Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
File: d3C3Obnvzri8H9oFYOR4VWHyvL8.mft (raw, json)
Hash identifier: rIltkNC1cd5/SYb/+6SCJA/dSE4seUJDsqU64JN13sw=
Subject key identifier: DC:50:F8:90:5D:28:00:EE:25:08:55:78:0F:30:DE:49:36:05:5E:5B
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0EDC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
Manifest number: 0A1C
Signing time: Fri 21 Mar 2025 00:28:15 +0000
Manifest this update: Fri 21 Mar 2025 00:28:15 +0000
Manifest next update: Fri 21 Mar 2025 06:28:15 +0000
Files and hashes: 1: 1hvP6VnNhckBRePU9KBnP8bZXw0.roa (hash: PbPaskbWFCUTJYV7JyLaCffe7R2+HifMkKUxkCYrpCI=)
2: EvsXQSBnZYeHskv4Xrnr8yQ9ypM.roa (hash: wUxRPmXu2V3zdbriU42FqGGpGH5KdIXypqAFGMzHOVk=)
3: TNIr1C9Yvbtv0hxWM8ozVYUkiCk.roa (hash: KLtuoy9rQxVnq0AJ2RZEEC8BYvvgpeeJ2qf0j/9xsU8=)
4: d3C3Obnvzri8H9oFYOR4VWHyvL8.crl (hash: G1HFFBQd68pYIpSKOn6I82sZv5FQy1MJ9Wbk2ADZK3A=)
5: hFvPpAUNFU1Lrsl88_SZh-w7sGg.roa (hash: gW1flZWM6G+8YhpYeHofoLSWNJbyRkk1bIHhb8PUbE8=)
6: qosX3_zdjAXzbAp2h5Utf1s4le0.roa (hash: qz6TRBd46dnuHKZSDkhq2NpbeQDgF9gZAUMIJHMSLEQ=)
7: szjcp8IwSRNqLE13YroyiF9DDYA.roa (hash: i2LNGDSUAj4anqNW7NsvflXyj7kSntKY3+StXIiuS2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3804 (0xedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Mar 21 00:28:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DC50F8905D2800EE250855780F30DE4936055E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:37:89:9e:9c:2d:b1:35:77:a5:ca:6a:8c:
9e:ef:0f:c7:5d:0c:1d:43:21:02:e4:1b:2b:b2:15:
a8:9e:79:80:54:51:0f:e9:20:15:f9:6f:8c:d9:e8:
7a:b6:24:c3:91:ac:e4:68:13:c8:a5:35:30:87:02:
e5:9d:35:e4:5b:eb:d7:fa:f1:23:06:16:eb:6a:60:
43:af:b2:a6:52:1d:d0:aa:f2:85:19:5c:ed:00:d2:
09:a7:37:80:77:96:e0:67:50:a5:fd:20:1f:0f:db:
18:b0:cc:95:9c:8b:6a:75:49:5a:cf:22:7c:f9:6e:
fd:f4:1d:2f:06:90:d2:44:b9:ac:fc:ff:aa:f1:77:
f3:e7:20:d3:01:1b:44:59:5b:1a:6e:5b:37:dd:3c:
b8:ef:35:c9:46:d7:77:35:9c:52:9a:e4:c2:8f:62:
3a:fe:f0:38:3c:6a:f9:40:d0:26:4a:ba:c0:2a:d5:
46:13:ca:87:73:b4:da:bd:b7:18:7a:17:e0:d1:bb:
26:ab:6e:9e:33:07:06:ea:ce:36:c7:9c:c7:02:a8:
22:04:f8:b8:2b:f2:0f:df:a5:77:7f:65:e4:50:f5:
3a:fc:29:d1:67:d4:75:fc:fc:4e:2d:4b:e7:ae:29:
92:84:95:d5:ff:00:28:c8:00:38:34:8d:a6:64:2a:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:50:F8:90:5D:28:00:EE:25:08:55:78:0F:30:DE:49:36:05:5E:5B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:01:cc:52:39:c2:34:47:1c:d5:73:af:64:b1:a3:c1:1a:d8:
d5:53:e0:23:08:6d:b6:8a:1d:9b:e0:c7:02:45:db:9b:3a:44:
d7:26:a8:a9:42:25:70:66:4b:fa:42:2e:f1:f7:66:5e:aa:ee:
c6:7a:4c:fd:03:b2:37:26:45:d0:05:45:37:eb:01:35:f5:f7:
a3:a2:f5:b2:23:ce:93:4a:2f:be:49:6b:7f:91:8b:41:ee:c7:
fd:ff:04:62:d4:df:51:76:a6:b5:a7:55:b6:84:d1:b1:84:93:
b9:d7:b8:e6:e5:8c:98:c6:63:43:04:8b:e2:25:9f:bb:0a:bc:
67:50:9e:9c:15:7a:19:3e:e8:9f:74:2e:75:13:f0:7e:41:60:
57:d7:08:27:29:9a:08:13:35:c9:88:2a:68:3f:a4:ad:52:f4:
61:8b:30:cc:f9:7c:ea:19:61:31:a7:eb:0d:60:19:21:4f:8c:
e4:5d:e0:67:d1:de:8c:56:64:77:f3:73:d3:81:88:10:e0:e3:
40:be:d7:63:b7:e7:8a:4c:74:73:49:26:2e:01:b7:81:1c:5e:
ac:e0:74:d5:c4:14:d2:44:bf:77:e6:e2:f0:aa:21:5d:ec:8b:
e6:59:29:1e:e1:1d:74:db:7b:84:28:58:3f:ee:82:06:07:8d:
9e:9e:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:10 2025 by rpki-client