Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json)
Hash identifier: UQjwHhd5ZjgK9JW3DV2BfsUFKmKZ4sfDQi4kdXtzgPU=
Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1AC0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
Manifest number: 1AB0
Signing time: Sat 29 Mar 2025 08:27:22 +0000
Manifest this update: Sat 29 Mar 2025 08:27:21 +0000
Manifest next update: Sat 29 Mar 2025 14:27:21 +0000
Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: yTXhQmMZd5dxod8ImROW09fuuOFez82wvp1F3StUSa0=)
2: 2HOU41wf-RNx3ns6fUrUfDuRc6U.roa (hash: b3lr36MN4jCPuHOJb0pCCMEylOVXJG558DXiQogiClM=)
3: anYE50FB83Biwm9Cdfrin1Pdke4.roa (hash: H3AxRLrszvRvgNqwfmKEg+aMan4hBV5gw92ZRcjtfKI=)
4: hClPUnKZuAxsWwfQLw22FkUyHeM.roa (hash: 3jlVgVH+FCbudtpl6tLV+UmB6U3EaSEXQMSz/+0UPtI=)
5: jNiTXNtw-NVk-9eAX-55MR07eeA.roa (hash: XSnjJtxlfKEVYaAn23dvkns4Olz0nlV680zSSdJIpw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6848 (0x1ac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Mar 29 08:27:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf:
5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65:
77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39:
b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b:
b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c:
a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b:
d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51:
d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25:
ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75:
17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3:
b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59:
20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7:
80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3:
0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0:
42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e:
74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c:
e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:44:e6:3e:81:0e:4c:62:aa:60:5b:30:b7:15:0d:ac:fd:d2:
24:44:7b:74:3b:ff:80:eb:95:0c:1f:dd:a4:8d:57:99:fc:c4:
1b:20:e5:bf:49:7a:bf:6f:81:82:5e:fd:f9:fb:27:a6:bb:db:
f3:c7:c6:4f:89:e7:6b:d7:0b:40:f7:6d:0f:6f:9e:99:13:8d:
01:21:d7:3c:7e:40:07:7f:d3:99:8e:98:f0:22:6f:02:46:f0:
a4:e6:34:40:97:cd:9e:93:46:c8:22:88:b7:8a:44:78:9c:2b:
9f:52:b6:46:d3:97:b9:3d:29:2d:b6:24:10:08:39:3c:0d:2d:
92:ff:34:85:d2:2b:94:63:c5:20:d8:cb:ba:e8:c1:ba:8d:66:
42:72:11:b0:c6:b7:38:43:14:83:a2:5a:b8:a4:7d:cf:5f:1e:
42:e7:0f:b4:4a:9f:49:86:e8:ea:0e:28:0f:77:ac:3b:a5:37:
80:26:82:95:6f:df:f9:b5:b1:0c:75:d9:73:f1:ce:11:02:3c:
58:13:6e:73:fe:b3:ea:e7:19:89:4a:41:7b:92:8e:ad:af:48:
a7:5a:d3:95:b4:44:2f:13:90:76:cb:9a:23:4e:3f:a2:38:a6:
4c:f0:7e:29:5a:45:38:a7:c5:dc:ac:09:80:ca:ef:80:b6:7f:
1f:98:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:21 2025 by rpki-client