Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json)
Hash identifier: NPKIz3AkzF4E6rkVdehz/y1vmeJZuyQIs5oambnE98I=
Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985
Certificate serial: 07AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
Manifest number: 079F
Signing time: Sat 29 Mar 2025 10:28:33 +0000
Manifest this update: Sat 29 Mar 2025 10:28:33 +0000
Manifest next update: Sat 29 Mar 2025 16:28:33 +0000
Files and hashes: 1: NeekGFR5NIVtajaJ5HdjX8R8fNo.roa (hash: AQAjAJlgu+LEfO1yH586ESbhoVxFXl/P5tNzJvUMOEY=)
2: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: rGlpJF4Hl+2qfZwm1mnnXH+jDbHbV20i2K416XGtRaw=)
3: yDAVP8H_i8ah3EyHDhnWJS6tjLU.roa (hash: CIzjhzifWM6nzfG8hoac4C+5WTIAXYEvq69J+GVoSuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985
Validity
Not Before: Mar 29 10:28:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39:
6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29:
57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f:
b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc:
69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4:
a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90:
c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de:
7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72:
bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7:
32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3:
88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f:
13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad:
74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94:
5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c:
91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a:
00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15:
a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
X509v3 Authority Key Identifier:
keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:47:ee:e2:aa:18:3a:b2:89:10:ee:b4:a0:90:f2:b8:ed:
ed:f2:66:b1:c1:ac:6d:10:02:47:3b:99:c0:ab:8d:f9:62:e9:
56:0a:55:f5:07:6a:dc:36:da:e7:42:f9:6a:e8:8a:00:be:e5:
a3:e9:4d:a3:cc:75:93:05:f0:a6:bb:b9:e7:36:7a:40:83:b2:
05:b4:37:47:5d:b0:52:cf:9a:cf:77:d5:ca:8f:ab:a8:33:3d:
46:78:28:36:31:e3:49:e2:92:89:e0:db:50:34:95:40:c4:00:
55:c7:4b:65:ce:43:44:b9:e6:96:45:49:c6:35:03:fe:88:e3:
77:11:b8:7a:9a:16:fa:64:86:a6:19:a9:00:17:ca:11:22:22:
2a:57:4b:31:56:0c:8f:4a:6e:37:22:cc:ac:58:97:b3:95:be:
b1:cb:2f:52:1b:df:33:12:ed:f0:97:50:77:f7:11:f0:99:9a:
f5:2b:dd:a4:c0:73:d4:df:80:e1:d2:93:50:0b:d8:c2:c0:fb:
58:80:69:17:3a:7b:81:8a:11:ac:b5:70:64:34:f2:b5:9b:ee:
83:ef:e0:cb:71:12:a1:5a:d8:c3:52:2d:f0:ec:76:02:39:1e:
4b:94:69:08:06:59:d5:99:97:5a:96:0d:7c:b3:72:88:7e:c6:
28:77:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:19 2025 by rpki-client