Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft (raw, json)
Hash identifier: PzaFVP1qCQ1Ui4Ocij+fIKR2alJKEtThwsrGiAd2td8=
Subject key identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 4EB8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
Manifest number: 4EA7
Signing time: Wed 09 Apr 2025 06:06:47 +0000
Manifest this update: Wed 09 Apr 2025 06:06:47 +0000
Manifest next update: Wed 09 Apr 2025 12:06:47 +0000
Files and hashes: 1: 5xiBP9oAgtPkPbuqp_jQN04CKOk.roa (hash: tceHGoGymQUtpl0azpN7OzZGjav6xnOi9XVl7tk4RAQ=)
2: 62dLcW3plavrpsIbNHqw720lfPk.roa (hash: gCTxCmZ8gdoRjQKUaCHDH/9k8CDn24niIaIerASZoKo=)
3: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl (hash: gGIpmzE3uC/CMhSsNbN4+E0ukWIV7IKxjP7/rKE+/58=)
4: a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa (hash: O0NyOV0UC0NpDn6gKD43mD7tWOO7tpD0289aGPnpmeU=)
5: qhqQ6XGpQKke9iH_XzcMeWU6yJs.roa (hash: SYubhtFtKwSFcNFEuS+OIUJ6kBhpjBEexfpRrZUfZr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20152 (0x4eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Apr 9 06:06:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=339CE041528F9C61F954C6F0EBB8166EFB62E93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:45:9a:5e:6f:d5:e6:df:34:4a:eb:9c:c4:
81:f4:30:d4:e4:49:ab:f8:bc:e5:31:7c:db:aa:97:
31:91:30:9f:12:80:99:cb:5a:5f:c4:27:6b:ff:98:
04:b1:a1:72:03:32:10:d4:8a:4f:15:6c:f9:a6:dc:
e9:7a:3c:4b:e9:3f:4a:06:90:33:ef:9a:76:36:87:
12:62:7d:94:07:fa:4e:d0:ee:c4:f5:00:b7:90:55:
aa:a5:79:23:32:36:02:0b:f3:98:c3:7c:fc:2e:90:
d3:c6:f4:e8:93:b7:f3:54:84:b1:ea:58:82:f0:9d:
6b:10:91:18:df:67:81:8b:c7:2c:6f:51:8d:b8:35:
cd:29:e7:09:5e:91:3b:4c:33:9a:3b:96:08:6d:96:
a1:0d:00:d2:27:04:6c:d1:1f:40:8a:7c:4f:c0:a8:
92:65:1c:41:32:41:37:bc:67:f4:6c:10:94:51:b1:
07:be:ec:21:57:6a:0e:4d:ac:26:1f:aa:c5:19:11:
f3:1a:8b:28:f7:a0:67:25:b5:b5:62:fa:14:9f:5c:
fe:ab:b5:25:c0:eb:c0:f4:c2:57:0f:14:82:e9:7f:
2b:b8:97:cd:4e:3e:53:b5:d8:2c:a2:6d:73:69:3f:
5f:56:4a:94:3b:d3:ff:b7:ff:9f:8f:d8:94:9b:d1:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0a:56:11:88:53:eb:e5:81:b9:98:6c:44:fc:ce:f4:69:fa:
ce:39:1b:f0:b1:d3:dc:35:44:77:86:68:ad:ba:96:19:6d:f5:
a3:0c:bb:d3:3a:9f:54:d9:65:12:70:18:bf:10:5d:1a:f6:d2:
d5:f5:4b:fd:5c:d3:cb:79:cd:33:6d:fe:3c:83:f4:a2:e7:b9:
cb:9e:6a:fa:97:26:b9:73:48:29:89:e2:dd:ed:f7:2f:60:96:
c4:6a:5c:47:a3:21:77:ba:6f:40:ba:fb:7f:b8:c3:9f:fc:0d:
a6:ca:f9:a4:84:f8:ef:a2:fb:b4:04:ed:7b:a3:13:79:7c:77:
d9:8e:25:96:66:e6:28:7a:9e:6f:74:13:54:3c:bd:dc:c9:94:
b3:a1:cc:b1:d5:09:68:44:0c:81:7d:83:b9:35:31:d4:d5:97:
b2:1e:b2:40:17:88:1c:97:fe:3f:17:7b:4e:03:4e:53:ce:06:
12:0b:33:3d:fd:a6:58:47:db:df:91:3c:c5:c5:5a:88:10:ed:
1f:9f:76:d2:34:c1:d9:8e:3c:61:01:f2:a3:30:22:31:34:26:
8d:a1:38:29:d7:43:11:8b:5b:97:b2:0e:8c:8c:0d:ac:83:db:
52:e9:9a:ed:45:94:0b:42:d5:f2:c3:04:76:06:dc:35:38:26:
37:30:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:04 2025 by rpki-client