Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
File: 5W2kwnXzzMktCGICoe2neD8MPQ0.mft (raw, json)
Hash identifier: nHsneHS4giQdCEoUUMiHCOfrinVmuLYJ9gxE3J2U8h0=
Subject key identifier: 0C:CB:B5:AC:4A:4B:DE:AC:4C:76:79:60:95:18:43:F5:24:7A:1D:7A
Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Certificate serial: 1F84
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
Manifest number: 1F78
Signing time: Fri 31 Jan 2025 15:29:58 +0000
Manifest this update: Fri 31 Jan 2025 15:29:58 +0000
Manifest next update: Fri 31 Jan 2025 21:29:58 +0000
Files and hashes: 1: 0p4OnuorqVemfKiNz4jb1ANy_VQ.roa (hash: XoSGiFq8O6Q57IRgvp7PfupeNUc2/oaY3bSF8APHxvs=)
2: 5W2kwnXzzMktCGICoe2neD8MPQ0.crl (hash: aK+KuWiBf4y9d5cnTGf45xIPcT2ujjh2mVGFzQCmobo=)
3: nupcYpRncbBv3-9dSwkTJgvZMyQ.roa (hash: 4MbXF1Yx0L8hJq971GxzZ01dBBGTfAi9S+9JFIVKcDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8068 (0x1f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Validity
Not Before: Jan 31 15:29:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0CCBB5AC4A4BDEAC4C767960951843F5247A1D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:bf:55:b5:b2:2a:34:a3:a3:ce:e5:87:48:
68:50:c4:78:dd:a6:a2:af:92:c0:5f:7b:cf:2f:c8:
cc:60:4b:df:f7:3d:d8:34:9d:a0:ff:6b:f5:ea:e0:
e9:b9:61:d3:29:63:95:9c:fe:ae:d5:1c:af:5e:92:
5a:90:62:f7:01:56:0d:1a:76:da:ce:c0:30:a8:fa:
d3:4a:ca:2d:3a:3e:3b:97:80:03:58:33:2c:67:5b:
37:ac:97:0a:2e:fa:7a:07:d1:78:ef:5e:a0:e3:5b:
4d:cf:f6:6b:14:06:6f:56:00:5e:31:59:73:09:0b:
ca:af:d1:f7:a5:31:86:20:c8:48:f4:93:a3:25:3a:
15:b1:cb:21:e8:43:23:24:ca:f8:5d:c2:7d:f3:b7:
bc:96:ac:08:32:11:e6:bd:b8:80:37:f8:5e:ea:52:
5e:ad:14:78:d4:13:4a:d2:98:06:2c:ca:7b:99:ec:
7e:a8:e1:55:66:9c:a7:27:be:75:aa:43:e1:62:7a:
85:0c:e5:a5:de:b9:5e:94:9f:8d:5d:89:cf:57:21:
41:ff:9b:2c:0e:a0:5c:1d:de:17:ff:98:d0:39:e9:
a4:b5:1b:ac:25:ff:96:fe:12:1a:72:0d:86:5e:44:
0a:4a:41:7e:0a:39:67:d7:8f:07:9f:96:96:e7:1f:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CB:B5:AC:4A:4B:DE:AC:4C:76:79:60:95:18:43:F5:24:7A:1D:7A
X509v3 Authority Key Identifier:
keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ba:d1:ff:47:d4:3a:3d:48:54:a6:a4:28:37:7c:f5:ce:b4:
71:4c:cd:d3:9f:be:66:97:83:3b:94:f1:68:e9:bf:b0:fb:0d:
eb:2b:1b:4e:ac:40:be:5f:40:02:64:36:b6:c5:ca:76:f4:65:
76:03:b4:dd:38:7d:00:fa:a9:d6:72:1d:d9:ec:28:79:91:c9:
90:96:5f:4e:e6:84:06:57:52:20:1f:67:b5:30:2a:fa:3d:d5:
de:8b:99:8f:15:a4:9d:93:fe:f0:f3:60:9a:1f:43:98:01:71:
cd:20:28:98:3b:94:ee:3e:f6:24:fb:aa:6c:87:e7:23:85:3f:
7d:4d:b8:dd:77:66:34:57:25:b9:e7:31:53:a6:d6:dd:7d:5c:
4e:48:5e:c5:2d:f8:69:21:57:d4:2e:93:e2:50:a7:54:8c:eb:
aa:ac:5b:9b:6f:6d:b0:63:af:a3:6c:13:33:e0:05:c8:48:2c:
63:5b:9e:0b:17:34:1b:34:0b:8c:5f:d5:84:35:7a:83:9b:b6:
ce:61:a9:df:15:d7:36:dd:6e:a9:03:08:c9:0d:c4:ad:e2:cd:
9f:a1:45:0a:8b:49:cd:8d:b8:d4:97:60:ab:fd:d3:88:be:d6:
f7:89:b7:e0:8d:92:f5:63:7a:ea:44:dc:84:6f:d1:2d:44:cc:
55:33:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:54:41 2025 by rpki-client