Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
File: MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft (raw, json)
Hash identifier: QoXmhCDc5/49TyNDb8B51yTWKyIb8bJfAAgbiqlM3xg=
Subject key identifier: E5:2A:0D:13:FE:FC:2B:DD:04:16:97:AF:04:0A:22:E5:40:1F:69:44
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: C1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
Manifest number: BB
Signing time: Mon 17 Feb 2025 20:27:53 +0000
Manifest this update: Mon 17 Feb 2025 20:27:52 +0000
Manifest next update: Tue 18 Feb 2025 02:27:52 +0000
Files and hashes: 1: 9Jdk8KOSJRfL2mrB3YfKxFMxZQE.roa (hash: m5o9rgoWIViF2OCxVgXp3gjdyjYdlkUCHSrZyBPT+jQ=)
2: KaWNUh_TG8Mk6sJVwRnXPmiEp0g.roa (hash: Qafk9mMby1vgCNhomBv1/D3xlTQb7JRe+cNcpklkkiU=)
3: MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl (hash: OC68lBton8/2YVQGc6THFXlZikePWasVI3R95sTC5Gk=)
4: NBU-Fjpng-fIM7FOJ-bo-ZrSyeo.roa (hash: NoAdiBRSj2MPKratBpWYTmG1nBombkXXFayuCYIwDFM=)
5: oo1RAhDNLpypJ4DY-FhJaypVYdc.roa (hash: p20QDfifNmzC/E34EhawcSFaYE4WAwts4xpfIBZiMZk=)
6: puk7qV1IA8WGE7-uMRA6VJBCmfo.roa (hash: rj7pjmyfQeQkOZRupb32bJgd9wIXMz6GCV+uWL5+LOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Feb 17 20:27:52 2025 GMT
Not After : Jan 13 01:35:26 2026 GMT
Subject: CN=E52A0D13FEFC2BDD041697AF040A22E5401F6944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:f8:c1:c1:45:a0:13:fa:bd:c7:1f:be:be:
11:82:be:ae:65:1a:95:6a:6b:78:dc:2c:32:fe:eb:
61:76:81:cf:71:98:07:cb:05:b4:83:86:30:2e:96:
e5:86:71:5e:4f:40:23:29:a0:5e:24:c5:8f:31:33:
85:7a:85:7f:55:7c:39:53:c7:a7:06:a4:fa:db:1c:
96:7b:97:fc:5c:35:17:c5:3e:56:f3:9c:76:33:cc:
93:81:ee:a7:e3:2a:86:c8:12:46:2c:0f:ac:0a:5a:
e0:e1:46:83:7e:6c:3f:37:92:05:2d:80:c7:09:04:
3c:fd:87:c7:b6:65:f4:5e:48:29:22:71:d8:d7:0d:
f0:68:a7:70:2c:b6:f2:f6:93:de:24:0f:9f:16:94:
7e:fb:43:db:fd:0d:07:ce:56:4c:46:cf:c2:63:52:
8a:a0:fe:c9:c0:f6:ec:cb:d6:2e:b6:4f:06:0f:a3:
b0:a3:cc:0c:3f:de:17:40:39:a7:58:7e:89:dd:8d:
90:93:c8:21:4d:4d:c6:d3:12:5e:6e:12:01:15:25:
d1:47:26:3e:d6:6f:c3:5a:63:08:bc:13:25:1c:f0:
df:3c:ed:bf:dd:62:95:ec:31:a2:3a:fc:bf:35:1f:
cc:d2:46:e5:a7:32:f1:db:c4:d3:ec:62:7e:10:a6:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:0D:13:FE:FC:2B:DD:04:16:97:AF:04:0A:22:E5:40:1F:69:44
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:dd:9a:13:ae:da:3f:2a:69:7d:2f:c9:ee:d0:8c:40:ca:04:
fc:0f:d4:d1:97:0b:3d:78:47:79:02:35:01:71:11:1a:a6:44:
8d:26:c5:56:e6:65:f9:3b:79:7d:a3:c5:b0:e9:bd:bc:89:1b:
c3:55:cc:19:ce:64:ec:ec:e4:1e:a7:06:0e:9a:c5:5f:33:77:
66:32:71:23:16:24:15:93:bb:b7:70:9a:8e:4a:31:c0:c8:59:
da:a5:a8:9b:f4:3c:d3:7f:b4:73:bf:99:fb:6e:54:e9:ba:0d:
29:ff:02:22:a3:ab:fa:14:36:25:82:10:99:a1:2f:3b:c1:03:
35:2b:a9:9e:5f:e2:eb:e5:ba:e7:df:b6:b8:e1:ef:ee:8e:5d:
a9:eb:92:34:76:5a:36:b9:9d:26:06:58:8c:e8:16:81:f2:89:
f6:a9:e2:52:85:08:fa:5a:ae:05:84:c9:2a:66:ed:59:4f:13:
3c:7d:a1:f5:89:aa:cc:c8:d5:4d:87:06:3d:0a:e4:53:27:f8:
4b:c3:eb:b3:22:fc:19:79:3f:ba:91:a1:1c:59:30:97:c1:d7:
4c:65:76:b1:77:04:16:f8:62:40:14:71:15:83:f8:2c:0b:6f:
53:59:26:74:7a:3d:3d:1f:6d:cb:34:71:e3:c3:d4:bc:9f:a5:
47:50:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:08:31 2025 by rpki-client