Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json)
Hash identifier: 46bvSyfnBDC5kqbt9xC0WSRnMWgyfLAfdisGLqv6rls=
Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 19A5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
Manifest number: 1995
Signing time: Fri 31 Jan 2025 15:24:31 +0000
Manifest this update: Fri 31 Jan 2025 15:24:31 +0000
Manifest next update: Fri 31 Jan 2025 21:24:31 +0000
Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: wJWzxDt913TM3g1zhUINTZ+cnwZl/pkIPvd/9dNjTvc=)
2: 2HOU41wf-RNx3ns6fUrUfDuRc6U.roa (hash: b3lr36MN4jCPuHOJb0pCCMEylOVXJG558DXiQogiClM=)
3: anYE50FB83Biwm9Cdfrin1Pdke4.roa (hash: H3AxRLrszvRvgNqwfmKEg+aMan4hBV5gw92ZRcjtfKI=)
4: hClPUnKZuAxsWwfQLw22FkUyHeM.roa (hash: 3jlVgVH+FCbudtpl6tLV+UmB6U3EaSEXQMSz/+0UPtI=)
5: jNiTXNtw-NVk-9eAX-55MR07eeA.roa (hash: XSnjJtxlfKEVYaAn23dvkns4Olz0nlV680zSSdJIpw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6565 (0x19a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jan 31 15:24:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf:
5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65:
77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39:
b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b:
b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c:
a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b:
d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51:
d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25:
ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75:
17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3:
b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59:
20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7:
80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3:
0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0:
42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e:
74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c:
e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:af:6e:65:19:eb:1e:00:33:04:93:59:01:17:b1:ad:14:bc:
b1:c9:48:ec:0c:df:40:5f:68:5d:1d:e1:a1:33:a1:8c:48:02:
56:59:f3:4c:65:d2:77:45:82:32:4b:0c:0d:00:23:21:48:d0:
45:68:f1:49:b3:db:6b:8d:33:06:ae:b4:aa:29:96:bd:16:aa:
4c:b5:fc:7d:b0:69:37:3a:25:ba:d9:f6:8e:35:1b:44:b9:6b:
7b:29:02:b3:21:72:c8:d5:a3:30:d4:ac:e8:1a:42:22:d1:1d:
88:f9:aa:1d:91:17:00:1b:5b:b3:1e:6b:5b:d8:5c:3e:88:54:
a7:d2:9a:d1:56:a6:5b:02:25:e2:75:7a:22:0a:94:d5:f1:e4:
0e:c8:db:cd:f8:c6:73:7a:8b:53:ba:7f:ca:36:91:99:80:ed:
ae:20:1e:4b:62:c1:f4:e9:9b:48:3b:9d:07:25:33:c5:b9:84:
fb:d4:42:6d:63:b7:fe:0a:2e:c1:db:71:f8:7b:d3:76:df:3e:
8d:9b:ea:12:b4:cb:80:b4:2f:83:78:ca:ef:d1:36:d7:42:8a:
9d:99:0a:6b:0c:4d:c1:e2:66:af:ad:2a:38:4a:d9:51:de:7e:
f1:58:b1:79:7f:4f:87:cb:e3:0b:d6:de:70:2c:08:4a:f4:70:
2c:83:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:42:15 2025 by rpki-client