Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier: rec13UL80g3rzZuFtRVqrS2r4lYqfuqEu/fK/M8z3DE=
Subject key identifier: 9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 0178
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number: 0173
Signing time: Sat 29 Mar 2025 10:31:17 +0000
Manifest this update: Sat 29 Mar 2025 10:31:17 +0000
Manifest next update: Sat 29 Mar 2025 16:31:17 +0000
Files and hashes: 1: 1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa (hash: y1yapVOWcFRVM0HkMcu6W1MzSDLeXbZvTAbExv3iZIU=)
2: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: GLZGVBoEkuM4gA9NSBaqALgqbXq+AQyr7DY4mkJqGkU=)
3: CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa (hash: hdqcb05bFxknkcwIdqOcWs1KgdleQYiVPEkSdv5OTow=)
4: LW8ZY2UtSYeujZ532V0CQrYeABA.roa (hash: F4Bh2cqcnHVRx++IenMMdugPp5fWZpfnO1OTNFONqyY=)
5: Yg61RxIhCNGDnQvVtwg-egnxOLU.roa (hash: 3XfY+iN0080xE/fEDKYWFBE5T1lbhQ0g9gRDubSk/jY=)
6: si24gGFg-sQtUpvK4DZtlqNS05c.roa (hash: /h7TLGBM959FC9Cv5rtuoN4A205gm+8xj8hpkkz0h/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Mar 29 10:31:17 2025 GMT
Not After : Jan 14 07:53:29 2026 GMT
Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:90:5e:90:98:e2:32:50:63:88:7c:ce:41:56:eb:31:03:
b3:1f:04:ad:ad:bf:33:0d:ea:3f:4a:5b:9c:cb:49:97:6c:dd:
ad:52:d3:07:a5:33:46:0c:01:60:24:d0:78:bf:c3:74:00:0a:
c2:e4:9d:5b:68:9a:d0:b3:06:96:dc:6a:f6:b5:0f:76:7d:e9:
31:50:8a:7f:34:64:1b:13:b0:7b:65:e5:1d:9c:6e:af:ec:80:
b0:dd:18:39:3b:dc:d9:1e:b3:01:92:9f:2e:ce:82:95:84:62:
70:f0:8a:f3:da:23:56:49:c9:cc:88:2c:64:bd:eb:42:cf:86:
dc:33:18:7a:a7:9a:97:f6:b6:9d:d5:bb:36:de:89:fa:28:59:
32:5f:82:8d:16:88:a2:fe:40:2c:8c:f8:c4:b2:e0:ac:4b:44:
7e:98:fc:9c:cd:c3:67:e6:11:bf:6b:e1:e9:23:42:9f:ab:77:
e8:07:50:37:70:f1:ab:c2:02:f2:9f:3a:3d:a8:ed:1a:9d:6a:
13:6e:49:df:4e:f6:08:a1:5b:0f:1d:fe:a2:1e:6e:79:f7:b8:
ce:58:4b:5e:2b:67:1e:3d:73:08:2b:6a:18:7f:37:63:3b:d4:
16:28:64:33:9c:ae:89:02:34:04:e9:e3:6f:ab:14:e9:4d:e7:
15:5c:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:38 2025 by rpki-client