzVRU8Pjn4QK/toEyTdbsxeDto=
Subject key identifier: C6:62:60:92:EB:E0:20:F9:A5:D5:A3:98:08:75:01:84:69:A0:3D:F4
Authority key identifier: 63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
Certificate issuer: /CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Certificate serial: 0609
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
Manifest number: 0605
Signing time: Fri 31 Jan 2025 15:24:35 +0000
Manifest this update: Fri 31 Jan 2025 15:24:35 +0000
Manifest next update: Fri 31 Jan 2025 21:24:35 +0000
Files and hashes: 1: Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl (hash: qeOmPGqZ5PCRJolJ+SbiDMKHTwTfU9GGJ449sEbKLlc=)
2: jhEl146Xh18nVcFHzrgpQEmSx_o.roa (hash: /SsBB3irtj2eTzoAwSinOxBMNYgfwekptzt5QE81VUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Validity
Not Before: Jan 31 15:24:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C6626092EBE020F9A5D5A3980875018469A03DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:d6:71:d5:37:b6:18:8f:49:b2:c1:39:5a:
d8:a9:eb:58:04:31:ca:00:28:cb:0a:69:18:ba:81:
e1:c6:b0:1b:f6:c4:77:72:7c:b7:bc:f3:cf:1c:fd:
ab:2d:a1:da:6d:fa:ea:41:e7:01:e5:de:b9:ac:71:
b3:9a:d8:33:6e:3d:6a:fc:e7:58:bd:93:5f:fe:91:
7f:13:92:bd:1e:8a:1d:ea:dd:59:53:61:de:2a:c6:
b5:49:7f:8c:44:a4:eb:27:44:d8:02:25:b8:b9:16:
0f:a6:72:1e:c4:fe:09:5b:65:ea:c3:f1:02:35:36:
36:73:ab:6d:2b:0c:1d:b5:b2:80:4a:9d:1d:42:67:
2a:d2:26:01:3d:c9:e9:71:91:fb:e3:98:4b:3b:18:
3a:ca:e4:46:47:53:09:30:fa:26:08:20:5a:45:34:
49:9f:f0:98:d2:0e:d2:6e:43:ea:ae:c1:4a:19:b0:
2f:92:a4:54:ab:a0:d3:fd:9e:34:8b:57:7f:32:3d:
8b:d2:c0:07:db:b5:e3:85:62:75:31:48:c6:1a:ff:
54:c9:ff:4f:f5:fe:58:08:b0:76:31:71:3d:4c:12:
2c:2c:e3:cf:cb:86:29:66:63:6e:20:50:a4:c7:71:
00:6b:af:34:d3:bf:0d:31:88:aa:ed:b0:8f:9f:d2:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:62:60:92:EB:E0:20:F9:A5:D5:A3:98:08:75:01:84:69:A0:3D:F4
X509v3 Authority Key Identifier:
keyid:63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:8e:bb:83:28:2e:c3:f7:e0:31:c3:43:bc:22:28:48:f3:bd:
dd:b9:fa:3c:aa:2a:41:c0:2c:b4:45:ba:8b:76:79:25:dd:02:
9c:b3:f0:c4:92:76:0c:fe:f0:48:f7:87:bd:c8:e3:e2:e2:ae:
3e:0d:56:b6:af:10:9e:5a:cc:ac:ac:04:28:f2:ad:5b:7c:db:
c1:5d:a9:97:53:a6:fb:dd:96:f3:b6:1a:f5:95:8f:9e:8f:5d:
71:94:ba:d4:99:dc:01:f0:32:8a:a7:69:82:b6:53:3e:70:24:
96:00:52:57:41:e4:d0:f3:ce:08:0f:9a:1f:03:10:cf:fd:3f:
49:71:2d:0d:38:e2:56:7c:aa:46:58:e6:af:18:3b:3f:4f:c6:
8a:d5:98:c2:b2:9f:12:ec:73:0c:45:52:b4:01:03:4f:5b:1f:
af:f3:06:5a:fa:13:af:bc:9e:02:5a:a4:ec:d7:31:53:4e:4f:
4c:c6:8c:a4:93:ab:70:f1:27:9c:a3:2b:29:db:c6:a4:83:50:
6e:91:ec:56:76:5a:35:45:ab:db:eb:ca:b4:76:3d:c9:f6:69:
fa:c5:df:d8:82:ad:e5:dd:93:06:35:f0:11:47:30:88:e9:b5:
93:97:03:c7:34:14:83:f6:6c:60:29:30:d9:72:8c:f0:86:5b:
22:1b:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:59:01 2025 by rpki-client