Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft
File: F6w3URKlYkYZSaNmCiPH5xwGM18.mft (raw, json)
Hash identifier: idRQnF7ObNocNDc3sWNZ6Be0jrAwjfRrcDHPWbc2IjY=
Subject key identifier: 9A:76:F6:4D:81:A4:8D:3F:73:16:C1:32:5C:7F:77:C9:1A:3D:2C:9D
Authority key identifier: 17:AC:37:51:12:A5:62:46:19:49:A3:66:0A:23:C7:E7:1C:06:33:5F
Certificate issuer: /CN=17AC375112A562461949A3660A23C7E71C06335F
Certificate serial: 02BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F6w3URKlYkYZSaNmCiPH5xwGM18.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft
Manifest number: 02B9
Signing time: Fri 31 Jan 2025 15:27:27 +0000
Manifest this update: Fri 31 Jan 2025 15:27:27 +0000
Manifest next update: Fri 31 Jan 2025 21:27:27 +0000
Files and hashes: 1: F6w3URKlYkYZSaNmCiPH5xwGM18.crl (hash: 3KOrpq1uBPQ1yhzNVrlVpz9czXlp+H/XNKhh8m7FgzU=)
2: ObV1EwOf_xKxvkjyxZX3fPfjjhg.roa (hash: aC/D4SGWKN5MpbX7jVbeUdllRiJHyjoSAnU78TKLKbs=)
3: Re3yW8Rn7krMvzvXMHzSrFM0l3c.roa (hash: 9jToPHySwiK8ywp/3AJR01tYj4lltsAKY0S9/fPicX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AC375112A562461949A3660A23C7E71C06335F
Validity
Not Before: Jan 31 15:27:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9A76F64D81A48D3F7316C1325C7F77C91A3D2C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:4c:17:00:5e:7d:e8:ad:8c:dd:41:a1:96:
4c:f2:c8:90:64:0b:ce:32:3c:28:4e:e8:4a:b8:9f:
22:79:c0:03:9a:6d:a9:38:9e:6e:ac:f6:4f:b6:30:
c6:d9:af:eb:e9:19:bf:4d:b4:b2:cb:2b:52:25:da:
8b:c9:42:2c:b0:ae:80:ea:5f:3a:0d:1d:33:96:41:
6c:d6:a3:b6:86:06:eb:cb:23:50:aa:5b:73:18:5c:
8f:37:3d:11:c4:e9:a7:fd:9b:b6:d8:02:f5:03:09:
61:07:52:f1:cf:6d:e6:dc:b2:b4:1e:2d:43:b4:a8:
5f:c3:6c:a8:59:c2:50:c1:13:a6:54:bb:e0:89:89:
8f:fe:43:ad:ab:23:2e:a9:cb:41:12:41:8c:e4:01:
4d:1f:47:e1:ef:d3:d5:33:a8:d1:a1:51:68:43:0c:
87:d2:a6:11:2a:02:e6:fb:03:59:40:04:98:4f:85:
df:92:a1:e5:c4:26:90:64:27:67:64:e1:a2:7a:69:
55:a0:3a:38:77:ea:ae:c3:a0:cb:a6:af:f1:0e:94:
8c:eb:7c:4b:b9:d6:a2:90:95:18:7b:cb:48:0c:34:
3c:92:89:ba:ce:b2:63:88:b6:be:8d:90:2b:3c:7b:
fa:20:86:ae:ba:ae:45:4f:e2:f4:4c:cd:51:f7:04:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:76:F6:4D:81:A4:8D:3F:73:16:C1:32:5C:7F:77:C9:1A:3D:2C:9D
X509v3 Authority Key Identifier:
keyid:17:AC:37:51:12:A5:62:46:19:49:A3:66:0A:23:C7:E7:1C:06:33:5F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F6w3URKlYkYZSaNmCiPH5xwGM18.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:73:85:53:bd:a9:0d:a2:28:bc:a7:4d:15:50:2a:95:41:
d7:79:f2:49:a2:54:9e:98:06:62:da:79:85:8e:c0:99:c6:bf:
c3:6d:dc:29:8f:5c:13:d6:ea:4b:c3:a0:54:71:0f:34:f0:7b:
ce:ac:13:c1:0b:97:98:6a:82:08:77:23:58:0e:3d:11:96:b7:
a6:7d:3a:c8:a5:1a:c4:41:fe:f1:b7:6f:d7:cf:37:9f:c1:37:
c3:b5:a9:9c:cd:af:18:b8:a3:18:d3:c9:df:fb:42:5d:14:fe:
fe:c3:92:4f:81:db:e8:75:2d:d3:37:4d:5e:ee:94:25:65:13:
f6:51:b4:c6:3e:6b:2c:d8:3d:ed:84:94:6d:eb:a5:4a:7c:2e:
d0:7d:cf:fe:e5:00:80:1e:68:a5:c7:07:46:b3:e2:0b:ec:bb:
ed:69:ed:f1:ba:ec:c9:d5:ed:48:ab:e8:f9:4b:a1:da:9a:8d:
44:97:9e:50:f8:a8:18:b0:38:47:d8:df:63:2a:c5:3e:af:d8:
aa:36:7b:38:55:ed:b6:33:7d:b7:4a:4f:ba:07:fc:75:c2:1f:
83:d8:97:a2:48:76:f5:96:a1:0e:a4:4e:b4:87:60:41:5b:cc:
f5:30:0d:13:b2:7f:13:9d:21:05:8c:9c:26:92:dd:7d:e5:b5:
55:e3:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:43:09 2025 by rpki-client