Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft
File: LAMU397UGrYR2Z9UIGOYL-OAgLo.mft (raw, json)
Hash identifier: 2Rn9cEfdQos85JL2/cIVfeBiASiANmHmsSLLl0cu3+Q=
Subject key identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 05B1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft
Manifest number: 05A9
Signing time: Fri 31 Jan 2025 15:25:38 +0000
Manifest this update: Fri 31 Jan 2025 15:25:38 +0000
Manifest next update: Fri 31 Jan 2025 21:25:38 +0000
Files and hashes: 1: 6OOgbcc6tw2AkFZlOv9og89RGzM.roa (hash: PqGCVipLIB4LfMJFXO580kMf7UBPAoR85GnhUUFQplo=)
2: LAMU397UGrYR2Z9UIGOYL-OAgLo.crl (hash: whIhLoYA9G9UlQKZCu+oysshFtBV6mKz3RiG6OTwJH8=)
3: _HchNpPiucZHjxJdDgfsWKt7Xog.roa (hash: kNUEHg8rOTa/hcGFTUV8dhvSGXIDG9kOTkD9ixsnoLs=)
4: nWxT4RYlEY5Aret9o0t0WZLlzV0.roa (hash: iOXZTU/yrX1KRmPP2U0zN+Z9WjuSxTrE9F05Jz7zG64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Jan 31 15:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7442E6E28B6953C8FF2C628103A5704F4134CC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:a1:56:29:25:ce:9f:77:91:a7:5e:47:0f:
d7:d4:8f:2c:cb:b4:a5:54:73:a3:3e:19:22:00:a6:
7a:95:68:9c:7a:32:49:36:6c:39:51:ce:3c:79:f3:
74:08:ee:45:d4:02:52:61:dc:bd:aa:e7:7f:8d:8c:
ef:55:51:8b:eb:12:ad:b5:17:9e:82:29:14:e0:30:
8d:00:1a:8b:f6:b6:aa:1a:53:b4:e3:13:49:1f:52:
3c:e3:33:fd:94:a7:cf:eb:3f:d0:cd:b3:13:73:2f:
2d:2e:49:26:13:4a:82:8e:79:aa:53:eb:9f:59:77:
30:9a:34:37:ed:cc:63:6e:c8:f6:3f:a6:e5:eb:b0:
50:82:d1:34:8b:33:4c:ba:a5:c9:ae:85:37:c0:e1:
7b:9b:98:95:86:7c:7e:e0:3c:ad:3c:19:68:d0:46:
85:8d:e4:d4:71:52:ef:bc:de:37:11:55:67:ca:9d:
13:94:1b:60:91:d6:4e:91:fc:a0:2a:55:d2:0c:18:
c0:16:f4:67:cb:37:15:6e:fb:1f:d9:b3:db:81:75:
a1:a7:aa:1e:76:a6:5c:fe:75:32:4e:5d:b9:b3:71:
e7:7d:d1:9c:cd:11:48:f0:34:1e:dd:81:5c:c4:05:
a5:85:f4:27:81:6f:23:f1:a2:71:1f:7a:82:86:a7:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:81:b8:93:15:80:6e:48:cc:38:af:56:1c:f2:79:22:da:70:
b7:78:ef:02:36:2e:a8:f4:71:6a:8b:da:05:a7:a0:f2:ae:59:
8f:3f:0b:c9:f3:e9:f5:bd:2b:90:96:47:d1:fb:34:9e:2d:ba:
23:a0:6e:d9:39:30:6e:aa:1c:c2:3f:97:e5:09:01:fb:c8:12:
ab:e6:7e:c9:77:81:e5:63:35:4f:3f:73:3e:58:a3:75:c4:10:
a8:78:ee:83:40:91:39:30:35:93:93:f3:96:00:41:52:3a:d9:
37:18:c2:eb:6f:c9:04:59:6e:a1:e3:ac:7e:f4:fd:fc:59:dc:
16:2f:93:fc:50:56:fb:c2:5c:34:c7:31:03:4c:d2:7d:3a:d3:
59:89:b3:0f:18:2b:9f:de:d3:71:e7:3f:33:34:dc:2b:8e:9a:
c4:c9:45:be:23:67:a3:72:20:e1:c2:f2:f4:f7:6c:2a:3d:cc:
58:c6:e7:34:93:07:9a:1f:ae:ef:46:6e:8d:c9:7d:61:39:76:
9a:eb:62:24:a5:68:d1:46:ff:1f:bb:7c:54:f0:20:9a:b6:00:
18:1f:62:0d:02:97:7b:71:ee:a9:2a:b4:37:81:7a:74:18:ab:
12:6e:f4:ad:f6:9a:6d:95:0c:65:0d:0c:67:7d:d0:97:18:ad:
ae:70:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:03 2025 by rpki-client