Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
File: KCAlirZf9h_V1m2Vlk9I76NdzIY.mft (raw, json)
Hash identifier: Cl0YY5JiBDOIc0Zj83ubDyyGVnbvkPcCW10nxOAR4RA=
Subject key identifier: F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB
Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Certificate serial: 130A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
Manifest number: 1306
Signing time: Sat 29 Mar 2025 10:30:38 +0000
Manifest this update: Sat 29 Mar 2025 10:30:38 +0000
Manifest next update: Sat 29 Mar 2025 16:30:38 +0000
Files and hashes: 1: KCAlirZf9h_V1m2Vlk9I76NdzIY.crl (hash: i/5XLCR4kV6N1cHavoE00SkbVDWIMT690fi2Qfxgccw=)
2: WgrIRnAmsxWBO3TfjMU3y8eDt78.roa (hash: tiz5vTjFJ5BFKOBFmxtwDOUTL38Wd7N2mFJNr9UBYpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4874 (0x130a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Validity
Not Before: Mar 29 10:30:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F22C52B900B880022A9210A686FE1A8006C4DAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:01:ef:f8:9d:ec:b2:12:09:20:58:1f:f3:
bd:ff:df:54:3b:c9:ac:13:5f:ac:3e:9a:f0:59:2a:
74:83:21:ab:51:13:b2:13:63:81:d9:61:f8:5e:72:
60:1f:12:b1:10:b8:dc:7a:b2:56:21:d0:fb:d7:f2:
aa:49:63:be:c8:7f:19:56:97:04:da:4e:53:1c:16:
c3:31:42:cb:b6:b8:63:dc:61:e5:98:a1:85:70:f3:
67:09:3e:d7:5d:db:ba:22:5d:14:68:44:54:17:ce:
af:66:c2:4f:e8:75:a9:e8:cc:15:f5:4e:86:ae:4d:
bd:6c:c9:56:d8:e9:b3:55:b2:0b:eb:a7:5b:fb:a0:
b1:ff:b0:ab:0f:f4:d2:07:47:cb:2c:90:1f:0e:ef:
ef:7f:4a:20:a2:34:ae:d9:44:8f:d9:a7:52:23:ad:
22:31:a4:2d:eb:05:2e:7a:97:20:23:ab:b8:dc:74:
6e:b5:ef:14:54:01:f8:0d:d1:90:ef:1f:be:ed:99:
aa:81:f8:f5:48:90:4c:c3:2c:07:cd:df:be:58:06:
0f:72:e1:81:bf:f1:58:33:a0:10:5c:bc:6c:0d:34:
36:2e:f3:d8:1a:b3:bd:d0:1b:c2:fa:72:fd:13:9f:
ab:9b:01:90:e8:66:7d:12:2b:b9:80:20:93:cb:4f:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB
X509v3 Authority Key Identifier:
keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b2:ac:c7:e8:a6:13:1f:db:39:53:18:ac:97:48:9c:8e:25:
d4:5d:62:26:69:84:9f:6d:ba:40:5d:0b:ec:67:cd:a8:6b:aa:
a8:0b:b6:4b:4b:08:35:e6:ba:90:36:f6:7b:dc:3a:8a:a9:29:
f2:e0:0d:b7:64:0e:6a:69:ed:3d:2e:e1:40:b4:fb:bc:2e:a2:
11:12:97:63:c9:38:f8:3d:27:69:fc:f3:46:d3:f2:ff:86:6c:
c5:1b:38:00:8c:c5:a2:12:ce:05:89:9f:93:2e:04:56:74:d6:
d3:6b:b2:b6:44:f0:8a:a4:93:07:14:f1:12:62:7e:7f:18:a2:
6a:15:2c:cf:b4:f2:f2:62:7f:25:c0:48:59:20:e7:be:9b:8e:
91:dc:52:6b:77:b0:2b:81:81:66:75:3b:4c:f9:03:31:43:0b:
e8:73:32:c9:2c:de:91:80:b2:86:28:e1:d4:4a:72:a0:a8:cc:
36:92:ca:46:0b:b6:ef:b2:4b:df:44:74:e2:11:10:16:41:0c:
a5:3c:11:ab:db:85:ac:38:cf:6e:50:68:76:8c:70:af:ec:6e:
04:e7:54:01:d4:52:a9:48:fc:91:26:83:76:1d:53:bf:f6:2f:
4b:c3:22:82:2b:1b:2f:4c:27:92:a8:85:3a:10:1c:cb:45:6d:
71:9e:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:44 2025 by rpki-client