Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
File: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft (raw, json)
Hash identifier: 8ohjOfNI55lBQcWaalvL6pvkr3Yww6blWqG8WNS2gEM=
Subject key identifier: B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
Authority key identifier: 13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
Certificate issuer: /CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Certificate serial: 0AF0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
Manifest number: 0AED
Signing time: Sat 29 Mar 2025 09:28:09 +0000
Manifest this update: Sat 29 Mar 2025 09:28:09 +0000
Manifest next update: Sat 29 Mar 2025 15:28:09 +0000
Files and hashes: 1: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl (hash: BidXgNx+3lxQUVIVurzcURALcmPnxKLQccpqCuLOF00=)
2: dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa (hash: acKWSIHX1ZbTm99RSURHM2kfCk/nXcKQCe+6vMB1VMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Validity
Not Before: Mar 29 09:28:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B9438C5506FCB9C47B7F7F60BA4C123BFB484F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:84:3c:bc:71:4c:46:3d:ab:2e:d8:52:f4:
b7:ec:1a:b2:26:2c:91:04:ab:9d:e5:db:17:1c:5a:
30:36:89:dd:3e:9a:0f:9a:16:e5:8b:34:05:67:0f:
da:fe:e5:81:1b:06:9d:46:f5:de:30:76:34:a6:34:
ce:34:e5:88:0b:72:dd:0c:e7:11:59:cb:06:28:04:
be:61:e0:cf:8a:93:47:cc:16:df:d1:94:62:f7:60:
26:f4:c5:25:97:28:90:96:0e:51:0b:f4:56:0b:87:
b5:28:e8:ff:45:69:e9:35:08:5c:a5:91:c5:6b:a5:
c2:07:fe:f2:c3:6f:cb:44:ec:25:1f:36:e2:4e:de:
60:ab:54:cd:87:10:48:68:cb:88:62:d0:f5:4f:4f:
ac:92:4b:7a:a6:a4:4e:ee:68:0e:67:4f:f1:2a:36:
0e:f1:43:e0:3a:da:78:ee:ca:89:a0:dc:88:54:c6:
04:f5:1e:a2:58:04:04:85:8b:8a:b0:9e:21:b8:61:
66:42:61:84:53:f6:ef:4f:45:9c:f8:a5:83:ad:9b:
9a:1c:a4:0b:1d:63:b8:9e:67:c0:4f:8a:e0:d2:02:
88:84:91:d9:06:b0:1c:b3:1e:ed:54:d8:34:e5:34:
50:4e:c8:2e:4f:7c:1c:74:a0:e4:65:a5:f7:a5:8e:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
X509v3 Authority Key Identifier:
keyid:13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:b6:8e:73:db:be:bf:9d:a9:20:43:bf:3d:d7:73:90:8e:
57:89:4a:b2:d2:04:a1:c1:f9:97:64:4f:a5:5d:a0:29:1f:aa:
db:70:df:30:00:ea:e2:58:de:33:53:84:f7:f9:e4:f7:ec:46:
20:97:3d:74:cc:14:7b:02:93:e0:d7:00:87:03:c8:c4:59:92:
6f:bd:1d:8a:ec:63:7e:da:ea:9a:81:9a:39:2b:3d:12:19:66:
2f:f3:1b:be:45:ad:34:b8:05:f3:b4:1f:6a:6f:42:5f:42:97:
f7:02:3e:7e:07:70:45:77:fc:97:c6:35:ff:3f:20:77:cf:f3:
06:1e:53:85:2c:91:6e:18:dc:8c:a5:6a:fd:9b:64:b5:1f:c1:
48:de:1f:db:a6:f6:3d:a6:9a:bf:cf:25:88:c0:e3:de:07:e3:
a5:57:c4:3d:cf:53:47:fc:d3:1d:31:ee:20:f6:c1:5b:bb:f9:
f1:76:ea:59:60:b3:b7:da:02:27:ba:45:8c:22:aa:c5:d1:52:
c7:53:f9:9d:fc:53:57:a0:38:37:d9:66:e3:3c:29:ee:02:07:
55:80:9a:de:ef:67:ac:ff:96:79:1f:53:18:5c:9a:4f:ce:0b:
e5:c8:f0:84:12:86:8e:4c:79:dd:14:c6:d6:1c:9b:d6:b5:f3:
92:a9:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:53 2025 by rpki-client