Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3350/GRRCCqTTqQi4XigNXJTTeV7ZApo.mft
File: GRRCCqTTqQi4XigNXJTTeV7ZApo.mft (raw, json)
Hash identifier: TlW1BBNngBsn7OygTHn9m60pa4y+C+bI+rtaxHp0Bzs=
Subject key identifier: 72:69:5A:C9:76:96:8C:B4:F7:E5:DC:71:5A:68:AB:57:79:E7:E0:B4
Authority key identifier: 19:14:42:0A:A4:D3:A9:08:B8:5E:28:0D:5C:94:D3:79:5E:D9:02:9A
Certificate issuer: /CN=1914420AA4D3A908B85E280D5C94D3795ED9029A
Certificate serial: D7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GRRCCqTTqQi4XigNXJTTeV7ZApo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/GRRCCqTTqQi4XigNXJTTeV7ZApo.mft
Manifest number: D6
Signing time: Fri 21 Mar 2025 00:32:24 +0000
Manifest this update: Fri 21 Mar 2025 00:32:24 +0000
Manifest next update: Fri 21 Mar 2025 06:32:24 +0000
Files and hashes: 1: GRRCCqTTqQi4XigNXJTTeV7ZApo.crl (hash: C8iH3yV7yhfyFueiA/EL7XGZtJf+30ORMFjWTIdE17A=)
2: bAICBsc2yNpS-hdBUc7C_MQUAq0.roa (hash: lLJZk8Sidva5VoVsEc6PmZ2JWsZGvOEY6Er0Y9R2Euw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1914420AA4D3A908B85E280D5C94D3795ED9029A
Validity
Not Before: Mar 21 00:32:24 2025 GMT
Not After : Feb 6 03:05:20 2026 GMT
Subject: CN=72695AC976968CB4F7E5DC715A68AB5779E7E0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:cc:51:c4:e8:77:60:a5:33:2b:87:dc:f5:
99:78:1b:d0:6b:f6:73:d6:94:0c:0f:89:32:24:de:
d6:3c:9d:e7:98:f8:1b:75:96:6d:25:36:76:6e:67:
1f:8b:ce:44:3f:5e:bd:66:60:e4:92:fe:2b:6b:ff:
2f:2d:80:f7:0d:05:53:ff:7d:36:19:d0:0b:34:3a:
89:af:90:96:d9:55:96:ba:53:53:4d:11:47:cc:28:
27:46:b9:09:fc:a2:f2:fd:11:84:5c:72:db:eb:9d:
ee:f5:e0:7b:6a:53:95:6d:79:6b:9d:f5:8f:41:29:
5d:6a:50:37:b7:d9:3d:2a:9a:e5:80:20:ba:86:a4:
d9:a7:b3:b5:09:a9:28:80:e5:e7:9b:b5:09:37:31:
3a:da:a1:9e:25:d4:a6:06:b8:5d:92:5e:dd:ce:a2:
10:76:70:5a:1f:61:37:84:dd:7c:ea:34:ca:0d:e2:
38:2f:c0:6b:16:23:c0:c5:45:85:de:04:0b:80:3a:
5e:b1:0c:58:4d:2b:61:e1:be:68:8c:c7:58:7f:8f:
7e:b8:fb:cb:b9:80:48:81:c6:4e:5f:0e:80:12:82:
3e:2e:01:f1:35:ae:09:5b:0c:bb:df:ce:9d:d1:65:
8e:2c:37:c6:64:76:d7:77:23:ba:4a:da:64:b4:1c:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:5A:C9:76:96:8C:B4:F7:E5:DC:71:5A:68:AB:57:79:E7:E0:B4
X509v3 Authority Key Identifier:
keyid:19:14:42:0A:A4:D3:A9:08:B8:5E:28:0D:5C:94:D3:79:5E:D9:02:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/GRRCCqTTqQi4XigNXJTTeV7ZApo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GRRCCqTTqQi4XigNXJTTeV7ZApo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/GRRCCqTTqQi4XigNXJTTeV7ZApo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:06:ac:e5:55:5b:21:21:08:f8:ba:23:c1:85:5e:5b:6c:a5:
dc:87:68:be:8d:af:bb:a3:98:d2:d4:1b:7f:34:94:a5:90:d7:
7a:e6:8e:b8:03:57:e4:41:15:f4:4a:86:65:a7:7c:c3:d0:9f:
46:52:bd:13:32:18:10:a6:71:4c:af:b0:31:b3:61:60:d1:4a:
ec:64:95:48:49:0f:21:30:85:04:58:55:f0:67:99:92:6b:cd:
ab:d3:c5:bf:c0:6f:23:34:49:e3:9f:b0:48:a8:f4:91:15:b4:
f5:77:39:e9:fe:5c:54:64:e0:6d:d2:98:25:d3:f1:eb:7c:ab:
15:a2:8b:c4:ca:1e:a5:e1:7f:d4:b9:c2:06:10:53:44:95:91:
cf:7c:f9:aa:6b:4e:72:71:e0:4b:66:cf:1d:16:63:81:1b:da:
71:4a:69:66:47:57:2b:d9:ae:25:a5:34:ee:e0:4f:0c:c0:ca:
8b:b6:f3:c1:4b:cd:0f:00:e5:c7:3c:8c:c9:e0:df:79:02:3c:
63:5a:85:1f:b3:69:5a:6a:b7:5c:c2:84:05:78:83:7a:64:c4:
42:d5:23:93:8b:6e:f3:fe:4f:4b:46:38:f5:cd:b1:c2:c0:83:
ea:b4:c2:5d:43:5b:46:30:40:9d:9a:c4:e7:f4:c2:f3:ee:fa:
f6:01:3d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:19 2025 by rpki-client