Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier: t01Mzx9o/qBVhATTtkG0akPJEQfOjPDErzbTkdjHGEw=
Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5E55
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number: 41D2
Signing time: Sat 29 Mar 2025 10:32:14 +0000
Manifest this update: Sat 29 Mar 2025 10:32:14 +0000
Manifest next update: Sat 29 Mar 2025 16:32:14 +0000
Files and hashes: 1: TSY7JcOEbzPWgbE9NK4zQt1XAvY.roa (hash: aLhl2+Q8OwATqdMYpJ2RVYRINELa+dVAZvh7RXDHT3g=)
2: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (hash: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4=)
3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: +LgSJ6pJsiMqfgMA2lF14o+mg429o3q4WtrOI24P+mQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24149 (0x5e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 10:32:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:81:3c:3d:01:e9:75:31:4b:2f:fc:d9:fc:94:67:86:35:
85:7b:05:12:be:1c:11:30:f3:7d:69:1f:1a:30:ed:26:c0:b3:
dc:4c:2d:b8:df:d0:e7:a4:51:f2:1a:80:a1:8e:d2:07:3f:32:
76:d5:5e:9b:ba:bf:3c:c7:37:f1:c6:ea:35:66:88:50:13:9b:
3c:c0:3c:93:64:2c:68:17:2c:e5:d9:e1:f1:9a:b6:5a:62:59:
c8:c2:dc:ae:7f:ad:c1:9e:91:69:a4:54:05:a0:39:f8:e6:cc:
37:48:15:9a:e5:38:c4:91:79:a4:7a:91:20:3c:2c:89:47:d5:
0b:97:02:18:f0:67:e4:33:af:f9:da:13:73:bd:42:f1:13:c6:
b4:6b:d7:47:d5:e7:fe:7e:eb:45:21:4e:2a:10:d7:53:83:c6:
ad:f6:72:36:e0:5a:70:e4:db:1c:35:9e:15:13:e9:0e:06:cb:
0e:50:f2:2f:c1:4c:87:53:98:f6:3d:10:d3:57:c6:c1:6e:9f:
46:88:e6:ee:d8:92:e2:ca:d7:9c:77:52:a3:3d:37:c2:a2:f7:
02:42:0f:18:25:6b:84:62:57:2b:df:c2:f4:03:bd:c5:c5:0a:
89:c4:c9:4c:b0:b3:db:5f:eb:15:b5:65:e5:98:0c:e9:8b:48:
2f:4e:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:00 2025 by rpki-client