Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json)
Hash identifier: TBrRe6tW51w77TfCGeS2sTNO4p7NnqGWjg6hO4zYZLI=
Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4
Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Certificate serial: 142F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
Manifest number: 1426
Signing time: Sat 29 Mar 2025 10:27:32 +0000
Manifest this update: Sat 29 Mar 2025 10:27:32 +0000
Manifest next update: Sat 29 Mar 2025 16:27:32 +0000
Files and hashes: 1: Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa (hash: m4W5sYfutDIBGUa1Xlob/CH9YeApB50kyDS7XSN9X8k=)
2: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: cxjDlHCCgQSmqDQths5QY/XXWz4lyolEcS9P7ac+gkE=)
3: dhzeY3_OxcHAtiIl3zszftT0K6M.roa (hash: Bh1vZMx8G1lOICwP2E+cHe0uEMRdbBxn1G0CwSCXWF0=)
4: hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa (hash: 2Vn8f0lm4bXJ6phvRt7XoC++jp3dCf7kzB9LVXj1jVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5167 (0x142f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Validity
Not Before: Mar 29 10:27:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95:
9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c:
12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a:
fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72:
dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db:
6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5:
76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78:
ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92:
f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e:
e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79:
96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26:
db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87:
5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3:
1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b:
df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48:
1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df:
45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4
X509v3 Authority Key Identifier:
keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:9b:47:4b:de:eb:c0:8b:c5:16:ac:4a:62:85:f8:34:76:
f7:3c:1c:0b:27:06:d7:8b:8d:23:ba:03:7b:24:42:3a:53:be:
5c:15:a8:0d:e9:61:5a:dd:a8:f9:6d:01:a1:b9:69:5b:03:72:
29:fa:c0:bc:fe:c2:95:b5:3c:e9:12:9f:d8:2d:b9:f1:51:ba:
b6:79:91:85:05:65:b3:fc:66:ea:e1:66:16:ed:ae:39:f6:c3:
12:1e:04:a8:ae:42:b0:1c:b2:d9:ab:71:8c:48:2b:72:25:23:
b0:fb:f7:49:1c:68:ca:d8:e2:3b:d4:81:8f:f0:2a:85:34:6d:
da:44:4e:13:bd:0f:c8:7f:56:af:f8:1c:f6:7d:34:2b:bb:7f:
16:31:b1:6c:fe:48:01:37:04:e5:c7:7f:7a:1d:a1:a4:9a:69:
d0:df:ff:74:69:9f:2b:b0:ae:7a:e1:c5:60:45:14:e4:05:b1:
91:9b:8e:d3:dc:16:fc:3f:aa:91:a6:96:f7:35:c2:6c:38:b2:
ff:52:29:7b:2a:ec:fa:d1:77:62:b2:a1:ce:d6:be:07:e8:db:
7b:ab:99:49:d1:fb:b5:2e:17:09:ec:cd:33:ce:7d:44:52:16:
0d:ed:66:4a:9c:26:b9:6e:b4:99:c5:12:49:44:35:7f:5b:6b:
d3:c0:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:08 2025 by rpki-client