Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft
File: hfO_0aFAkMSCmloxOk0x-cyPMS8.mft (raw, json)
Hash identifier: AkRp7hdyZo+7KPZD3QKX1KVKoVgXMgUbksuTg7cMvQY=
Subject key identifier: F2:72:75:A9:D2:7E:C6:3F:0B:47:20:8D:A1:47:C0:83:DC:37:13:41
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 1BA1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft
Manifest number: 1B86
Signing time: Thu 02 Jan 2025 00:23:00 +0000
Manifest this update: Thu 02 Jan 2025 00:23:00 +0000
Manifest next update: Thu 02 Jan 2025 06:23:00 +0000
Files and hashes: 1: 4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa (hash: HYU7YTQ2XHwe0FvyYneiC/4utDTubDJ3uPmz6aKlOnM=)
2: SabeT-jIaS5h-nLrYnND3nZh0Y4.roa (hash: 9zFmTa0T4lHCmWjDcQU2KsstxdWCj7Ac7guRlSDMlsk=)
3: TYs4cMQAaxVFxE32jTytL8ODeOo.roa (hash: ucRbKd3xi/68rDidzxU2p/m61LIeqPBYP4zTQhIknaY=)
4: fwAn8NSnt3x2w-dWyifIZLWULAg.roa (hash: rJb4+FFw38PVxlwUN6Vt3vgaj1zI3TP7PL21EUmHRSE=)
5: hfO_0aFAkMSCmloxOk0x-cyPMS8.crl (hash: 9tjDul9p7Akan08FLlln8ghjse63c7yI5dIziEWVRlU=)
6: kITN17NnNT9DwfJRj6g1XENGm24.roa (hash: PWYKWQpULrJQU8grTZzXq+sDVEWl5Tl1oebwGJAdFU0=)
7: pkcVefRHc892SpTt4m918JNKlrc.roa (hash: LRyTSX6Z3s8aqt+Hnazr2/yLIn5xgFlfVO38GiaQIbM=)
8: ynIw3K0beo2o8_quJoSn237kayI.roa (hash: Qsx9O+fM14gWY4ltkpIpWfNY6tK8QWOnvVA/6W630Ug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7073 (0x1ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Jan 2 00:23:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F27275A9D27EC63F0B47208DA147C083DC371341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:c6:55:63:d1:09:4a:97:56:4b:e2:6d:f2:
1f:1d:41:8c:46:9a:d8:c3:79:30:29:99:e7:2e:a8:
85:41:2d:01:58:88:5d:48:a4:0d:69:2f:11:11:fc:
ac:90:ac:3e:73:69:58:c1:23:e5:aa:b8:53:6e:d5:
99:6d:b3:ae:e9:fe:02:4f:4a:f2:19:5e:92:49:58:
b8:d0:9c:0b:e9:e6:86:6b:63:b5:9c:c9:4f:e1:16:
d9:05:eb:9a:91:95:cf:90:36:d7:d5:b7:cb:ce:3e:
94:d7:d9:bf:b7:95:36:04:ec:4a:7c:48:62:b8:6e:
5e:fa:f8:b1:0c:92:d8:cd:90:67:0e:2d:0a:77:91:
4c:77:7d:d0:00:bb:8c:79:cc:2c:1c:52:30:40:77:
97:01:68:5e:3d:34:8f:b5:c5:7b:4f:b9:61:3d:84:
f9:9b:63:47:0e:cd:0c:05:6c:58:d3:bf:9e:2a:03:
49:fc:99:82:2d:28:bd:29:10:83:fb:9a:a4:e7:94:
e2:9f:bd:99:da:a0:fd:3b:c3:e4:51:20:08:65:5d:
98:06:2e:6e:26:52:bb:55:19:e8:5e:72:1c:de:be:
fc:72:5b:39:0d:5a:15:3f:e2:c4:60:a0:17:40:94:
7c:af:8d:a8:8e:5f:c2:af:71:89:f2:dc:9a:a1:27:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:75:A9:D2:7E:C6:3F:0B:47:20:8D:A1:47:C0:83:DC:37:13:41
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:02:e8:fb:be:c7:8f:3c:03:04:58:d6:02:d0:70:48:47:30:
00:a4:3e:f8:b7:8c:f6:77:d2:da:99:c5:b6:07:38:98:9b:ed:
09:35:42:a9:4a:f0:8b:ad:b8:56:90:c0:b1:88:90:49:50:0a:
16:af:c1:3f:bb:2b:8b:e1:35:bc:b7:9d:48:9d:5f:83:9b:dc:
a9:94:76:c2:eb:f3:fc:40:36:7f:02:dc:90:f5:12:78:0a:1d:
cc:34:51:0b:d3:88:67:03:23:a6:57:74:4d:13:3e:14:b0:a1:
53:dc:93:71:87:79:e7:6c:9d:2e:98:66:96:42:ef:e2:31:bb:
02:ba:24:d9:28:8d:78:91:e3:e0:1b:34:bb:12:40:6c:19:a3:
ab:f1:47:f4:ad:1f:c2:ea:70:4c:c0:ab:d1:8a:ce:5d:76:a8:
46:ac:22:fa:20:3a:12:41:6a:8a:87:48:ee:f7:24:1c:83:43:
c5:f9:b0:79:71:2e:52:03:d7:5d:56:03:d8:38:20:a5:74:11:
6a:cf:4f:f7:23:e2:b9:cd:be:1e:5f:0c:2c:f8:c1:fa:4a:28:
0f:4b:bf:25:c0:07:ba:41:23:1f:27:29:d7:31:57:3f:4b:f3:
71:10:3b:82:58:fe:3c:66:f9:17:d1:09:98:44:73:a5:5f:3c:
72:a9:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:55 2025 by rpki-client