Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft
File: 0eqai1ElBZBymdo4zqW8zmEJh8s.mft (raw, json)
Hash identifier: k1eQcuL1i7LdsJ6W3PViChG88Xt8evVY4NQHHERhMKc=
Subject key identifier: DA:64:DD:94:12:FE:5A:7D:2E:8F:1E:EE:27:B2:AE:CD:D8:FB:68:F0
Authority key identifier: D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB
Certificate issuer: /CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB
Certificate serial: 20FD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft
Manifest number: 20F7
Signing time: Fri 21 Mar 2025 00:27:41 +0000
Manifest this update: Fri 21 Mar 2025 00:27:41 +0000
Manifest next update: Fri 21 Mar 2025 06:27:41 +0000
Files and hashes: 1: 0eqai1ElBZBymdo4zqW8zmEJh8s.crl (hash: TYP9puysZK/gbG3ZNb3OAfkt3R4zPyyLwNu3MFhRsaw=)
2: jZb4pO6hNr2kqo_3TfgMx_5Dmig.roa (hash: gToiYgyZRMBcIApnLZrMA7yq3vrsRdKvwtqkTnYj0fI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8445 (0x20fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB
Validity
Not Before: Mar 21 00:27:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DA64DD9412FE5A7D2E8F1EEE27B2AECDD8FB68F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:9c:66:a0:bd:f0:07:47:2f:65:43:92:8f:
a8:01:be:ec:cb:37:1e:87:37:d9:4a:be:5a:08:95:
cd:c4:88:d0:b2:81:02:c3:ce:f4:ea:18:a0:60:c9:
55:c6:88:7e:60:9c:07:30:bd:88:73:85:27:08:16:
3f:c4:88:67:f3:37:72:e2:0e:96:c6:30:85:f7:d5:
ef:34:f2:42:97:98:d3:b5:f0:cf:41:43:8e:b7:03:
52:8a:c1:6d:62:fd:3b:c0:da:24:07:38:55:f5:b3:
95:53:b7:ad:ea:54:90:73:f4:63:f5:44:0a:53:77:
05:88:fa:a9:52:62:e7:ba:61:c3:64:92:3d:cc:ac:
c8:38:54:85:d1:d4:a2:6c:1b:12:bb:b9:6b:68:05:
4c:13:b3:33:79:f4:69:8c:b2:4a:6d:99:96:69:a9:
98:2e:14:5b:52:84:a2:96:4a:dd:00:38:d3:22:d6:
58:36:c7:9f:4b:fe:9f:7d:96:2f:93:85:b0:65:18:
25:32:45:04:2e:17:58:4b:5d:ac:83:cb:2f:e7:88:
f0:e3:f0:7f:93:07:d8:a6:4c:20:4c:47:21:1d:f3:
5c:18:ce:81:34:79:f0:cf:ba:81:de:da:bd:de:10:
7f:c1:5d:dd:a6:b7:ce:91:ca:61:cf:c3:39:fe:a1:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:DD:94:12:FE:5A:7D:2E:8F:1E:EE:27:B2:AE:CD:D8:FB:68:F0
X509v3 Authority Key Identifier:
keyid:D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:af:b9:ce:43:f5:da:3e:84:e9:0a:5d:c2:d5:40:20:4f:b3:
19:40:b3:cf:00:c6:8b:81:4a:ac:ae:b7:c2:89:79:3f:a0:e2:
86:23:89:d6:3c:0a:41:7a:a7:bc:32:f5:2f:6f:e5:b3:00:78:
36:4f:b7:46:63:20:f1:9a:a8:e8:d2:6a:36:db:3f:ba:7f:54:
e5:e1:2e:69:62:4d:66:29:ba:a9:90:e5:33:e6:bd:e9:8c:99:
de:f6:2a:ec:7a:f2:f3:60:78:68:43:f2:c8:59:dd:19:63:b1:
20:b5:e5:96:ef:d7:8c:55:2b:1f:07:6d:ba:36:04:8b:21:4b:
26:e8:00:62:3a:b1:16:1b:5d:7d:b7:0c:28:c5:39:40:f8:fe:
f4:fe:93:4f:7d:72:fe:89:ca:da:a2:04:1a:fd:63:3c:54:5f:
3f:1c:d5:0e:02:68:4a:94:6f:86:d6:90:9f:fe:04:8e:ce:a4:
9e:0c:80:0a:88:ef:34:8f:80:1f:4d:54:56:d1:95:04:7c:51:
93:83:53:95:1a:fe:e6:88:30:d1:44:ba:5d:47:47:5d:94:17:
a4:c9:3a:03:1b:33:5e:2b:d2:6f:a5:91:52:f3:10:53:70:a8:
75:5b:04:e7:3a:b7:7e:48:bb:9d:8f:89:8b:40:34:54:50:e6:
09:db:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:52 2025 by rpki-client