Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft
File: BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft (raw, json)
Hash identifier: GzwB/5JcJ66pxznA4oHr2uDwNAEcKCVNl7Nbr0TL30E=
Subject key identifier: 5D:42:79:BC:0A:39:3D:12:95:72:C4:60:EA:C3:EC:24:D5:7E:40:C8
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 14C7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft
Manifest number: 1473
Signing time: Wed 09 Apr 2025 03:05:40 +0000
Manifest this update: Wed 09 Apr 2025 03:05:40 +0000
Manifest next update: Wed 09 Apr 2025 09:05:40 +0000
Files and hashes: 1: 1bhwsUtbiQdLDBfnox3-3zkbwWo.roa (hash: gqIHRU1MS3errlkahAkxfB2oyymacUQJ8xVRYk2LhZE=)
2: A5JTKb0vZnDvo8UpkVya-cognAk.roa (hash: CatxJSbWJ7+LP6IwzCOTxH/un/wX5sS84QqKLcPwfp0=)
3: BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl (hash: Thd32Kwd6EMY8FwX6lyeUx94MWvTDnlDbWD3D8I6VAs=)
4: BxI2yCMaK3NjzZYHxh0NUTMSJZw.roa (hash: VRCnmMi4IRTS0vcXxMn2bzi8EHUF39M3GwWSAH96gC8=)
5: Mn3aulxcz9cRwvVy-OdzDLLEjN8.roa (hash: RyZ7UDCzQP8lEOcOe2YqzsH2R43s9P1o0X7uFc309d0=)
6: P7yG7EH_lru5WZOmH05-MybVOeI.roa (hash: Ex1GOcmqwC8VhMygwQSDIdTq8VDfD/xVpG/AMDcqfxM=)
7: iC0FcQxssnSZ09gKew8DzrA3Evk.roa (hash: 4OXiUYOXWQeabT7QovNoO6YeSOSP7kzo0U8JTKNO9Lw=)
8: pAdIfVD4TegvN15N0-A-Mxh9usg.roa (hash: C45rYV9sN1M1gbfL4obwJbBATaptOZqCUW2XXRNtiEI=)
9: sNqux4mN7rIskkyyueIIJWD8CCo.roa (hash: X34hX4uRqiuSQ58UT5nRUZsFh25H9gSvUfa0fvcp1ZA=)
10: ttEgkm_ITLlVN8H4AjZQBFs40Fk.roa (hash: r0aNuhJ74ZVzwaQQ3EFPIXADTU60WmW/tYCNTKuFZTg=)
11: wG1FxjoQkcIuBHHXQd1OQosYA2A.roa (hash: 4ppmtoXMaFGLkwzf9Nk7vf0gkZZCJMB34fdwJ2h927Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5319 (0x14c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Apr 9 03:05:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5D4279BC0A393D129572C460EAC3EC24D57E40C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:e2:68:2e:18:73:b7:fd:9d:69:1a:31:3c:
64:95:18:19:fd:85:66:89:7b:01:1e:a3:5a:c3:37:
94:9c:4e:d5:b5:89:c6:74:15:85:e3:2d:55:dd:88:
74:18:0c:8e:63:76:d9:97:01:d8:7b:42:2c:bb:4d:
96:0e:ec:08:c5:c7:7f:63:34:d5:92:ab:d7:97:04:
81:29:78:2a:06:85:46:5d:b9:56:be:b3:f7:a1:a5:
a9:79:31:94:95:00:8d:77:06:a7:12:08:8e:49:df:
da:fc:4f:eb:1d:d1:38:9f:e0:2d:e3:aa:9b:f7:4b:
b9:0e:e3:4b:80:09:ab:af:ee:d3:56:86:30:3a:9f:
b1:fc:7e:32:78:c8:7f:f3:a5:1f:eb:2c:54:0d:17:
41:db:24:50:a5:e6:19:af:de:4b:6b:b8:c2:80:74:
f8:41:78:84:64:81:68:3e:36:16:3e:00:eb:8c:8c:
29:21:3b:83:a1:74:8e:97:57:5e:7a:27:81:20:e1:
e6:3a:35:45:6c:34:58:60:a5:c0:2a:37:5a:f7:36:
5a:44:01:3e:d5:f1:1a:33:30:dc:e9:68:62:a7:59:
17:e0:af:a6:cb:00:8e:ce:31:5c:47:7c:e5:97:fa:
12:57:f8:8e:1c:32:ab:79:bb:32:7b:eb:02:a5:b9:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:42:79:BC:0A:39:3D:12:95:72:C4:60:EA:C3:EC:24:D5:7E:40:C8
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:fd:58:21:c9:15:b7:d2:ab:15:c5:4e:7d:f5:76:77:d0:44:
fb:e3:9a:e1:8e:35:bc:6b:33:62:0b:bd:ac:5a:03:61:69:d2:
d4:71:e2:99:42:30:28:12:86:bc:e7:dc:d2:e8:75:0c:29:4e:
d8:84:43:7a:01:09:08:13:24:a6:9f:17:76:7f:b3:2d:b1:95:
99:25:a3:1b:46:97:f2:7b:dd:f1:e8:1c:2d:4e:7f:19:83:d7:
e9:6e:b9:49:02:44:a7:7a:2a:73:db:a9:5d:c3:68:1d:fc:a4:
47:67:5e:e5:d8:d9:bb:14:16:df:7a:e0:fc:6c:61:cf:25:77:
cd:ad:52:61:2a:42:cc:2b:8e:2d:93:16:c4:f0:61:67:44:5b:
7c:23:71:fb:9e:84:67:43:8d:a9:ed:ae:07:c8:5e:00:d9:ec:
c8:18:ba:08:53:42:27:1c:54:84:83:ad:12:c5:be:27:71:6a:
41:f6:6d:a9:aa:67:36:72:21:ea:0c:d5:0e:75:e5:d9:c2:6e:
7a:b3:f8:9a:eb:41:a0:90:74:2a:34:dd:f6:0f:2a:ca:0b:ae:
e2:bb:9e:53:58:40:84:b1:b6:0a:de:1a:d6:e7:15:99:41:a3:
43:5b:eb:e1:19:04:19:02:cd:28:82:87:ba:19:77:84:16:e4:
9e:57:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:01 2025 by rpki-client