Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
File: kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft (raw, json)
Hash identifier: uUsc9HNuR7hiU5tA2uY+2UI5LQi1S+NX8DGXhKEKCno=
Subject key identifier: 02:BE:71:AB:DC:17:50:55:EE:56:6B:24:25:4B:64:E8:B0:74:2F:4B
Authority key identifier: 90:77:E7:B0:AF:58:0F:78:FE:01:06:99:FA:0D:B8:10:7E:18:6F:07
Certificate issuer: /CN=9077E7B0AF580F78FE010699FA0DB8107E186F07
Certificate serial: 0722
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
Manifest number: 0720
Signing time: Fri 31 Jan 2025 15:24:39 +0000
Manifest this update: Fri 31 Jan 2025 15:24:39 +0000
Manifest next update: Fri 31 Jan 2025 21:24:39 +0000
Files and hashes: 1: kHfnsK9YD3j-AQaZ-g24EH4Ybwc.crl (hash: exNC74ZhVSEggPDqDD3sXV1wSggsUL5cbguM4hRiqfg=)
2: pAdMn1MlkjJlCVSP2QmkkAwaBc8.roa (hash: 1Ko/Sx6oQmP0Opi3hp+4gnvjm2R0mnMU8LAySvjv/+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9077E7B0AF580F78FE010699FA0DB8107E186F07
Validity
Not Before: Jan 31 15:24:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=02BE71ABDC175055EE566B24254B64E8B0742F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:bd:b4:6b:bd:11:af:30:2c:d0:71:fd:49:
1f:03:b2:6b:b5:d8:8d:53:07:dd:d3:83:d6:09:75:
9c:d1:03:b3:14:fb:e4:07:00:76:be:03:b6:13:6d:
82:32:7e:39:ab:c4:dd:18:d1:e4:a7:a1:72:07:12:
3f:1d:da:60:0c:05:cb:3e:a7:7c:2d:eb:a1:77:3a:
6e:95:7e:6a:0f:b3:d0:cf:d9:d5:72:88:87:7b:bf:
cd:45:d8:3d:b7:5a:51:9a:c5:82:33:0c:ca:f8:46:
0f:5c:ba:16:92:05:2f:cc:cd:bd:d7:dc:95:5b:40:
3e:56:bf:65:af:99:b1:23:83:5c:d3:23:46:4b:c0:
1f:db:a0:fa:f9:10:a3:35:29:c7:1b:49:c0:a0:88:
66:f7:f0:f2:b4:e4:12:d7:f2:45:10:5a:be:9a:8a:
bb:68:30:a3:62:6e:df:30:e5:58:0c:e4:03:22:bd:
b6:bb:b5:6c:27:fa:4c:62:02:b3:03:d9:f3:2c:4b:
93:97:3b:1c:3d:3a:d5:e6:ba:81:ad:c0:84:99:c2:
b0:a0:b6:b9:cf:04:5f:c9:57:91:d7:68:a4:65:fe:
3d:d2:e0:1e:5b:94:f5:63:c0:3c:ce:bb:da:8d:ae:
8e:76:32:4c:b2:dd:4e:6c:a0:9b:2d:4b:ad:3a:c1:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BE:71:AB:DC:17:50:55:EE:56:6B:24:25:4B:64:E8:B0:74:2F:4B
X509v3 Authority Key Identifier:
keyid:90:77:E7:B0:AF:58:0F:78:FE:01:06:99:FA:0D:B8:10:7E:18:6F:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0a:da:cb:67:1f:d5:ee:60:8c:eb:67:dc:15:06:73:b6:ba:
2b:1e:3d:f3:80:a5:22:1c:d5:15:14:81:34:88:a2:74:e2:4d:
42:e4:80:00:47:0c:64:35:85:e5:23:69:02:7e:4e:92:fe:fb:
3b:68:63:bb:51:6f:d8:32:97:73:20:29:99:68:a2:5d:c8:e0:
88:6d:8f:da:24:a7:5c:02:6c:d6:55:e8:f4:4e:94:16:9e:a2:
21:4c:fb:10:1e:b0:c1:a3:91:f2:6f:5e:85:92:25:ef:71:d4:
b1:44:29:a3:b3:ff:d9:ed:79:20:e5:c2:ad:cc:c4:da:46:13:
cd:88:45:4b:75:63:82:57:26:cf:25:c5:db:3e:9e:b9:27:85:
c8:7f:00:26:ad:f4:19:4d:5e:3e:d7:e6:15:d2:4d:14:88:0d:
c5:ae:ee:d5:8e:ef:88:f3:78:6a:36:8b:4b:35:d4:1a:16:0c:
16:6e:71:c8:f3:11:3d:8d:af:d7:7f:d0:2f:9e:16:ea:23:a4:
59:72:d7:74:46:6c:81:b2:4d:f5:98:21:c0:67:ba:00:c8:b0:
fa:43:a2:6f:37:21:68:85:ac:2d:64:8b:db:44:e5:59:3f:c4:
83:61:ef:2e:c7:b8:61:95:a5:a3:dc:94:38:20:03:91:45:da:
78:6d:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:46:15 2025 by rpki-client