Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
File: rszMt53-bEZsyts5iWcQ7Kw3uEc.mft (raw, json)
Hash identifier: Zm3/N293CukmcqOHdM1Vj6yrf+7ozQqnfwJPMd+7ous=
Subject key identifier: 47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial: 1896
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
Manifest number: 1891
Signing time: Fri 31 Jan 2025 15:29:50 +0000
Manifest this update: Fri 31 Jan 2025 15:29:49 +0000
Manifest next update: Fri 31 Jan 2025 21:29:49 +0000
Files and hashes: 1: MCB3KJEpS5d2tI9HESY2f6-mB5Q.roa (hash: CvO0rxwQJpDF21wFHuLQBCHhxxdUOE1ZFTZaucA3ZlQ=)
2: XUqYO0gIBGKJdMnRrWNYofV9ASg.roa (hash: wk1aQuhsTJNh/QxRDGrQZqRt8vq+yd3VLEO5BonUzDY=)
3: rszMt53-bEZsyts5iWcQ7Kw3uEc.crl (hash: 65IoEkORviiUeJO4JsLHTLHk6lxvkVjS9NraauZRX/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6294 (0x1896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Validity
Not Before: Jan 31 15:29:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=47879FE48B6DA4B610AE6E6BD8394ABD6F011103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:dc:1e:54:8a:5a:b1:01:09:62:3e:1f:15:
e0:7d:5e:25:d5:f4:4b:0a:5e:54:6f:e7:41:2d:9b:
5c:1a:de:13:fc:d6:07:21:f2:2e:45:8c:5b:e3:d4:
db:ab:98:b3:9d:f8:72:74:85:e6:73:6a:13:91:aa:
36:f0:e5:bc:8d:b0:b6:65:d2:1a:b2:a6:52:1f:eb:
5b:a6:bf:3e:86:71:52:1b:a5:36:1b:0b:91:56:a1:
05:2b:ae:84:38:c9:8d:a9:81:33:2e:52:3e:c4:65:
01:68:31:20:9d:a6:cd:a3:86:1e:89:67:5f:a3:49:
86:4d:da:af:02:01:77:4d:0a:94:1f:c7:a1:f9:3b:
02:7b:04:51:18:c3:f0:41:92:08:cb:42:1c:37:75:
bf:09:ef:e5:5f:e8:0d:9d:26:c9:df:60:f4:f4:86:
3e:60:45:dd:a4:71:18:8b:a6:0a:51:11:9c:53:c7:
34:ff:68:be:54:2f:fe:fb:4f:c5:09:cc:bf:af:9c:
72:33:79:26:13:6c:ac:af:06:b8:db:20:d8:0e:ff:
8d:0c:d6:c3:a8:2e:3f:8b:46:b3:c1:8e:9d:d7:77:
12:9c:5b:32:b8:ac:75:c0:5e:a3:86:2e:70:5e:06:
ad:8c:a8:6b:58:91:75:ea:00:7f:82:15:65:0a:42:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:9F:E4:8B:6D:A4:B6:10:AE:6E:6B:D8:39:4A:BD:6F:01:11:03
X509v3 Authority Key Identifier:
keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a4:2b:8c:56:3b:83:93:cc:97:c5:1a:44:b2:ec:34:1c:89:
35:97:1e:50:e0:4f:e0:5d:3d:77:07:e1:a7:6c:f7:74:7d:98:
39:73:c2:83:54:74:9a:77:a8:c0:06:fe:73:68:46:a5:6c:45:
61:4a:31:eb:1d:ec:41:27:16:d5:4e:4a:6b:94:65:2f:15:3c:
73:00:6b:58:50:18:d3:0b:8e:a7:13:88:a2:aa:83:36:b0:d6:
e4:e3:e4:96:de:49:5d:30:e6:79:4e:f1:b5:dc:fd:59:db:15:
36:24:db:b7:ab:c3:08:e7:97:ed:f4:19:de:fc:85:4c:53:b6:
6c:43:95:c6:02:90:9d:49:a3:cc:91:36:98:08:d8:1a:be:ca:
91:60:ca:a5:0a:41:27:d5:8a:33:86:97:ec:40:76:4c:f7:27:
3c:9d:10:b8:6b:f5:ce:3a:9c:7b:b4:1a:1c:08:88:be:85:a7:
fc:bd:ef:00:54:65:6b:80:4d:e8:be:a6:66:51:59:5e:dd:b9:
54:b3:ac:49:8c:b3:8d:af:07:1e:36:7c:7c:9c:de:42:09:84:
0f:10:fb:b2:0f:a9:45:d9:06:cc:90:07:e1:34:f0:7b:44:ee:
18:75:12:81:ea:0d:34:bf:46:99:fc:3f:b4:6d:83:ae:65:72:
99:f4:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:25:43 2025 by rpki-client