Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
File: hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft (raw, json)
Hash identifier: zqEzSo5oL53pvp384AZ8IVEApl7w/HXSeDkvtVQpnvE=
Subject key identifier: 91:93:97:5D:2B:2B:7A:FF:2F:AC:85:0B:C0:F7:32:23:C6:43:CB:6F
Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Certificate serial: 15F3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
Manifest number: 15EB
Signing time: Sat 29 Mar 2025 10:31:32 +0000
Manifest this update: Sat 29 Mar 2025 10:31:32 +0000
Manifest next update: Sat 29 Mar 2025 16:31:32 +0000
Files and hashes: 1: YlCQD3AjiqC3RuG7BCeswbJ5P2E.roa (hash: kGTr41hKY1BAtXqj//es7tMkaKDsdWPhcNwgsScpVj4=)
2: hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl (hash: MPCyg787Y9pS4kuE9CyL4vPu6VeTvGMWpTQFv7WEdio=)
3: ypKy5DnFXlS8-unpzJOowoGg-gA.roa (hash: gDYcqKXKtv1HCTnFqp0vhPbGUNBgnlnX0V6jA97m8zQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5619 (0x15f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Validity
Not Before: Mar 29 10:31:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9193975D2B2B7AFF2FAC850BC0F73223C643CB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:9e:83:c4:e3:35:6d:08:ca:78:b4:1f:c8:
07:90:05:d1:6f:81:4c:22:55:89:ee:71:7f:dc:26:
e2:1e:81:79:96:1d:a4:08:e3:29:17:47:11:44:97:
b4:03:48:56:ac:47:54:54:9d:81:6f:74:9d:30:5a:
51:a1:2a:d5:80:13:c2:84:96:41:80:65:5d:9a:09:
f7:f7:39:47:2b:d3:c8:b8:aa:56:9f:1f:a7:94:ca:
e9:12:51:46:ca:30:9a:e7:4d:d3:ac:f0:39:d1:a7:
66:3b:0a:51:66:77:82:ed:52:08:c9:c5:08:9e:0c:
f4:9c:68:49:7b:ac:e8:e8:79:de:1a:1b:46:84:c0:
1d:ea:37:ff:41:d4:eb:46:03:f0:f8:5c:6a:bd:75:
d7:1f:0b:47:8a:da:1e:5d:b0:3c:c4:e1:56:3b:f5:
69:a1:dc:d5:0c:a3:5a:03:41:cf:f9:e5:81:3d:28:
d0:8b:9d:a5:41:9a:9f:32:43:93:71:bc:8f:7d:ef:
2a:65:2d:72:96:4e:ae:03:16:47:2b:91:b1:e3:62:
15:c0:f0:be:b4:a7:2b:d8:b4:8a:3d:44:02:1f:f0:
14:b0:8c:bc:69:6f:6d:41:1e:09:25:b0:df:40:c0:
bb:b8:37:90:f9:72:55:44:0f:24:5e:c4:57:03:4a:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:97:5D:2B:2B:7A:FF:2F:AC:85:0B:C0:F7:32:23:C6:43:CB:6F
X509v3 Authority Key Identifier:
keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:d4:21:5b:31:0f:f1:0e:44:a1:ec:a7:f3:1b:e1:9f:f2:01:
ff:e3:a8:a0:f3:9f:c9:d8:63:96:a0:06:8b:a3:63:13:e7:17:
e7:8d:cb:bc:d4:fa:16:99:16:05:e2:9c:f7:8d:7b:d5:ab:22:
c4:12:3f:44:cb:1e:4c:33:33:86:6a:48:a3:cd:47:57:69:c2:
5d:26:21:02:ef:14:bd:f5:90:57:8b:b2:ff:4e:03:62:35:79:
52:8c:64:73:10:18:8b:d9:98:79:1e:53:ad:fc:16:c4:8d:ac:
0e:65:f8:62:18:00:6a:9d:77:a1:ed:4b:98:74:82:31:b6:fe:
6d:5b:e4:df:2a:2e:23:07:89:19:bb:f2:32:d0:b0:ad:a0:ed:
49:03:58:e6:e6:57:61:47:39:71:6c:ec:8f:d1:c5:6f:70:95:
4b:14:0e:50:82:7d:63:66:77:a2:6e:38:35:e3:a2:fc:37:f6:
b8:bb:89:7b:18:8c:07:25:96:b0:97:ab:13:a8:1c:07:0f:eb:
05:f9:92:52:98:b5:4a:f2:2e:31:86:08:11:9a:3b:2d:94:0f:
bd:a9:69:50:dd:e7:a0:4b:df:a6:f0:da:ef:0f:da:f6:84:d4:
40:59:53:02:cf:6b:cb:8f:cc:54:86:ed:2c:33:75:4a:bb:f3:
89:30:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:47 2025 by rpki-client