Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft
File: tS8PP_c3H_HOnYI-lUn8EVixaio.mft (raw, json)
Hash identifier: mWIIdvZZRl9afAylchzxVlKQNtNz4DQGMwjy4hSpLUo=
Subject key identifier: FD:5B:6B:6C:75:14:3C:3E:98:68:7B:61:5C:0B:97:FC:54:E4:E1:75
Authority key identifier: B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A
Certificate issuer: /CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A
Certificate serial: 06ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft
Manifest number: 06E5
Signing time: Fri 21 Mar 2025 00:27:36 +0000
Manifest this update: Fri 21 Mar 2025 00:27:36 +0000
Manifest next update: Fri 21 Mar 2025 06:27:36 +0000
Files and hashes: 1: 0g7JiXxyUn6A1eA1f0w0PbitEHk.roa (hash: 1+e9fVT1hXgUDWBczKykzipKNM5h/EvzlrzxqK/S8G8=)
2: KegyS8Kjy5t8VmPx0hzh8-hUTIk.roa (hash: uSKpQZ0vddvnlGUET0qERZS76Jh1NDPu/a48Wss+Scs=)
3: YPtiTpC3_2ladsp2RnmsGeRmYok.roa (hash: BcNVoszKWuXYJShkJ3+9H/gyVtqB/H0DWX2zmfaWA5w=)
4: qoAyup9ysUIZEs0MLo6XcmAfik0.roa (hash: ykmMQHxUbA5HXDx7XND8w9BFT4ko+qfZ7FdRcTE/p6M=)
5: sApvTIC1D4-gCzcTsa4xyYGqqqc.roa (hash: 8twDWj/nr5fbqF+R4YjEfR5uch6GmqA5H45iJf/4jCM=)
6: tS8PP_c3H_HOnYI-lUn8EVixaio.crl (hash: GtyS/XgjSyrMT36k72OrntcstyqeBjLPnnUI6m4jOVQ=)
7: utBxSla5Y9Lm4eJRpxCBsS2c1JQ.roa (hash: 0GKjm4b6pMwIffdCFC1KrIdfY7BZxhXnDJ/P+r++YIQ=)
8: z8ROOvpLClOvSR6IhvcLephY-tM.roa (hash: bddYJe68JYyYkZKZ/uix57o8m/EJDTIZ2ch0s9sYnAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A
Validity
Not Before: Mar 21 00:27:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FD5B6B6C75143C3E98687B615C0B97FC54E4E175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:e3:1d:45:6a:fb:53:2d:4b:99:3e:d0:6e:
49:28:a0:9a:82:34:2c:d7:c7:5a:92:58:79:0e:93:
9b:29:34:ed:94:f8:0e:a5:8b:3a:9c:15:b1:c0:3e:
f2:18:e7:6b:86:69:20:0b:cd:fa:13:8b:b7:3b:70:
2f:34:3a:5f:df:d1:bb:f5:b3:56:98:81:d2:05:f6:
b5:93:2b:65:6c:4f:e2:ad:0e:04:f0:57:f4:f1:aa:
09:93:aa:e2:2e:0a:0b:c3:84:2c:4c:7e:94:8d:65:
68:40:53:b2:b0:b1:97:e0:c4:e1:4d:87:82:d0:85:
90:7e:f9:42:24:fa:6f:52:20:5d:98:69:e1:8b:48:
e5:92:9c:ec:18:d3:94:9b:f6:bb:eb:a6:74:b5:b5:
f7:f6:1f:12:f3:cd:d4:a8:3e:10:2d:e1:63:5b:8a:
63:89:c7:03:be:58:15:cb:4c:25:e7:fe:55:08:65:
b5:af:ff:db:6d:6a:4c:bb:e2:9c:ee:70:25:c9:13:
4d:fe:3b:af:81:47:56:e4:dc:84:b6:19:c4:fb:21:
94:14:f5:ea:3a:c9:29:39:80:7e:39:c4:f1:2e:17:
0e:4f:ec:5f:c0:9d:e7:4f:56:d1:99:dc:db:7b:0b:
92:3d:8e:c1:77:ed:4b:84:77:73:87:d0:41:5a:68:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:6B:6C:75:14:3C:3E:98:68:7B:61:5C:0B:97:FC:54:E4:E1:75
X509v3 Authority Key Identifier:
keyid:B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:9c:a9:a4:10:93:a1:34:f5:e8:45:40:1c:bb:b6:6b:d8:8b:
66:eb:33:57:87:75:bf:ed:a6:cf:fb:c5:da:c9:e0:0b:e1:df:
cd:80:6a:42:66:92:19:41:e7:73:d9:93:2d:c5:c5:cc:6a:56:
f2:08:ef:3f:d6:b4:68:74:a7:99:94:ac:f0:cc:41:e8:5f:fe:
92:a0:62:ec:be:c1:7a:fa:a7:e5:3b:4a:14:8d:05:68:4b:7b:
6d:cf:71:45:ac:99:a0:f5:51:0f:fa:e4:7f:8b:4c:40:e7:05:
e6:3a:5c:40:72:03:b9:7b:b7:e5:c2:b9:56:98:f6:2f:14:9a:
7f:d2:21:e0:e9:73:6c:aa:6c:9e:08:37:40:8e:b1:ef:0e:aa:
91:4e:59:e5:08:dd:e0:86:be:07:5c:ea:78:b7:db:25:26:06:
76:d4:8f:4b:a1:f7:96:04:23:75:bc:3e:ad:7a:01:84:57:fe:
ad:9a:29:b5:dc:e9:92:47:dd:ad:e8:fd:e3:e7:a2:70:3f:f6:
bb:60:2f:fc:8c:31:9c:41:50:52:c4:fc:5a:3b:f6:44:01:1d:
59:0c:78:94:d1:3b:05:53:b7:e4:e1:45:e7:1f:54:77:ca:0c:
a2:3e:3d:be:86:1e:98:c4:a2:0a:3e:b7:8d:47:d9:1a:4e:82:
73:68:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:10 2025 by rpki-client