Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft
File: e13JVZm-TeRUqZwMJXU9HgDHQU8.mft (raw, json)
Hash identifier: Ok2PJCoDeO94AwoGPVcNjd1jG+UCWiCsavb+t6I5Ip0=
Subject key identifier: 22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E
Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Certificate serial: 08DA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft
Manifest number: 08CD
Signing time: Fri 21 Mar 2025 00:31:04 +0000
Manifest this update: Fri 21 Mar 2025 00:31:04 +0000
Manifest next update: Fri 21 Mar 2025 06:31:04 +0000
Files and hashes: 1: 0c9Dpd_fmCCojb9ROkhUQPHsCMc.roa (hash: NLo7OOzXP2h0U/Nq2VInDVYM7g3dQTjbCRAd2XCOTUU=)
2: e13JVZm-TeRUqZwMJXU9HgDHQU8.crl (hash: oBHQxoxVrcnXLb97bMtJYixCWkR5BYT19PqjOvT5VP4=)
3: pDho9MjJ_TSqsxDyEtREO0DkXR4.roa (hash: +F4f0iEvFp09RN5eOqprEsyEJioxSwoVwMJ8lPEGTHg=)
4: qv7jmQZZzsvvxaso_WqyEH6osTk.roa (hash: e3Xk5CPCwhadVOiQcNYD2/43mnX1RtmEaogikQg6AT0=)
5: xzgnXL4X4Mnp8vjJl7KMYz-fSDo.roa (hash: nYWQt5bArg3VV2bHWLfeb/ZRysXVjsaV65sDVImttJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Validity
Not Before: Mar 21 00:31:04 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=224038AAD84194E3A8920113F5E51774F436363E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:66:18:f4:fa:4e:97:03:2b:82:ef:26:5e:
9f:c5:a9:bd:97:41:e4:21:b0:41:c9:2c:19:9d:04:
b3:73:de:57:74:4e:2e:bb:16:80:b2:2a:e4:f6:8d:
89:26:69:1e:73:14:7c:67:78:1c:c7:30:7c:19:e3:
5b:33:0f:1c:87:8d:d2:bf:d8:67:57:08:b5:50:93:
01:d7:c8:dc:21:61:9b:75:60:64:85:b1:b1:5e:cc:
0d:d9:5b:23:e2:83:70:17:7c:db:90:58:80:ed:1d:
01:7b:d0:df:18:e2:90:77:d1:4c:3e:b3:66:59:3d:
c3:00:e3:2c:ec:c3:fb:30:93:c2:2e:a2:0a:59:49:
e5:04:da:28:3c:f8:01:3b:41:4d:07:05:92:b0:00:
f7:a7:3c:c3:b7:5f:0a:d1:22:17:49:68:48:be:fa:
10:05:87:55:0e:6b:3b:a4:8c:86:90:ce:de:69:dd:
68:48:c9:76:3a:c6:2f:95:bc:41:87:96:87:fb:cd:
11:01:52:d9:b0:b9:c9:28:8d:d2:42:72:bf:b6:5f:
a7:af:50:a7:5a:1b:e4:3b:58:c8:52:00:7f:c5:da:
d0:22:3b:c7:b1:c6:29:f7:1e:1a:1c:16:0a:76:62:
f8:ce:e2:88:db:cb:a7:71:12:10:21:a6:2d:41:85:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:38:AA:D8:41:94:E3:A8:92:01:13:F5:E5:17:74:F4:36:36:3E
X509v3 Authority Key Identifier:
keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:6c:85:71:9f:3a:4b:47:28:f1:8f:3d:43:91:d9:ba:ab:a0:
c9:e7:49:82:06:24:fb:81:02:3c:ca:79:d6:21:53:79:73:f7:
93:47:0f:e7:5c:73:62:0d:52:4c:62:7c:4b:7f:0b:2b:2a:22:
19:b7:cc:21:38:a7:00:fd:24:36:ef:fd:9f:c4:5e:9c:a2:52:
9d:91:3a:40:53:11:b3:f9:f6:aa:94:32:b3:60:ab:c8:30:1b:
8a:74:99:63:f6:99:78:3a:e6:49:cd:50:9d:58:d9:e8:24:59:
2c:ce:de:f1:19:d8:9d:1b:f5:72:24:5a:00:06:99:e2:ca:86:
4f:36:0b:e8:5c:b9:de:30:a0:1b:d5:ec:26:70:3b:69:43:82:
a4:b6:03:3d:fe:67:26:8b:ac:77:dd:99:cb:3a:d7:aa:0d:5f:
1e:0b:91:a1:94:3c:78:1c:a4:47:14:35:53:c3:b8:48:18:c9:
83:7c:4e:06:28:89:4f:d4:c1:1c:88:e0:48:19:33:ac:7e:48:
4d:15:4f:4b:15:1b:f0:39:6d:1d:ae:68:4f:21:33:02:bc:70:
61:9e:7d:00:75:5f:6b:f7:1b:60:cb:15:91:ed:3a:3f:ff:20:
85:e4:d4:bb:e1:7b:08:41:48:96:b9:2b:db:8d:bc:7a:f2:ef:
72:70:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:24 2025 by rpki-client