Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
File: Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft (raw, json)
Hash identifier: nCEjU641xRIGcf9brP/mSEfwu8aUYK8sLpXevNn3vFQ=
Subject key identifier: C6:62:60:92:EB:E0:20:F9:A5:D5:A3:98:08:75:01:84:69:A0:3D:F4
Authority key identifier: 63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
Certificate issuer: /CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Certificate serial: 0625
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
Manifest number: 0621
Signing time: Thu 06 Feb 2025 06:24:52 +0000
Manifest this update: Thu 06 Feb 2025 06:24:52 +0000
Manifest next update: Thu 06 Feb 2025 12:24:52 +0000
Files and hashes: 1: Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl (hash: Bb/Ab6b2os3VO5voeMhDmKkqwx6LasZGlZhbQeKYPkU=)
2: jhEl146Xh18nVcFHzrgpQEmSx_o.roa (hash: /SsBB3irtj2eTzoAwSinOxBMNYgfwekptzt5QE81VUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Validity
Not Before: Feb 6 06:24:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C6626092EBE020F9A5D5A3980875018469A03DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:d6:71:d5:37:b6:18:8f:49:b2:c1:39:5a:
d8:a9:eb:58:04:31:ca:00:28:cb:0a:69:18:ba:81:
e1:c6:b0:1b:f6:c4:77:72:7c:b7:bc:f3:cf:1c:fd:
ab:2d:a1:da:6d:fa:ea:41:e7:01:e5:de:b9:ac:71:
b3:9a:d8:33:6e:3d:6a:fc:e7:58:bd:93:5f:fe:91:
7f:13:92:bd:1e:8a:1d:ea:dd:59:53:61:de:2a:c6:
b5:49:7f:8c:44:a4:eb:27:44:d8:02:25:b8:b9:16:
0f:a6:72:1e:c4:fe:09:5b:65:ea:c3:f1:02:35:36:
36:73:ab:6d:2b:0c:1d:b5:b2:80:4a:9d:1d:42:67:
2a:d2:26:01:3d:c9:e9:71:91:fb:e3:98:4b:3b:18:
3a:ca:e4:46:47:53:09:30:fa:26:08:20:5a:45:34:
49:9f:f0:98:d2:0e:d2:6e:43:ea:ae:c1:4a:19:b0:
2f:92:a4:54:ab:a0:d3:fd:9e:34:8b:57:7f:32:3d:
8b:d2:c0:07:db:b5:e3:85:62:75:31:48:c6:1a:ff:
54:c9:ff:4f:f5:fe:58:08:b0:76:31:71:3d:4c:12:
2c:2c:e3:cf:cb:86:29:66:63:6e:20:50:a4:c7:71:
00:6b:af:34:d3:bf:0d:31:88:aa:ed:b0:8f:9f:d2:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:62:60:92:EB:E0:20:F9:A5:D5:A3:98:08:75:01:84:69:A0:3D:F4
X509v3 Authority Key Identifier:
keyid:63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:be:92:73:8c:a2:52:57:e3:70:88:1e:79:52:70:14:ae:dc:
7f:d5:6c:e6:ec:26:f0:ea:4b:3b:6a:36:7e:37:36:6f:e3:07:
7e:9c:e1:ed:20:4e:44:ac:1a:c9:4d:17:b0:f8:b4:5b:a3:06:
5a:19:71:c9:1c:c0:c8:ba:5c:35:96:77:b1:c3:b3:86:54:a7:
66:7e:17:94:d4:de:55:71:ed:6c:c3:e6:4a:4f:b7:24:db:15:
c1:42:4b:a6:11:d0:27:b1:43:13:45:c7:03:e6:57:85:43:20:
4f:9e:3f:31:9b:c7:81:24:7c:05:71:83:f5:5c:d2:35:81:c6:
4f:86:9d:29:59:43:f2:e6:1a:af:ec:ed:72:0d:57:2e:88:6e:
79:d1:01:b9:1d:f4:a2:f6:98:4c:cc:44:76:f8:e1:db:e6:14:
58:a6:7c:59:61:a9:b0:e4:c0:33:85:bd:e2:72:77:d8:d6:b0:
78:de:b2:40:dd:86:e5:87:b4:51:27:b5:92:7a:0e:a5:87:4b:
90:69:53:68:99:4d:68:b9:67:d0:0f:9f:14:4f:01:80:0b:73:
d3:76:f0:33:16:56:47:7e:ed:5f:c3:9a:a0:b8:81:b0:98:3f:
d9:c7:e7:45:35:40:93:33:e1:79:00:2b:50:2d:18:e7:0d:c4:
e4:e9:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:47 2025 by rpki-client