Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
File: DuhjrFcK7qH5ML6l52qufdVTgE4.mft (raw, json)
Hash identifier: VWZqj9dazpjYOv+XbjOGh47NcgR79Ra8uOGiMh4c+Ww=
Subject key identifier: 0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 09D8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
Manifest number: 098B
Signing time: Fri 31 Jan 2025 15:28:51 +0000
Manifest this update: Fri 31 Jan 2025 15:28:51 +0000
Manifest next update: Fri 31 Jan 2025 21:28:51 +0000
Files and hashes: 1: DuhjrFcK7qH5ML6l52qufdVTgE4.crl (hash: Q8fXNGLTgZrGtSn/Fjv9KN0yuI0cgguKAsOtXVwoJPk=)
2: _V_7ixByiVG1pjZi1mDw4b4VxpI.roa (hash: XyMDQBmqSSFJJTqxQXZg0E/WbwlH0Rpqj7jDNMHguZw=)
3: cJAPNRcPlRfx94t1spCSlsQGruY.roa (hash: QVD+nt3vSI8wTFmIQdZHzTyisAO3IMVPHg1eYvC0yEo=)
4: m8Mbp3fOk0mfKmCfNvkt2fmUd30.roa (hash: 6PVM1OMBTNJ2+7s4aPik4DaNu6ngPai+hTo90igXodQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2520 (0x9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Jan 31 15:28:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A6B3361E1F5FA9B0266D7DF924422A40B47149A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:3a:68:7a:71:a9:0e:99:d5:4d:01:d6:5a:
1f:8c:a0:a8:28:df:03:51:4b:45:8e:5a:38:00:08:
03:c7:a6:b6:a7:86:94:91:59:23:85:b1:d4:3f:9b:
a4:f6:0f:d0:22:54:63:c7:80:21:e6:1f:54:57:14:
85:47:2e:4b:6d:17:8b:98:7b:60:66:ce:57:5b:2d:
f4:31:0a:d2:15:14:7f:06:c2:9e:8e:46:75:89:0f:
64:b0:fd:19:43:33:68:c0:33:95:05:89:fe:a4:7c:
5a:fe:fc:8e:75:77:8d:08:3f:9b:77:44:78:37:ac:
ca:7c:85:64:b8:fb:24:24:36:d5:c8:97:db:87:0d:
b0:fe:4c:ae:25:ec:c1:ec:ff:5b:7a:29:d1:5a:cd:
d5:56:47:55:02:d6:c6:13:96:90:03:ed:82:e5:b8:
0a:a6:ca:ba:0a:ea:15:38:8a:4b:c0:e1:61:ff:6a:
a7:bb:40:1d:5a:d9:af:b4:45:92:4f:fc:46:b2:4f:
13:cb:9b:a4:46:c2:b9:b7:cf:05:a2:73:d7:cc:c4:
f5:f2:43:ef:5b:b5:09:de:44:f7:6d:27:6c:0f:43:
f8:15:5a:72:30:b4:82:97:46:41:65:8d:a1:48:45:
b3:bf:aa:58:cc:59:61:c1:48:1c:e3:01:3e:78:96:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c1:5d:83:b8:2c:69:11:84:4d:49:e2:96:25:7e:78:c9:e2:
a5:5f:4a:1e:9e:17:f1:02:12:b2:bb:ca:e6:44:2f:71:65:ec:
7f:c2:17:de:82:0c:7f:56:a2:65:2e:78:8c:3d:7d:f6:cc:92:
e4:91:cb:32:d9:68:61:04:c1:1c:91:7c:db:f4:ce:28:66:bf:
bc:fa:8f:1d:fa:e9:d1:61:39:c4:28:33:cc:cd:69:db:f1:7a:
6c:ab:4f:72:95:bf:96:4b:f5:9b:8d:4c:78:01:16:73:21:61:
fc:83:e3:0d:34:a4:e9:0b:41:d3:6d:53:36:92:3e:09:9b:6a:
87:e7:ad:d7:cc:4b:5a:2c:64:94:cd:fb:df:57:9b:db:43:12:
8d:f6:3d:40:ce:23:bd:01:4d:19:7c:af:3b:50:62:42:df:7a:
88:a4:41:3e:c4:eb:d4:11:b6:5d:71:57:34:16:ee:90:a5:d2:
b0:d3:0c:46:ca:31:0d:b9:56:b8:b1:5d:35:ab:33:51:35:b5:
6a:89:0b:68:87:56:7a:38:65:3e:04:99:7a:26:39:cd:2c:a1:
aa:22:e3:47:2e:63:e0:ea:ea:25:7a:cf:b0:ff:bb:15:9a:60:
7d:96:cc:06:0e:2a:76:47:58:fc:8c:90:da:94:cd:22:8c:7b:
a0:73:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:30:39 2025 by rpki-client