Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft
File: tS8PP_c3H_HOnYI-lUn8EVixaio.mft (raw, json)
Hash identifier: J83qmUWyqIMNpRZ8kfMOSxOxkrknHjxyyf9HP09Ryyk=
Subject key identifier: FD:5B:6B:6C:75:14:3C:3E:98:68:7B:61:5C:0B:97:FC:54:E4:E1:75
Authority key identifier: B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A
Certificate issuer: /CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A
Certificate serial: 05FB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft
Manifest number: 05F4
Signing time: Fri 31 Jan 2025 15:26:06 +0000
Manifest this update: Fri 31 Jan 2025 15:26:06 +0000
Manifest next update: Fri 31 Jan 2025 21:26:06 +0000
Files and hashes: 1: 0g7JiXxyUn6A1eA1f0w0PbitEHk.roa (hash: 1+e9fVT1hXgUDWBczKykzipKNM5h/EvzlrzxqK/S8G8=)
2: KegyS8Kjy5t8VmPx0hzh8-hUTIk.roa (hash: uSKpQZ0vddvnlGUET0qERZS76Jh1NDPu/a48Wss+Scs=)
3: YPtiTpC3_2ladsp2RnmsGeRmYok.roa (hash: BcNVoszKWuXYJShkJ3+9H/gyVtqB/H0DWX2zmfaWA5w=)
4: sApvTIC1D4-gCzcTsa4xyYGqqqc.roa (hash: 8twDWj/nr5fbqF+R4YjEfR5uch6GmqA5H45iJf/4jCM=)
5: tS8PP_c3H_HOnYI-lUn8EVixaio.crl (hash: KclwFb3d7xQphKMh4iaWTwAFTEk1RMB5/+zhUljdgNc=)
6: utBxSla5Y9Lm4eJRpxCBsS2c1JQ.roa (hash: 0GKjm4b6pMwIffdCFC1KrIdfY7BZxhXnDJ/P+r++YIQ=)
7: z8ROOvpLClOvSR6IhvcLephY-tM.roa (hash: bddYJe68JYyYkZKZ/uix57o8m/EJDTIZ2ch0s9sYnAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A
Validity
Not Before: Jan 31 15:26:06 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FD5B6B6C75143C3E98687B615C0B97FC54E4E175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:e3:1d:45:6a:fb:53:2d:4b:99:3e:d0:6e:
49:28:a0:9a:82:34:2c:d7:c7:5a:92:58:79:0e:93:
9b:29:34:ed:94:f8:0e:a5:8b:3a:9c:15:b1:c0:3e:
f2:18:e7:6b:86:69:20:0b:cd:fa:13:8b:b7:3b:70:
2f:34:3a:5f:df:d1:bb:f5:b3:56:98:81:d2:05:f6:
b5:93:2b:65:6c:4f:e2:ad:0e:04:f0:57:f4:f1:aa:
09:93:aa:e2:2e:0a:0b:c3:84:2c:4c:7e:94:8d:65:
68:40:53:b2:b0:b1:97:e0:c4:e1:4d:87:82:d0:85:
90:7e:f9:42:24:fa:6f:52:20:5d:98:69:e1:8b:48:
e5:92:9c:ec:18:d3:94:9b:f6:bb:eb:a6:74:b5:b5:
f7:f6:1f:12:f3:cd:d4:a8:3e:10:2d:e1:63:5b:8a:
63:89:c7:03:be:58:15:cb:4c:25:e7:fe:55:08:65:
b5:af:ff:db:6d:6a:4c:bb:e2:9c:ee:70:25:c9:13:
4d:fe:3b:af:81:47:56:e4:dc:84:b6:19:c4:fb:21:
94:14:f5:ea:3a:c9:29:39:80:7e:39:c4:f1:2e:17:
0e:4f:ec:5f:c0:9d:e7:4f:56:d1:99:dc:db:7b:0b:
92:3d:8e:c1:77:ed:4b:84:77:73:87:d0:41:5a:68:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:6B:6C:75:14:3C:3E:98:68:7B:61:5C:0B:97:FC:54:E4:E1:75
X509v3 Authority Key Identifier:
keyid:B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:1c:19:75:0a:c9:4a:d9:e1:03:92:fd:f5:98:c5:e0:10:
77:36:bb:f3:b3:e8:a3:31:83:99:e2:65:c7:a9:b3:87:d4:1e:
89:00:7e:21:05:92:ff:f1:aa:5e:e5:40:88:66:c8:4e:62:b2:
80:18:fe:36:64:3a:d7:dd:76:74:79:1d:be:12:60:ac:8b:ba:
40:a9:1d:22:f9:57:f3:dc:3b:01:2a:0e:39:9a:aa:1e:14:4d:
c9:f5:12:de:78:41:88:f4:ad:35:53:13:f7:34:3d:9a:aa:24:
7b:35:cc:05:10:3d:48:29:14:cf:c6:cd:e0:3b:ab:b1:a2:49:
cb:bb:44:ad:46:0f:7d:bd:75:f8:fa:39:4e:f1:28:61:a8:f6:
7f:bf:89:67:f3:51:61:58:f3:cc:02:19:d6:29:62:a9:95:c9:
05:f4:0a:a7:1c:13:70:fb:7e:1a:92:ee:4a:5f:a7:cd:7a:18:
4b:fb:90:ee:62:2d:60:8b:29:bb:c5:9c:d6:cc:c1:52:a5:fe:
23:f9:1d:92:59:2c:a9:69:db:4a:79:0a:81:d9:db:43:fc:e5:
28:c3:e1:24:be:38:52:98:85:0b:6d:50:a4:11:7a:00:b5:dd:
5e:94:6b:26:3e:d4:9f:66:cc:67:32:b6:5c:a1:ce:3e:af:0c:
f0:65:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:21:24 2025 by rpki-client