Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
File: DuhjrFcK7qH5ML6l52qufdVTgE4.mft (raw, json)
Hash identifier: NKLmtrdh6gXwYoqS7Bzcr5mCKKjwPCAJRlNeVDy9QAM=
Subject key identifier: 0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 0B10
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
Manifest number: 0AC3
Signing time: Fri 04 Apr 2025 19:08:32 +0000
Manifest this update: Fri 04 Apr 2025 19:08:32 +0000
Manifest next update: Sat 05 Apr 2025 01:08:32 +0000
Files and hashes: 1: DuhjrFcK7qH5ML6l52qufdVTgE4.crl (hash: kP2jEYyQhnWwQwnpZC/Qja98peWaY4bU3ECCiHAhRJo=)
2: _V_7ixByiVG1pjZi1mDw4b4VxpI.roa (hash: XyMDQBmqSSFJJTqxQXZg0E/WbwlH0Rpqj7jDNMHguZw=)
3: cJAPNRcPlRfx94t1spCSlsQGruY.roa (hash: QVD+nt3vSI8wTFmIQdZHzTyisAO3IMVPHg1eYvC0yEo=)
4: m8Mbp3fOk0mfKmCfNvkt2fmUd30.roa (hash: 6PVM1OMBTNJ2+7s4aPik4DaNu6ngPai+hTo90igXodQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Apr 4 19:08:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A6B3361E1F5FA9B0266D7DF924422A40B47149A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:3a:68:7a:71:a9:0e:99:d5:4d:01:d6:5a:
1f:8c:a0:a8:28:df:03:51:4b:45:8e:5a:38:00:08:
03:c7:a6:b6:a7:86:94:91:59:23:85:b1:d4:3f:9b:
a4:f6:0f:d0:22:54:63:c7:80:21:e6:1f:54:57:14:
85:47:2e:4b:6d:17:8b:98:7b:60:66:ce:57:5b:2d:
f4:31:0a:d2:15:14:7f:06:c2:9e:8e:46:75:89:0f:
64:b0:fd:19:43:33:68:c0:33:95:05:89:fe:a4:7c:
5a:fe:fc:8e:75:77:8d:08:3f:9b:77:44:78:37:ac:
ca:7c:85:64:b8:fb:24:24:36:d5:c8:97:db:87:0d:
b0:fe:4c:ae:25:ec:c1:ec:ff:5b:7a:29:d1:5a:cd:
d5:56:47:55:02:d6:c6:13:96:90:03:ed:82:e5:b8:
0a:a6:ca:ba:0a:ea:15:38:8a:4b:c0:e1:61:ff:6a:
a7:bb:40:1d:5a:d9:af:b4:45:92:4f:fc:46:b2:4f:
13:cb:9b:a4:46:c2:b9:b7:cf:05:a2:73:d7:cc:c4:
f5:f2:43:ef:5b:b5:09:de:44:f7:6d:27:6c:0f:43:
f8:15:5a:72:30:b4:82:97:46:41:65:8d:a1:48:45:
b3:bf:aa:58:cc:59:61:c1:48:1c:e3:01:3e:78:96:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:55:62:38:5b:7a:9d:86:12:ce:66:a4:b4:60:75:cd:f4:
d3:a9:97:3d:40:31:c5:56:97:17:89:5a:b0:63:7e:8a:9b:de:
5d:c3:21:4a:08:b7:67:d6:48:98:49:c9:f4:3b:d5:59:d5:3d:
23:16:82:5b:6b:ea:92:50:7d:d2:5c:cf:08:d8:21:ba:b9:3a:
ba:92:87:c8:62:8c:80:0d:0a:7e:1a:91:a1:58:90:e2:e0:9e:
4a:f4:53:0f:27:eb:27:51:e7:a1:70:d8:fc:98:8b:09:56:e6:
9d:2e:96:de:5c:b3:d5:80:b3:63:22:98:3a:bf:f9:68:29:c8:
b2:98:ac:dc:d1:ca:24:25:8f:5b:62:83:55:e7:c5:ea:b1:20:
74:0f:4a:46:66:fc:cb:a6:cf:17:24:a0:b3:df:0f:93:15:3d:
65:84:6d:5f:41:da:8d:66:02:5f:6e:51:08:fb:8b:6e:09:83:
9d:59:72:dc:2b:56:98:9d:a5:f9:28:a5:51:35:c3:9c:7a:58:
78:8f:8d:5b:3c:43:c8:0f:c6:c3:77:7c:be:60:bf:83:23:ca:
4b:2e:03:c4:4f:61:a5:ad:cf:b0:15:db:28:0e:3c:55:8f:83:
9f:18:f4:f6:92:2f:90:74:a1:99:01:26:d1:a7:6e:8e:a3:01:
7e:27:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:10 2025 by rpki-client