Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.mft (raw, json)
Hash identifier: ROCptr5noX2w0HM/OpjiGVXSFCuRES4euzCC9eEq5w4=
Subject key identifier: 71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 1A45
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
Manifest number: 1A34
Signing time: Fri 31 Jan 2025 15:26:20 +0000
Manifest this update: Fri 31 Jan 2025 15:26:20 +0000
Manifest next update: Fri 31 Jan 2025 21:26:20 +0000
Files and hashes: 1: -ADB0ul8beQrLrQh61kNdQ6Xl0I.roa (hash: 4dx4i0BTuk/HpHw9BS/JDWyxYxY/rjkaxOaRkWmyHWM=)
2: 7oh6zHzktfZsz0lG8Cv6y94ot2o.crl (hash: 6ZDjFbcacYXAoHsC6FWJYG5JcDMNsF3Uckk+1yxtsXY=)
3: Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa (hash: Rt65UKUI1MIChaQ4kid1nM0Cmb+I+LuUZ5rVsZCJ5zk=)
4: gAfbD59axt_g53rR7MDELLID5sU.roa (hash: 9EVLJuL3qbmLwsstxAa2k3aFuCqTvyAP0AtOReuM1OM=)
5: pCD7g6xZIOYEt3L4B5Kw69Iijwg.roa (hash: GqobMFyHZb/uTGS5by9T74r2Dh3iM+3w+uYHclash2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6725 (0x1a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Jan 31 15:26:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=71D1BCAA71CD2BAB928DBD579EF3C179074B57CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:0d:60:c4:3e:68:d6:46:f0:7e:0a:c7:54:
8b:25:88:5d:a6:57:09:eb:d8:6b:89:e3:d3:e3:ac:
4d:69:db:62:e5:06:8c:e4:91:ba:71:fa:f7:d5:95:
58:08:be:d8:1e:a5:1d:d0:96:57:91:8c:61:7b:ec:
ff:10:49:62:12:f0:6c:d4:5b:ed:58:6e:c9:9b:86:
88:6d:18:26:6b:9e:47:bf:c4:6b:5c:04:f1:ab:9d:
c5:6a:cd:a8:ad:19:b4:b1:f1:8e:ce:6c:fa:eb:c6:
f4:97:49:72:03:bf:5f:b3:15:71:ff:55:fd:1a:5d:
57:d9:e9:3b:c8:79:26:dc:c7:98:96:83:c0:ed:0a:
a3:a7:70:18:bf:13:3d:b8:d7:f4:7d:e1:bf:34:37:
53:dc:b8:a6:0d:42:19:7e:42:da:ac:95:e6:1d:69:
27:49:14:88:e3:bd:92:36:aa:e2:6c:3a:4c:92:32:
4c:72:8e:c0:53:97:b4:26:a2:12:33:89:4e:7a:a1:
81:f9:91:0a:42:a3:4c:bd:af:c6:2c:f5:4f:03:51:
d3:cb:05:69:0b:29:d7:da:6f:97:7e:33:60:77:74:
0f:de:0b:42:d0:28:0e:17:5d:ac:72:6c:2d:4f:0f:
ad:79:16:c8:83:fc:d5:df:1c:3b:22:0e:cd:59:3c:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:BC:AA:71:CD:2B:AB:92:8D:BD:57:9E:F3:C1:79:07:4B:57:CC
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:69:fb:17:5d:a4:5e:6e:ff:86:3f:6c:f0:5c:17:47:e9:
7b:7d:87:f0:9b:94:c3:cc:e4:68:40:ab:8e:b3:06:a0:d4:c3:
54:78:9e:c5:ae:9e:2d:6c:8d:d8:d4:4d:4d:a0:4d:34:f9:63:
bc:eb:21:90:09:f2:4e:0a:a5:23:98:eb:be:05:c3:fe:69:d1:
fb:2a:e8:04:c5:00:41:ae:d5:1b:98:ff:16:15:68:32:b1:c1:
22:64:49:10:7e:13:a4:b8:d3:ea:2b:95:28:d5:d4:7a:69:a5:
b0:00:a6:a6:2f:f6:24:cc:1d:07:49:9b:8b:98:7b:72:86:0a:
be:53:97:7f:58:74:96:0f:4e:cc:ec:e9:e3:9f:63:f3:64:26:
fe:5e:a4:37:a6:58:e5:29:cc:9b:36:42:93:36:07:3e:c7:f0:
f0:27:03:aa:0f:99:b3:df:3f:22:2c:42:6e:16:8a:ba:c2:d2:
d5:be:0f:e2:41:55:d3:39:5b:88:b9:7c:b0:4c:c4:b4:ba:ca:
16:d4:47:5b:19:c8:db:0b:4d:37:5e:30:b1:d7:b7:1b:46:93:
08:40:27:45:86:f9:59:5c:3b:16:42:7f:97:98:4f:d8:5f:f2:
2d:22:6c:2c:09:71:31:62:67:01:9a:7d:1e:b9:bf:2a:3d:bc:
d6:63:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:31:47 2025 by rpki-client