Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json)
Hash identifier: M2+PulM9OYk0pmQOeIUmEGMhfAfFkprM+T+E71miLCk=
Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 141A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
Manifest number: 1412
Signing time: Sat 29 Mar 2025 10:27:45 +0000
Manifest this update: Sat 29 Mar 2025 10:27:45 +0000
Manifest next update: Sat 29 Mar 2025 16:27:45 +0000
Files and hashes: 1: 2XEBblbU0AtO7E6g_mThkL95ubE.roa (hash: DUInj+jg8J7IJSWSU2YD6iUFjAi3mK5xuxno0tl+ZGU=)
2: QVGtqSaVkscnVb64lhRi-cMEHSc.roa (hash: Ww6dLhQGxl5xTNIHfw+jluIsVDrzSDLMJsr6pk3RFXE=)
3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: B9G9UMg6yUqX4L+fZ1HmxrFlCRnPK2ZbZvJSP82U8Qs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5146 (0x141a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: Mar 29 10:27:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5:
5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f:
f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90:
6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9:
14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc:
ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c:
3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2:
68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a:
3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e:
a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1:
23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54:
76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47:
5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8:
8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7:
b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59:
48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91:
7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:af:cb:c9:1e:39:ab:81:3f:db:11:e4:fe:c7:78:3d:fc:c6:
fe:cc:e2:d7:51:15:f4:2d:f1:a4:f4:a4:ab:7f:46:3d:82:83:
de:aa:65:a0:48:c1:0a:36:5f:31:f9:54:47:0d:91:40:eb:c6:
19:f4:54:e5:e9:e4:10:68:98:ed:50:2a:d4:d8:c5:68:ae:90:
12:28:c6:ba:4d:37:66:59:10:eb:5a:f8:ad:76:cb:7f:29:9c:
f5:32:5a:a5:57:6f:29:b1:d8:ef:dc:ea:bb:91:ab:31:1a:39:
66:5e:d5:e4:b6:cd:59:20:65:99:32:34:d6:f9:3e:c0:ec:12:
c5:a9:9b:d5:26:60:6c:e7:9a:29:d2:56:37:be:89:3f:5d:bb:
ef:23:12:d7:e9:c3:f9:e2:e2:8d:6b:07:29:fc:0b:04:c2:7a:
bf:fd:43:a9:43:cc:94:e1:84:e9:32:14:02:30:8e:4c:67:1a:
84:83:04:e7:c4:8a:f3:77:04:db:bd:97:e2:62:de:70:9a:f4:
cb:23:ba:fd:52:ca:e2:c5:40:93:57:34:36:ac:5f:12:2f:e0:
90:df:7a:03:7e:87:26:31:d1:c6:cc:a7:68:89:4a:b5:8d:72:
ea:61:52:a6:ff:9d:f4:37:b6:a8:83:03:71:63:cf:3b:e2:de:
29:9c:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:43 2025 by rpki-client