Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.mft
File: IdyHWWXCumHR2su0je4UBVSqWu8.mft (raw, json)
Hash identifier: L1f2A7zg7q490NsJTh/cvkuJwT1Vqbw9YvjSlXWqbjE=
Subject key identifier: E6:80:90:B1:B9:42:51:2A:C2:9F:64:03:96:02:39:A3:F1:F0:1B:32
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 1411
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.mft
Manifest number: 1408
Signing time: Sat 29 Mar 2025 10:27:38 +0000
Manifest this update: Sat 29 Mar 2025 10:27:38 +0000
Manifest next update: Sat 29 Mar 2025 16:27:38 +0000
Files and hashes: 1: IdyHWWXCumHR2su0je4UBVSqWu8.crl (hash: prHNL96+ytPvGCWH0GVvwJf6Kygru1kClS+ZqOQeD4o=)
2: ZuvQbTH8ZAJqK3Bv4oQXcXDGOM8.roa (hash: vBuDQxOioQeWVe9lqMaBkRts1ZbtGfixeSvj7yTqxCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5137 (0x1411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Mar 29 10:27:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E68090B1B942512AC29F6403960239A3F1F01B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:fa:5f:fc:6c:3b:90:84:16:c8:16:f7:1a:
76:ea:da:ef:9a:17:a6:a5:24:93:14:18:19:af:9b:
d9:0b:22:9a:b6:18:da:c0:a1:e9:13:00:79:17:fc:
d2:ee:ef:cb:cd:ae:96:d3:80:a3:b4:c7:17:a8:21:
12:20:77:ee:50:36:91:d8:34:03:07:92:b4:de:fe:
5a:79:ab:5a:34:9a:b4:79:d0:2a:dc:7d:11:95:42:
43:21:ea:0a:0e:8d:96:bc:a5:4d:af:fa:17:cc:8c:
29:38:3b:19:d1:50:21:63:69:b9:3a:02:68:6c:68:
6c:73:88:44:67:cc:ab:4f:44:45:58:b3:3c:cb:af:
6e:c9:b9:61:43:4e:8b:ec:63:3c:ce:de:71:ef:d4:
d5:b7:f7:4b:62:7d:9e:37:2b:10:99:5e:1a:49:69:
7f:b0:69:25:a8:b7:6f:3c:6d:fb:51:88:f0:1e:c6:
08:e1:bb:45:2c:d3:bf:c5:30:7e:cf:a9:4b:28:ec:
83:07:c6:ef:bd:b0:ec:f1:be:6e:57:2f:0f:46:dd:
b1:ba:43:e7:57:9d:63:12:6f:c1:fa:50:48:6e:b0:
a4:af:97:7d:57:93:2f:1c:16:6d:a6:e5:35:62:ab:
e2:46:ea:db:c8:c0:71:72:e7:d7:ee:de:0d:9a:64:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:90:B1:B9:42:51:2A:C2:9F:64:03:96:02:39:A3:F1:F0:1B:32
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:53:c7:7c:c0:99:af:f1:17:9a:24:5b:8c:3b:1d:c7:69:
61:6e:df:7b:62:ea:7e:3f:19:8d:fc:4d:87:ab:82:36:0b:7f:
f6:86:0d:c7:36:f2:ad:56:3d:5a:be:04:73:75:bc:f7:d0:8e:
0f:36:8e:d4:da:f2:8b:0c:cb:60:3d:d9:08:5e:df:c1:43:c1:
4d:b5:f2:a2:ee:7d:04:3c:11:4a:9b:16:fc:b8:a8:6b:18:ff:
fe:3c:97:59:17:7d:8f:b7:ef:ac:28:ee:ff:ba:66:1e:fd:40:
c1:f2:4d:d1:80:28:a1:5d:c5:10:e6:dd:a5:61:40:3b:26:d6:
b8:aa:41:87:81:b6:3c:db:76:2e:e0:8f:c3:13:a3:0a:b3:33:
04:1e:2f:08:b1:1e:0b:81:03:bf:51:e3:41:5f:bf:56:f3:3b:
7d:30:97:f8:15:54:c6:fb:c2:b0:46:65:e0:00:c6:f4:88:52:
0e:50:a6:5c:3e:ac:aa:65:10:69:93:d9:9a:7c:f3:56:99:af:
65:ae:79:8f:e6:06:d6:5b:06:aa:eb:9c:8f:6e:05:ba:86:ce:
79:d5:f9:97:b7:c5:55:94:b3:ea:d6:b4:6a:16:66:3d:9f:ea:
f4:19:fa:78:64:82:cb:a8:94:d7:be:6f:91:f5:4c:93:0d:b2:
e7:36:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:35 2025 by rpki-client