Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft
File: zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft (raw, json)
Hash identifier: TWYqUNZdruOUNtr72qwvX7avCaOkssaUy1vdtDAOlO0=
Subject key identifier: D9:0F:49:1C:61:59:31:CF:27:C8:24:A9:36:F3:B6:68:54:9D:CB:5A
Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Certificate serial: 1617
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft
Manifest number: 1607
Signing time: Sat 29 Mar 2025 09:30:13 +0000
Manifest this update: Sat 29 Mar 2025 09:30:13 +0000
Manifest next update: Sat 29 Mar 2025 15:30:13 +0000
Files and hashes: 1: Lpl2UPsBatQTdu9fBpda0-qHUWI.roa (hash: /qAyn/fP7ZI5nAWGg/Wsu4XoweBVacanXrU7iSzl1jw=)
2: LylqXhwzuKsaknP5d7sNvnGLHGo.roa (hash: ih6PXOSKM2bFVDBxp6aryMqYAp04slHKb8512BmkZTU=)
3: qXwp6LTyWXTZ5AizMMP75u6xgcA.roa (hash: tXH+NvY2eV2k4O3x3PM/Kvp1f1OYxLBBqy/Zl2fu+O8=)
4: zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl (hash: ZMUlMahd+60uFXMIShO2GlWQbbxRwDmNhdCmaxfWIHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5655 (0x1617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Validity
Not Before: Mar 29 09:30:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D90F491C615931CF27C824A936F3B668549DCB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:3e:5a:ef:50:5a:1d:e9:df:e4:0a:b7:2a:
45:ed:fd:04:a8:d5:a9:7d:29:4c:81:11:c0:d7:7d:
41:02:eb:96:ff:7e:da:03:56:0c:33:37:34:88:32:
a0:11:1a:fe:a2:b0:00:b8:64:0e:e6:69:2d:b5:fe:
39:19:18:9f:72:e1:f3:94:29:a8:8c:38:3d:32:af:
42:5b:b8:a2:9b:1b:5a:59:4b:d5:b7:58:3f:b8:55:
5b:1a:47:8b:16:29:24:22:ae:d0:08:9c:d3:fd:be:
77:4e:c5:e8:bd:60:8b:2c:76:93:92:b0:c7:e7:d0:
30:fc:6b:fe:24:2f:00:59:7b:b8:fc:34:ef:ec:b0:
12:f9:0b:5c:e3:ab:a5:d2:04:c1:f8:02:e7:c7:45:
42:17:c4:26:bb:03:1d:e3:a7:6f:1d:b0:52:b4:61:
c3:45:17:5a:4e:40:de:02:17:cc:37:e7:fe:fb:2d:
d8:97:70:9e:8c:2c:67:ac:ee:01:df:d4:4d:35:cf:
de:19:5f:05:b4:c2:67:7c:e8:3f:2d:54:51:fe:8f:
90:c2:9b:2d:e2:8a:d8:b5:f7:f8:68:6f:ef:6e:f8:
a7:50:1d:92:0c:f7:8b:2a:04:6d:0b:43:0e:e5:ad:
86:c9:ea:2f:4a:15:f8:ff:e8:6d:f2:de:67:ed:76:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:49:1C:61:59:31:CF:27:C8:24:A9:36:F3:B6:68:54:9D:CB:5A
X509v3 Authority Key Identifier:
keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:39:96:f6:25:13:31:0a:26:e8:9b:b7:90:0b:d6:44:c8:98:
e4:a2:b3:91:4f:5d:9d:f4:c0:c2:2d:b6:d4:99:b1:d3:8b:f2:
e6:c2:a3:60:fb:07:fb:69:59:38:fc:ab:b1:7f:ae:bd:97:76:
fb:41:84:9b:0d:50:20:ef:ad:b5:df:0d:df:ac:09:df:28:dc:
c7:f5:0d:a0:ee:1f:5f:65:b3:cb:51:8e:8f:12:f0:c3:7d:62:
41:f4:c3:fd:44:e4:5c:45:df:6c:b8:08:b4:45:4e:14:3c:a5:
c7:e8:35:17:28:58:9f:6e:f7:6c:f1:79:b7:4f:1c:91:4d:28:
81:e5:00:93:d0:e1:34:b2:0c:d3:bc:39:25:3b:68:1a:56:97:
ea:c6:9a:41:44:b2:70:34:48:3c:8d:bf:30:6c:cd:8b:e7:84:
90:19:c8:23:2e:13:5d:96:d0:70:cc:b9:5c:d5:91:3f:7c:9c:
4a:16:8e:ad:ed:7d:f7:81:9d:e0:02:96:8f:3f:d5:5b:11:c2:
e1:cc:0b:9f:28:b8:09:8f:3a:ea:27:32:35:f3:64:e4:38:6e:
95:80:92:65:23:67:a8:93:9d:25:b4:85:9e:d9:ed:51:85:1c:
96:b1:a6:24:3e:72:1c:b6:90:1f:35:95:6f:42:14:27:1a:fb:
3b:df:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:51 2025 by rpki-client