Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
File: hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft (raw, json)
Hash identifier: uPXAt33+yxRcP+sTsSB2vk6Z+Zu0MSYIVsGvo5P1LJk=
Subject key identifier: 91:93:97:5D:2B:2B:7A:FF:2F:AC:85:0B:C0:F7:32:23:C6:43:CB:6F
Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Certificate serial: 14D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
Manifest number: 14D1
Signing time: Fri 31 Jan 2025 15:25:39 +0000
Manifest this update: Fri 31 Jan 2025 15:25:39 +0000
Manifest next update: Fri 31 Jan 2025 21:25:39 +0000
Files and hashes: 1: YlCQD3AjiqC3RuG7BCeswbJ5P2E.roa (hash: kGTr41hKY1BAtXqj//es7tMkaKDsdWPhcNwgsScpVj4=)
2: hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl (hash: LyjNwj604pEUJfg/d5Ig3v9maYZiRznhh1bilVzocSY=)
3: ypKy5DnFXlS8-unpzJOowoGg-gA.roa (hash: gDYcqKXKtv1HCTnFqp0vhPbGUNBgnlnX0V6jA97m8zQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5337 (0x14d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Validity
Not Before: Jan 31 15:25:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9193975D2B2B7AFF2FAC850BC0F73223C643CB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:9e:83:c4:e3:35:6d:08:ca:78:b4:1f:c8:
07:90:05:d1:6f:81:4c:22:55:89:ee:71:7f:dc:26:
e2:1e:81:79:96:1d:a4:08:e3:29:17:47:11:44:97:
b4:03:48:56:ac:47:54:54:9d:81:6f:74:9d:30:5a:
51:a1:2a:d5:80:13:c2:84:96:41:80:65:5d:9a:09:
f7:f7:39:47:2b:d3:c8:b8:aa:56:9f:1f:a7:94:ca:
e9:12:51:46:ca:30:9a:e7:4d:d3:ac:f0:39:d1:a7:
66:3b:0a:51:66:77:82:ed:52:08:c9:c5:08:9e:0c:
f4:9c:68:49:7b:ac:e8:e8:79:de:1a:1b:46:84:c0:
1d:ea:37:ff:41:d4:eb:46:03:f0:f8:5c:6a:bd:75:
d7:1f:0b:47:8a:da:1e:5d:b0:3c:c4:e1:56:3b:f5:
69:a1:dc:d5:0c:a3:5a:03:41:cf:f9:e5:81:3d:28:
d0:8b:9d:a5:41:9a:9f:32:43:93:71:bc:8f:7d:ef:
2a:65:2d:72:96:4e:ae:03:16:47:2b:91:b1:e3:62:
15:c0:f0:be:b4:a7:2b:d8:b4:8a:3d:44:02:1f:f0:
14:b0:8c:bc:69:6f:6d:41:1e:09:25:b0:df:40:c0:
bb:b8:37:90:f9:72:55:44:0f:24:5e:c4:57:03:4a:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:97:5D:2B:2B:7A:FF:2F:AC:85:0B:C0:F7:32:23:C6:43:CB:6F
X509v3 Authority Key Identifier:
keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:e6:9f:a4:75:e9:d4:fa:df:c0:4a:91:16:51:ab:df:a2:15:
d0:66:25:d7:4e:d3:f4:a9:74:ac:75:84:47:91:94:30:3c:7d:
a3:01:94:3e:10:92:89:2c:a9:5b:6d:48:d8:97:27:5f:b1:f8:
94:78:18:5f:b5:87:5b:13:84:5e:36:fd:20:30:b5:0d:79:67:
17:37:42:25:77:31:2c:b1:62:19:11:fd:c3:e3:61:38:17:3c:
15:5d:44:47:14:e0:60:57:00:c2:50:ec:c7:7f:14:8d:dc:51:
80:41:04:d0:59:97:a6:d8:a1:67:a8:86:19:27:a0:55:25:0c:
85:d8:11:d3:e3:b9:66:23:61:30:48:52:20:ab:55:9e:65:16:
6a:79:f3:e6:3a:2b:0f:5d:78:3c:a4:66:47:7e:85:a3:23:08:
ea:23:c6:f4:a1:8e:96:db:a6:92:b4:22:9f:f5:d4:98:41:5b:
7a:02:62:24:df:8f:30:ab:ab:9d:78:a4:f5:43:3c:78:9d:07:
87:b2:52:e5:e0:96:b4:3d:7a:8a:f4:a1:00:d4:f5:04:ac:fb:
cc:27:f6:06:4c:72:56:f3:a7:ec:51:67:e5:58:ba:96:67:d8:
fb:ce:72:b1:33:f2:7d:34:92:25:0c:13:64:d2:34:86:13:00:
8b:74:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:45:19 2025 by rpki-client