Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft
File: QIfatnFyg2sIIHXOGL5eX6RdXpU.mft (raw, json)
Hash identifier: mQXFgbtZeDQgm1zCHhupkM0Y2aYWaCYo41ABWaDArgM=
Subject key identifier: CE:09:CE:20:88:BA:CC:AC:EC:A6:04:09:C3:20:AB:A4:20:B6:A9:81
Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Certificate serial: 1DD0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft
Manifest number: 1DC6
Signing time: Sat 26 Apr 2025 11:07:59 +0000
Manifest this update: Sat 26 Apr 2025 11:07:59 +0000
Manifest next update: Sat 26 Apr 2025 17:07:59 +0000
Files and hashes: 1: QIfatnFyg2sIIHXOGL5eX6RdXpU.crl (hash: rm6tG9qTGN3BoeqXOIL8Rl8xgrLh+kC5SEQ/wXM91YY=)
2: Xo2xzHkIY-YGuMySicyhhRpo8IE.roa (hash: QgOMwwkT8JO8mXrvSbMFJwD24TDI++b2WLOiuCQt8Nw=)
3: xF_kY5igAZ4pYp7sRgDqMyeVigQ.roa (hash: JqA1NDUEHISd0ZMcDg+01lOgp+bGBK0kQMU/tV9LvqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7632 (0x1dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Validity
Not Before: Apr 26 11:07:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CE09CE2088BACCACECA60409C320ABA420B6A981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:d6:b0:ae:5c:af:ef:c8:10:46:06:59:c0:
2f:29:3e:47:cd:37:1f:fe:0e:4c:7f:2f:81:e0:cf:
a5:c9:8b:a0:8c:b6:3e:5b:03:c0:07:73:b9:28:ae:
fd:12:08:0f:cf:34:8d:3d:f4:44:74:2f:a7:0b:49:
06:54:e4:78:4e:9c:98:78:9a:1b:d6:e6:17:a8:91:
e1:17:75:da:a6:8a:17:64:10:b2:23:17:42:b4:b3:
26:d5:17:b4:7f:b8:d0:77:9f:71:0c:c2:ed:ff:0d:
7f:2f:06:de:4d:cf:77:ee:5a:9f:80:59:bf:27:94:
59:02:03:6a:35:d7:64:85:09:ba:4b:63:dd:bb:38:
80:bf:5f:66:a4:f0:6c:47:13:38:66:f5:37:27:9b:
a3:37:33:bd:fc:ce:c4:54:4a:ed:cd:41:ee:f2:3f:
6d:91:b3:40:01:2b:dd:d1:8b:10:36:7d:4c:d7:35:
13:80:b6:f3:b2:8f:15:39:db:eb:d0:b4:2e:18:41:
56:5a:50:0f:4b:75:c8:b8:08:6c:4b:97:63:fd:9a:
95:19:38:31:b9:fd:83:9a:6a:84:8e:bb:84:9d:b4:
2c:4f:d4:0a:e4:a2:ad:ea:61:94:83:85:67:13:85:
6e:e2:d9:03:0e:57:d7:56:97:20:ff:2e:03:38:4b:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:CE:20:88:BA:CC:AC:EC:A6:04:09:C3:20:AB:A4:20:B6:A9:81
X509v3 Authority Key Identifier:
keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:88:c8:32:b5:97:c7:70:cb:58:56:f1:58:61:e1:58:2f:52:
31:83:4a:3c:64:57:e0:a7:5b:c8:8c:7a:85:3d:52:c0:2c:4d:
de:f6:7e:09:ca:8e:04:5a:bc:24:1a:e2:95:e2:a8:40:31:29:
80:05:8c:0b:7d:f0:e7:9c:f0:d5:cc:e9:30:c9:78:34:9e:03:
3a:42:2c:2f:65:01:ea:ea:a3:4d:f4:18:48:ef:68:db:65:31:
5b:af:af:a0:6a:f2:e9:1e:15:0a:cd:85:22:29:18:1c:15:d5:
19:7f:65:74:c4:6f:5e:d4:56:73:60:b0:be:6e:33:70:a2:b7:
07:f5:7d:ed:c9:bf:29:9f:1a:06:2b:57:98:58:5b:5d:42:a1:
f3:b6:a5:81:74:ec:dc:53:60:9a:b8:c8:aa:95:30:20:41:01:
ad:61:b0:df:24:a0:21:0e:19:37:65:6e:c7:02:a2:5b:0e:12:
75:f2:cc:e9:81:59:c3:7f:90:9e:39:02:12:0e:f1:73:b7:6f:
0f:95:43:b6:16:00:88:d4:22:9d:e3:4f:ef:1e:d8:27:38:2c:
4e:ff:71:e1:0c:b6:55:f8:d3:38:5e:29:30:dd:a3:eb:fe:50:
a9:77:84:aa:15:b8:7a:4c:a1:ff:9e:bf:c4:8e:57:a8:cd:4e:
08:6d:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:04 2025 by rpki-client