Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
File: TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft (raw, json)
Hash identifier: Oo5lFPe4HEzynyJ2efRV7Q2OqvgA6d4cWCH8Ul6hSY4=
Subject key identifier: 68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1D33
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
Manifest number: 1D1F
Signing time: Sat 29 Mar 2025 10:30:45 +0000
Manifest this update: Sat 29 Mar 2025 10:30:45 +0000
Manifest next update: Sat 29 Mar 2025 16:30:45 +0000
Files and hashes: 1: TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl (hash: aOyofRtvd9AvI7m3X99Ks9quceXZgG2dlynHqPVvBwM=)
2: dRzZBwD8nn9NRnPMSg6KYfYpdwU.roa (hash: 7mntN1EQX9ULdC3vyzx+A7+0SpzueCgIht3TR71acNE=)
3: iYjkiJaRGnBETZlEydSbbSczJUc.roa (hash: sBB96CAbUt4uz7RB43SUEjN8vs1vOjj5Z2ffnfxN60c=)
4: mlMCvl3JtLRELSM0dAmYY_QyXYA.roa (hash: ycbIxVFuxzhTUCuY+uVju6/YdBab59Sazv1Ubu9YxeE=)
5: p4NdksDiCY31k6x-lrJZdHrDyIs.roa (hash: 1Gt4x4TRC2WlKuqrik2KaqorMtbTmxXQngWbLJW6fZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7475 (0x1d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Mar 29 10:30:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6800B29027F006269714735503A73430F6BC04F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:27:18:94:1b:76:9e:41:b6:2e:39:c8:17:
73:2e:0c:a1:0b:3a:15:aa:b4:47:bb:81:d1:b1:ad:
fa:96:26:45:24:b4:61:55:47:03:9d:8d:55:6f:a2:
72:e7:a3:d0:95:1d:b8:bc:cb:a9:68:09:ae:7c:a2:
e9:9f:48:05:b0:9f:3d:ce:e1:b3:be:40:53:cd:62:
87:24:c5:7c:41:0b:00:48:83:0a:f9:ec:b4:37:c4:
02:3c:2d:e7:05:0a:d8:f9:a8:3d:17:de:50:03:f8:
9f:d7:4a:06:3a:6c:5d:1b:0c:0b:be:4b:6b:63:0d:
bc:02:bb:bc:44:72:e2:c7:c4:3f:78:62:70:e9:bf:
12:d4:95:2c:4d:c1:e7:52:f3:91:19:b7:0d:79:fd:
8d:b0:fd:a2:88:55:32:07:a4:3f:39:db:94:54:20:
7c:b6:60:f6:3b:47:a0:9f:41:78:1f:59:7e:38:08:
05:5c:a5:c5:d9:f6:18:a6:4d:c0:21:b2:7e:2f:6b:
4e:d0:46:9f:4d:67:f4:19:e4:18:44:74:95:22:04:
8c:9b:e7:ba:af:1f:18:70:4f:72:74:b7:7b:08:66:
da:ab:83:c5:2f:50:71:ae:d8:b4:ae:d1:8e:a8:12:
5a:a1:2c:20:e7:1e:79:8a:77:45:ea:a0:7e:2d:0b:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:63:8a:e7:ab:9e:e1:63:34:86:91:6c:10:5e:ee:0f:53:b7:
36:b7:12:8e:97:e8:1c:b6:65:a8:21:b3:84:42:43:bf:92:05:
75:82:46:b7:dd:f0:80:7f:5d:cb:d3:67:85:0c:0f:3b:70:a0:
27:21:32:e8:63:16:3d:b7:df:0c:1d:e9:d0:90:2e:48:92:37:
22:10:31:4d:82:d4:5b:cc:cb:0d:28:c0:fa:cc:0a:eb:0c:0b:
fa:b8:46:e9:5b:84:48:66:51:04:df:e9:1a:ff:a3:76:7f:cb:
c0:77:ba:49:b1:11:8d:c7:ff:b0:45:36:72:68:0a:1d:87:ca:
8a:76:88:60:ba:ec:14:b4:5c:6b:ce:02:80:f7:81:62:65:b2:
90:f0:be:cb:38:22:30:96:0b:9d:89:6b:67:cd:47:ef:43:84:
cb:c6:24:33:03:6b:9b:1d:8d:8b:b0:dd:ca:02:db:6c:76:f0:
51:d9:06:7a:4c:81:6a:35:b0:d3:d7:d1:e7:38:f3:0a:ae:b2:
ed:2d:73:d1:7f:30:91:5a:b1:79:eb:fe:8b:aa:71:69:52:1c:
0a:88:17:ab:93:ff:13:95:97:c9:fa:ae:a3:a7:0e:a1:5d:9f:
0f:05:cf:ad:74:25:75:e3:35:b2:c5:4b:61:3e:85:32:c7:b2:
d5:69:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:37 2025 by rpki-client