Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft (raw, json)
Hash identifier: L2b6HZFDvdVxb07aKYmWGJSwU0hLjyssNZbvo2VpyPs=
Subject key identifier: 0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 1C05
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
Manifest number: 1BF8
Signing time: Fri 31 Jan 2025 15:25:18 +0000
Manifest this update: Fri 31 Jan 2025 15:25:18 +0000
Manifest next update: Fri 31 Jan 2025 21:25:18 +0000
Files and hashes: 1: UvFPFtfZRwIpsVPDwTcaivNQT2M.roa (hash: +20FoExPiMakZMJcWWLawNFL0zT3N3DsgEk8fS/12+g=)
2: WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl (hash: 0f9xafSksfj/mRp5MuAmWZzeEKAjcp8cFgm7udz5ToY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7173 (0x1c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Jan 31 15:25:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0FF7B43820ECB68AF7937C9B9CD66589B3C42D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:d9:20:80:19:0d:73:50:8a:80:17:07:69:
25:5f:68:c3:1e:41:10:06:b2:bc:55:45:18:93:0d:
9d:99:01:5f:9f:ae:c8:c1:a8:74:ac:02:b9:86:30:
a0:44:86:b1:ef:ff:7f:71:f6:5f:67:c5:57:1b:b7:
e7:58:33:6a:38:64:a3:6a:c1:39:40:79:14:f2:8b:
f3:23:76:79:60:2a:1e:11:a8:04:f4:72:a0:c3:40:
8b:42:52:f2:17:ce:6d:b8:1f:f6:50:14:ab:57:a2:
c6:e8:c7:f1:e5:ea:fc:15:20:09:6d:d5:6d:19:98:
98:71:d8:fe:e2:06:d1:db:a8:50:bc:d9:d1:29:e7:
64:08:47:45:8b:39:da:49:ea:66:e6:3b:a7:35:fd:
f9:0b:0e:26:9c:31:fe:c6:a4:cf:5f:dc:1b:bf:45:
aa:0a:d7:0c:1f:42:db:e9:1c:58:41:5b:ec:b6:36:
86:99:55:04:49:34:10:72:5d:b0:93:87:0e:2e:75:
5b:5c:72:e8:c9:dc:e3:43:76:8d:a7:2d:ec:9b:24:
0a:58:d2:1d:d7:4c:0f:0a:62:1f:2b:60:b4:7f:84:
6b:16:16:dd:f4:6c:5c:ce:d9:0d:dc:41:0e:04:a4:
56:71:ed:32:45:c0:88:ce:ba:30:65:a4:73:2a:d7:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:47:1a:ff:73:c8:89:3d:52:e6:f0:c0:8b:f8:83:67:53:f5:
22:ce:39:91:d5:97:ad:0a:86:d1:41:22:6c:81:45:40:6a:be:
86:c3:b0:a6:95:77:2e:c0:18:35:f6:90:57:e6:d9:de:35:0d:
40:79:cf:0e:75:21:d7:08:17:63:18:8e:1e:1a:af:86:ae:1d:
17:32:3a:5c:53:f9:6d:9d:67:38:d6:21:5b:48:2c:79:d0:4e:
f9:68:36:ae:40:06:3f:98:0f:2b:09:29:c6:1d:a1:fe:43:6f:
70:fb:93:d5:58:a2:86:af:17:e0:1b:8e:2d:fc:aa:03:3f:bd:
4c:60:ee:97:85:68:7d:12:48:6c:1f:9c:4e:ac:f9:7e:b1:0e:
85:c9:d7:fc:d1:af:63:7a:b6:6f:d4:92:ef:29:5a:71:24:f9:
ab:93:d4:c6:a4:08:70:61:1b:4d:36:4f:57:7c:c6:40:89:32:
46:6d:f0:b8:e2:99:69:ef:af:ba:56:f9:b9:d4:4b:02:fe:1e:
8b:71:59:38:83:ad:ac:69:db:0e:7c:3d:75:8b:2e:16:5c:a7:
35:a0:e2:f6:d4:95:0c:d8:96:6d:ee:d4:fd:88:1c:a0:6d:1d:
ec:57:54:0c:eb:88:32:c1:14:21:4a:0a:09:67:24:00:4d:fb:
54:4f:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:29:49 2025 by rpki-client