Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
File: OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft (raw, json)
Hash identifier: SOpt1q6RMTQqPS7ln53FN4iFWoQapTJXfiAnNqzz2QM=
Subject key identifier: D5:C0:84:64:B4:0A:63:4F:DB:E6:79:1A:74:15:94:0B:79:FA:BB:61
Authority key identifier: 39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
Certificate issuer: /CN=39E47899249325DB499BFC6910919D2F36003E9A
Certificate serial: 1C69
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
Manifest number: 1C5A
Signing time: Fri 04 Apr 2025 19:07:13 +0000
Manifest this update: Fri 04 Apr 2025 19:07:13 +0000
Manifest next update: Sat 05 Apr 2025 01:07:13 +0000
Files and hashes: 1: G5iEYI6Dwscu1XilnJmkTfSnjd4.roa (hash: x3CpaBWMVRnKyrGFZka1Ai0pi8wftnuSGn+H/aoW1IA=)
2: OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl (hash: TKIWS4I1QpINoiKSdOOSS4X8tRNMt9TDAc3b0/O4OdU=)
3: m8zlQDUB60ZgEGyYMLytgspKht8.roa (hash: uIqreK0uiS+D1JElY/pXyROsFto2K8/E77t/EU9ybng=)
4: vNjioWiQKWOYvKzvvRRsQO4AftA.roa (hash: lRDdC4pBhtHMqAtHZOgxXsE0QLSzXvk/ir07rNAjaKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7273 (0x1c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39E47899249325DB499BFC6910919D2F36003E9A
Validity
Not Before: Apr 4 19:07:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D5C08464B40A634FDBE6791A7415940B79FABB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:98:90:78:55:2c:20:cb:a2:b3:29:ed:dc:
f3:25:4d:a0:36:42:42:0f:12:8f:41:e4:92:79:28:
84:9f:f0:80:bd:6c:22:33:42:6e:fc:44:b4:49:8f:
14:81:bb:94:ba:44:58:be:45:f2:81:20:e0:88:86:
58:f8:ad:ad:97:46:6f:b0:8c:5f:7a:6a:df:94:a1:
cc:aa:33:73:1b:a0:87:17:0f:f7:16:c5:a6:a2:b6:
e2:f5:77:47:fb:37:85:e0:6c:83:fe:25:4d:9c:4d:
02:dd:6d:c4:91:58:3c:bf:a1:0b:f4:d7:35:e8:a6:
fd:f8:37:5d:de:04:60:5d:c1:e5:eb:80:48:8c:6a:
bc:f0:e8:37:54:ae:35:c7:dc:f8:98:71:d8:aa:f4:
e8:7a:ac:f6:b9:1e:60:c3:db:b9:ee:fc:9b:a5:24:
ae:78:51:b8:98:d7:6d:18:41:40:3b:4a:45:11:b6:
90:9f:78:54:34:31:c5:83:ce:a7:50:63:d3:97:f2:
ad:96:fa:ef:21:6a:0f:ac:00:2b:0d:93:44:b8:cb:
2f:57:49:37:96:0a:93:28:e3:64:ce:4e:56:bf:41:
4f:2e:1a:12:a2:6c:a4:f6:8b:bd:4b:12:88:50:0f:
e4:70:20:4c:5e:f0:84:70:4a:c6:9e:69:1a:39:8c:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:84:64:B4:0A:63:4F:DB:E6:79:1A:74:15:94:0B:79:FA:BB:61
X509v3 Authority Key Identifier:
keyid:39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5c:78:7c:cc:59:d6:31:53:49:5f:56:93:48:34:8b:ca:24:
7a:9a:0e:51:46:60:f3:0a:28:a6:0d:40:90:18:7b:c6:3d:e2:
55:f0:2e:5d:ed:0e:4f:4f:a8:cd:ea:26:fa:7a:15:f3:ae:3a:
99:6d:1e:bc:00:54:3a:96:bd:20:0e:c9:38:95:58:5a:9a:fc:
5c:a9:93:5b:0e:e9:2a:3c:90:cd:e1:ba:00:a8:4b:3f:52:c8:
50:69:cb:28:0f:52:7d:2d:7e:a7:1e:27:e6:50:af:2e:2a:e1:
e9:37:38:53:87:bf:ef:d8:30:94:75:4c:ff:d5:da:95:e7:f3:
74:80:e4:5d:cb:46:31:9b:6f:ef:8e:63:c4:24:33:6d:e3:b6:
02:8b:27:b5:89:44:90:f7:6d:33:52:20:e7:7d:c2:1d:30:49:
76:8e:87:52:e8:a3:de:65:df:58:16:79:15:a5:0d:21:09:1b:
f5:b7:24:fa:0d:e6:62:31:ca:01:48:05:a3:77:a1:ba:ff:b9:
db:e2:4b:93:d1:67:23:1e:02:0b:2a:87:f7:67:79:00:ac:6a:
22:6c:94:1e:6c:07:11:c6:f3:2c:f5:82:0c:e4:10:35:54:db:
55:fc:70:ad:5c:5c:d0:8f:5c:c8:e3:cd:cb:6e:e1:72:18:24:
85:d1:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:35 2025 by rpki-client