Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
File: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft (raw, json)
Hash identifier: XpcuVboMxHbbH5I+3EtCQWYjPWte1+3EXYUi8QxHAdY=
Subject key identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C65
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
Manifest number: 4BB1
Signing time: Fri 04 Apr 2025 18:35:14 +0000
Manifest this update: Fri 04 Apr 2025 18:35:14 +0000
Manifest next update: Sat 05 Apr 2025 00:35:14 +0000
Files and hashes: 1: 6-j7tWwgCHXAtn7kDXObctV_AbQ.roa (hash: uiMHtKQFS0wX0O4bZaGARhmnsaywtAHQxXYoxy6HoOY=)
2: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl (hash: hkKhjUcKxjFjejmtN9cMUAgA2Xs/NxEkkyfRHmkL5V8=)
3: BFYDfHNXz3f3DQh7ldupGgODZ0o.roa (hash: 4J5B5ab0UvtREoxCvbEjhof9upQ4t4Q0Ovk6QH7ir5Y=)
4: I-uQGrh2Q6qg89jrFtkRmzENoe0.roa (hash: Depiq44HBl39EzMJPK1i1nQ9abG5TAtbWX5wWww6tCA=)
5: LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa (hash: efqng/VZ0qObM6O+6R64v60Zms/fZuugEkKrT05KSfU=)
6: fjW9kpn-jSDef962IrBiDPJFxcI.roa (hash: 8/JUM4FE6l44cxvaJlc7MWmB3UMokrNBqRDkPsNPTLM=)
7: krfPRDv5zvWiFPpV7weQFS6h0CE.roa (hash: WxYdudw0s2KRXFRCIr7gzkMY53glRPq6Szdw3Ohh65I=)
8: mmx-GbSs4J4VUGylqPz_FT6uUIs.roa (hash: 6m8OY4pMm2b/rjB1SdyO3trcbplZ5sBLGqMbwi/clbY=)
9: xybbBi6KI2WCBlZPUU_EJEFp33o.roa (hash: uKhpfiSFW/JaJzaa26g7fqIjZfggQQRITCSjYAE3m1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19557 (0x4c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Apr 4 18:35:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D7ECBFBA3B3C9A538DBC445F799DC1575CFF0C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:05:cd:b3:1d:34:3a:ba:16:76:0f:10:84:
da:ec:7a:92:3c:e4:fb:c9:af:55:95:23:d0:69:ea:
da:54:df:3a:2b:5b:d0:b8:79:db:a9:d4:cf:b0:08:
02:0d:6f:69:7c:71:9f:43:68:7a:2d:68:42:80:b8:
25:b7:ef:07:43:7b:82:9c:99:df:c0:61:4d:ad:b7:
59:13:d6:8c:ee:eb:23:71:43:79:6a:d0:9c:0b:61:
a0:fa:b6:0d:51:5f:9c:79:fc:f2:0c:78:96:8a:dc:
fc:4a:8e:68:db:b2:17:e5:50:af:e3:39:d3:e5:2a:
7e:46:4a:eb:ba:72:5f:6d:31:24:61:dd:a9:d1:f1:
67:eb:d3:76:4a:9c:ff:e7:8c:32:5f:cd:19:e8:72:
5a:9d:18:c3:9a:8d:02:48:07:aa:b9:ee:0d:54:4c:
a5:30:e2:61:bd:e7:c2:41:8d:03:e1:87:53:4a:33:
02:e3:40:54:81:53:f5:cd:01:f1:c1:1e:36:16:da:
93:d1:36:13:3d:e5:88:b3:29:37:51:a7:9a:70:9e:
17:33:db:52:19:35:90:0b:3e:f7:24:01:15:bb:98:
98:7e:70:79:85:27:66:96:55:18:c6:02:e7:e1:2a:
cb:8f:b1:04:40:b0:1e:bd:ec:65:13:c7:14:c3:4f:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:16:54:32:d4:4e:b9:0a:18:1e:b0:f6:c9:cf:b1:46:5a:3a:
f3:09:b2:89:21:b2:f7:07:41:63:ba:9b:be:de:74:f1:7a:3c:
85:1c:45:1a:b0:7a:76:a0:c6:50:70:af:d9:96:2d:14:f6:9b:
e5:f1:ba:10:9c:db:94:36:28:6b:c1:4f:ff:75:c2:96:0d:ec:
93:65:0a:12:39:db:94:22:61:7d:9c:07:70:81:5e:e8:b8:74:
bf:1c:c1:c9:94:7e:06:66:6b:c2:2b:e6:74:63:ec:50:ea:08:
f5:2b:c3:b7:10:f5:df:ef:ac:38:72:74:66:7d:01:3d:ec:08:
28:e9:57:b0:be:a8:20:00:e0:fb:95:cd:41:9d:f0:02:0a:8a:
57:77:93:2d:bd:e8:68:66:10:0a:6b:0b:3d:e3:c2:a4:84:fc:
4f:b6:8e:25:a8:cc:7b:fe:d6:0c:9c:6a:7c:15:f6:89:d5:7c:
df:e8:bd:57:9e:e7:48:c2:e6:68:36:17:41:af:94:ce:db:c6:
a5:6d:00:c9:83:2b:c1:e7:59:0e:70:cb:e7:8a:e3:03:bd:17:
73:da:9d:d0:43:e8:e0:22:3e:27:f4:02:d3:7e:8d:6d:70:4d:
7b:6a:bb:fa:1c:64:80:5b:7f:9e:2e:44:80:35:11:e8:1c:00:
21:e7:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:22 2025 by rpki-client