Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft
File: RxbLW0SB7BOu3UCywwLFD2Aa930.mft (raw, json)
Hash identifier: RnmjuctWM4HATdaHdkiWCJh7i0ZUHOQH8/F3612UFr8=
Subject key identifier: C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7
Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
Certificate issuer: /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Certificate serial: 1E42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft
Manifest number: 1E37
Signing time: Fri 31 Jan 2025 15:25:22 +0000
Manifest this update: Fri 31 Jan 2025 15:25:22 +0000
Manifest next update: Fri 31 Jan 2025 21:25:22 +0000
Files and hashes: 1: -3yT0_lt0soloseVQ2_MOx1MX2Q.roa (hash: HOyUmSzgMMgFat+nGykFv3eJUKtJQOKIVGShLfWgMNU=)
2: DbljN0jjqppujGVxxaH450Gi6Jc.roa (hash: Nk07rDC1ImocTTB2zTNqLvHZlNpJE59UUaO7KLxqYEo=)
3: RxbLW0SB7BOu3UCywwLFD2Aa930.crl (hash: Gi/tOdm4msRe1hePEcfRQyUvyJU+t5BBePSrNfm0YIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7746 (0x1e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Validity
Not Before: Jan 31 15:25:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C22C13114CCC8B4321C7500F23AE58520E14F3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:b8:c4:ea:f1:00:5e:5b:39:17:4c:31:89:
f5:ba:e8:28:09:65:f0:5f:6e:d7:ac:d1:0b:d9:7a:
ea:56:82:9a:84:8b:c3:aa:86:dc:11:6e:20:ea:e8:
2d:5d:ed:10:1e:00:85:7d:37:2e:20:56:d0:bf:b0:
75:6a:2b:5d:32:ce:99:8c:fb:0e:e7:79:07:d9:f0:
a8:98:fe:2c:08:ec:fa:33:de:94:7f:51:be:42:e3:
43:5c:ce:a0:65:dd:6c:18:2e:aa:48:05:bd:02:de:
1a:18:25:a2:e9:4c:5d:00:da:47:9a:5b:3e:53:06:
95:84:c1:e5:c9:6f:46:81:ab:1f:37:37:66:42:90:
cb:7d:da:31:f5:ca:56:cc:5d:d4:43:95:15:0a:49:
e7:f6:13:cc:8d:6a:b6:80:8e:1e:a0:2a:81:e5:37:
fa:e1:e9:99:1c:f7:a4:08:26:65:1c:04:c9:8d:cf:
e7:ff:05:7b:e5:0b:0e:c5:f7:5a:bf:c3:62:f5:0a:
3c:97:bd:25:06:4c:8a:cb:a0:de:4a:a6:cc:14:d3:
ee:e5:a7:36:35:59:e0:2b:d5:17:0a:30:41:96:95:
4d:25:bc:c9:43:af:4a:0b:18:b4:39:7b:af:e4:0c:
22:84:91:59:87:79:5f:3f:90:d7:52:fd:b1:83:cd:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7
X509v3 Authority Key Identifier:
keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:14:d6:83:2e:36:9a:24:b6:7e:f1:66:93:21:ab:ad:ca:a7:
7e:09:cd:72:47:03:dd:f5:e3:02:77:aa:d2:d9:c0:9f:ba:94:
2a:41:e7:f2:d7:f0:d3:55:49:e7:ab:89:c2:a6:d8:3b:7f:c5:
37:7e:7f:fa:c8:2e:03:18:cb:37:38:4c:f8:c4:ca:04:e6:55:
72:9f:70:4f:ad:17:f8:97:ec:33:3c:20:b4:20:9d:b9:4a:0f:
46:7e:ed:d9:ef:b0:29:c5:df:a5:a0:54:59:83:50:cd:8e:eb:
e1:4e:8f:14:b8:7e:9c:71:b7:29:b7:e1:bf:04:36:26:68:36:
37:08:22:72:4f:d7:77:05:a2:5a:4e:04:5e:88:31:88:5e:48:
2d:3f:28:56:1f:3b:41:ae:d8:8a:99:68:b3:59:68:8e:bb:e4:
b7:73:98:a4:9a:1c:11:b6:62:bc:3d:7f:3a:a2:69:e8:66:27:
db:b3:75:43:10:4a:35:65:51:40:67:33:fe:c5:f8:7f:4f:b5:
dd:16:b9:44:86:ba:09:40:d4:a4:2c:88:8b:c2:76:f3:17:ae:
e5:0e:2b:3d:b2:8f:c4:2b:20:49:94:5a:95:35:cd:f7:a9:d2:
7e:02:44:18:04:87:08:5c:60:88:da:c2:95:9b:37:d8:f0:5f:
09:5b:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:14 2025 by rpki-client