Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
File: mlx0rj-M07Z5rFbEc_RQN4WRkms.mft (raw, json)
Hash identifier: 7Pb45NpFncntIBlI1VB7/JpkECmAfGxnt5KIqhPqRU0=
Subject key identifier: DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07
Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Certificate serial: 1CCE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
Manifest number: 1CBE
Signing time: Fri 31 Jan 2025 15:24:20 +0000
Manifest this update: Fri 31 Jan 2025 15:24:20 +0000
Manifest next update: Fri 31 Jan 2025 21:24:20 +0000
Files and hashes: 1: BJ8T6xeZmMZPoJmpWakz5R26fNM.roa (hash: 4dzjcrkTArAsirZGrc5ZYf3u9Rn1+p/i9kWIil0/S6o=)
2: GffFEt798jGr2kcFeplLE9TiUpw.roa (hash: x/NW5R0sx7+4pKoOo1eHG33Vc6aGyXA8OuFJtzNxon8=)
3: GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa (hash: 8dxpRvljiGFK6kC5Y47WYo2ofFRXbFVeh34A5lPzXCs=)
4: KebNhNqHYlNdAxB9cgzJuTzHbFs.roa (hash: 5TjKvSC7WlvKE6HkDjGaROjX06WQePtjRheVhtqxHWo=)
5: TuRAimkG7nUfxwwnfG2ggisWEWQ.roa (hash: rJ770ZZ28gQ4Oy6pYNR7fhAhl+t7lmth+T2+S8AjKOM=)
6: mlx0rj-M07Z5rFbEc_RQN4WRkms.crl (hash: kNPn6219oK1/QKxyy81Mn05m+hbX2p9evWyPPbet9SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7374 (0x1cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Validity
Not Before: Jan 31 15:24:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DED08EF758D4AC1835950E046F31B9ED40123207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:b4:f4:af:6f:ac:59:2d:d1:16:e3:99:9d:
09:77:1c:8a:5e:2d:8f:8b:bb:83:34:11:10:f9:8e:
84:8f:27:66:e9:3c:be:6d:8f:8f:4c:3c:ad:d7:2c:
0c:37:06:ac:4e:22:a3:e5:7f:e0:90:60:42:32:60:
c2:25:cb:72:3e:b1:2d:30:c9:7d:98:0d:48:d5:44:
96:12:df:47:d9:8a:df:3b:ba:04:bd:b7:ba:c8:ce:
93:00:73:aa:4f:ca:13:74:a2:80:55:83:9e:d3:d1:
8b:50:fe:09:23:7a:ec:e6:d1:2f:9b:fe:36:e1:1e:
92:91:17:ee:56:0b:a6:70:07:68:74:62:a6:8f:29:
3c:24:4f:b0:c3:a2:ff:06:57:43:0d:77:1d:b0:fd:
1d:0b:63:19:1e:a6:cb:86:b4:77:0b:8b:80:b8:86:
a6:55:45:dd:80:a4:32:16:45:8f:78:a1:b0:17:ab:
78:dd:54:a5:60:0d:71:9b:d3:59:78:a2:92:6b:a5:
d4:f8:0c:a9:41:32:11:ec:94:c4:59:ba:8e:89:30:
bb:b1:ef:1e:f1:fc:27:6c:6c:79:e3:13:6e:4d:f4:
8c:61:7b:20:dd:52:81:39:08:4f:da:10:13:81:29:
c4:b2:f2:18:06:f2:99:9e:57:37:d1:c1:ae:7d:76:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:8E:F7:58:D4:AC:18:35:95:0E:04:6F:31:B9:ED:40:12:32:07
X509v3 Authority Key Identifier:
keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1b:ef:92:08:ef:13:08:19:e6:b8:2c:04:c3:67:db:2b:ad:
78:62:f0:68:26:22:19:4b:be:ec:a2:42:86:12:5e:c8:46:8e:
18:c0:00:2c:3f:a5:12:42:ae:8a:c1:bf:27:d5:17:21:03:ac:
cc:67:86:0d:d8:f4:6c:51:62:23:1f:c3:03:c0:ad:57:c4:ec:
8d:a3:1b:a7:2a:56:f2:bd:db:57:52:01:d8:2a:cc:dd:12:5a:
6a:be:53:c1:e6:4a:59:7e:37:87:65:da:ce:45:16:41:be:53:
7c:62:f4:8a:8c:71:9e:96:7f:21:8b:e3:f0:17:ef:f2:de:af:
06:f4:c1:92:6a:06:0f:ad:01:e6:e1:5f:d8:07:ed:1b:da:b5:
00:f0:83:dc:64:7a:0e:53:10:92:3d:4d:e1:0e:23:10:76:50:
09:91:42:3d:cf:b4:7a:b4:09:14:95:a9:86:88:0a:31:10:71:
da:56:c5:67:85:70:80:a9:1a:04:64:41:f8:e2:b1:b0:f6:d8:
0a:7c:bd:89:b0:d3:89:a2:1b:1a:8f:34:ba:22:4f:3a:fe:3a:
c5:c9:a9:97:9c:25:c6:84:7f:dc:e7:90:9f:ef:8b:7c:06:dc:
db:d4:fd:72:79:ca:d4:34:d3:08:fd:fb:ea:dc:8a:cd:65:3e:
b1:7b:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:47:45 2025 by rpki-client