Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft
File: RxbLW0SB7BOu3UCywwLFD2Aa930.mft (raw, json)
Hash identifier: OX/hZyk1SqlxAbnrLPtBvJjOL70bfhHjFNVK5q9gZLM=
Subject key identifier: C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7
Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
Certificate issuer: /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Certificate serial: 1F32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft
Manifest number: 1F27
Signing time: Fri 21 Mar 2025 00:27:20 +0000
Manifest this update: Fri 21 Mar 2025 00:27:20 +0000
Manifest next update: Fri 21 Mar 2025 06:27:20 +0000
Files and hashes: 1: -3yT0_lt0soloseVQ2_MOx1MX2Q.roa (hash: HOyUmSzgMMgFat+nGykFv3eJUKtJQOKIVGShLfWgMNU=)
2: DbljN0jjqppujGVxxaH450Gi6Jc.roa (hash: Nk07rDC1ImocTTB2zTNqLvHZlNpJE59UUaO7KLxqYEo=)
3: RxbLW0SB7BOu3UCywwLFD2Aa930.crl (hash: zLpFQ6YOZNtNyGAfrzOaeopGqkELLzLpd+mO/UbAkDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7986 (0x1f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Validity
Not Before: Mar 21 00:27:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C22C13114CCC8B4321C7500F23AE58520E14F3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:b8:c4:ea:f1:00:5e:5b:39:17:4c:31:89:
f5:ba:e8:28:09:65:f0:5f:6e:d7:ac:d1:0b:d9:7a:
ea:56:82:9a:84:8b:c3:aa:86:dc:11:6e:20:ea:e8:
2d:5d:ed:10:1e:00:85:7d:37:2e:20:56:d0:bf:b0:
75:6a:2b:5d:32:ce:99:8c:fb:0e:e7:79:07:d9:f0:
a8:98:fe:2c:08:ec:fa:33:de:94:7f:51:be:42:e3:
43:5c:ce:a0:65:dd:6c:18:2e:aa:48:05:bd:02:de:
1a:18:25:a2:e9:4c:5d:00:da:47:9a:5b:3e:53:06:
95:84:c1:e5:c9:6f:46:81:ab:1f:37:37:66:42:90:
cb:7d:da:31:f5:ca:56:cc:5d:d4:43:95:15:0a:49:
e7:f6:13:cc:8d:6a:b6:80:8e:1e:a0:2a:81:e5:37:
fa:e1:e9:99:1c:f7:a4:08:26:65:1c:04:c9:8d:cf:
e7:ff:05:7b:e5:0b:0e:c5:f7:5a:bf:c3:62:f5:0a:
3c:97:bd:25:06:4c:8a:cb:a0:de:4a:a6:cc:14:d3:
ee:e5:a7:36:35:59:e0:2b:d5:17:0a:30:41:96:95:
4d:25:bc:c9:43:af:4a:0b:18:b4:39:7b:af:e4:0c:
22:84:91:59:87:79:5f:3f:90:d7:52:fd:b1:83:cd:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2C:13:11:4C:CC:8B:43:21:C7:50:0F:23:AE:58:52:0E:14:F3:D7
X509v3 Authority Key Identifier:
keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:1b:a8:40:bd:9a:b5:8f:0e:3f:d8:3f:e4:1a:46:c4:4f:23:
d5:f9:33:28:c2:5c:58:31:ae:01:7a:5e:2c:50:c9:9b:45:0a:
63:b1:fe:d6:aa:ca:b6:e7:cb:45:96:7d:e0:50:a7:ef:93:39:
db:24:cb:f6:58:46:85:50:85:69:ef:d0:a5:77:2a:ad:a8:09:
f9:9d:33:2d:b6:fd:dd:bc:79:1f:c9:c2:ae:bc:f3:d3:e5:20:
b3:c5:98:2d:3b:8b:6a:49:33:69:3e:7d:89:d6:d3:c7:25:c5:
59:b7:56:84:1f:41:12:0e:16:a6:48:33:8f:2a:0b:ce:84:94:
ba:e8:52:ab:dd:7d:0b:5d:89:5e:30:4b:27:cb:78:10:b7:ca:
f9:c3:cd:7b:f5:2f:c6:d2:a9:72:a7:a4:b6:e0:e6:4e:dc:10:
ef:90:6b:d5:f9:8c:1f:43:20:d3:3e:d6:f5:fe:f5:aa:ff:ff:
81:dd:f7:97:d0:bc:a6:d1:18:95:ae:8e:df:ef:02:85:3f:c2:
d0:1f:8a:5e:5b:75:4c:b1:d4:d7:b1:30:a8:c3:5e:06:cd:e2:
7d:73:66:d6:ab:9c:68:e1:9f:cd:a3:90:3e:8b:9d:0d:c2:9b:
ab:23:84:99:9a:ea:18:d7:4e:89:22:7e:70:d7:dd:c9:02:75:
3f:ba:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:23 2025 by rpki-client