Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
File: QANTiAtHjVuXKhIEzwZR3ilfjso.mft (raw, json)
Hash identifier: tfCxbNwTVy7x7Gy7aDCT6PveKTfsDSX76aoDSmM4EOM=
Subject key identifier: 3E:02:B0:EC:72:B4:53:6E:FB:18:99:9F:8A:FE:BD:6B:63:5D:F8:01
Authority key identifier: 40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
Certificate issuer: /CN=400353880B478D5B972A1204CF0651DE295F8ECA
Certificate serial: 133B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
Manifest number: 1336
Signing time: Mon 17 Feb 2025 18:55:46 +0000
Manifest this update: Mon 17 Feb 2025 18:55:46 +0000
Manifest next update: Tue 18 Feb 2025 00:55:46 +0000
Files and hashes: 1: QANTiAtHjVuXKhIEzwZR3ilfjso.crl (hash: BKcpsdYg7zlDo9+dvHGV3/KWP/MYAQNbMrWCB1XGLKc=)
2: YChybX2-uPVVnqdSYmR5njJNPi8.roa (hash: Eoa/Wqb1zFLj0i5Y48PjM9Jp4VzTiVGXZggsf4eLD9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4923 (0x133b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400353880B478D5B972A1204CF0651DE295F8ECA
Validity
Not Before: Feb 17 18:55:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3E02B0EC72B4536EFB18999F8AFEBD6B635DF801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:58:a9:d9:69:b3:4b:f1:61:4b:87:6a:75:
b6:dc:4a:1c:b4:5f:ba:82:db:a0:72:66:f1:81:08:
59:bd:57:ef:79:43:59:e7:38:14:5a:62:1f:35:98:
41:d2:5f:f0:df:8d:c1:62:65:50:ca:e2:5c:08:a0:
d0:6d:af:98:80:82:a4:85:45:bf:5e:83:60:f2:53:
99:f3:2d:fe:d7:95:35:30:00:87:20:de:a5:5b:69:
1b:0a:1c:b3:83:65:27:64:be:d9:fa:d4:cf:99:f4:
d7:e5:de:c4:9d:7f:a1:a4:37:55:3a:fd:04:50:66:
34:88:f5:cc:62:55:6b:03:3b:7b:eb:ae:8e:0c:8f:
b5:3b:c8:7f:cc:ab:c1:4a:b6:6f:10:e5:80:06:dd:
6b:19:c4:d5:49:fe:f5:33:13:ad:62:ec:cf:17:5f:
1c:1b:8b:b4:7a:89:1b:87:32:d1:c7:ee:ea:c5:9d:
2c:19:b7:11:ca:ca:d4:6d:17:bf:f6:4a:2c:0f:8e:
5f:5a:63:d4:33:f4:86:05:10:71:4b:25:a4:fa:95:
f1:4d:2a:24:7b:a9:55:95:ee:4e:94:86:70:36:a4:
80:c0:b0:62:2e:39:5b:48:f4:14:d7:a4:b6:9c:0f:
6d:91:f2:30:19:7e:6d:86:c6:12:7b:5a:a2:a1:e5:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:B0:EC:72:B4:53:6E:FB:18:99:9F:8A:FE:BD:6B:63:5D:F8:01
X509v3 Authority Key Identifier:
keyid:40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:b8:3a:8c:6b:22:0b:f6:9d:bf:f3:18:2c:3c:e2:d3:d6:
cd:21:dc:c3:1e:55:75:a9:fc:93:4e:7f:92:00:ee:15:49:a8:
d6:80:28:14:a3:8d:f3:7f:1c:ae:73:23:94:a8:da:9d:19:74:
16:83:cd:ad:39:69:92:fc:0c:fb:fe:c4:6c:67:b5:2f:f2:01:
b1:d0:96:58:ff:3a:8e:de:5e:dc:31:5c:81:db:00:e5:32:ee:
be:bb:d1:17:ee:44:ba:41:b3:2f:99:e3:2d:8d:87:c3:f0:5b:
43:cc:40:f9:09:85:91:9e:ce:41:af:a4:7a:96:0d:ba:51:5e:
cc:40:81:65:86:ea:a7:83:d8:ea:95:b4:de:5d:34:f8:c7:b3:
aa:00:8f:95:03:6f:e9:07:23:69:24:13:d7:4b:07:49:b8:9f:
e7:c4:69:f5:cb:25:50:75:57:0e:e7:3e:62:d9:f7:42:60:1d:
88:d1:bb:f1:70:bd:0c:4e:d1:ef:36:29:4f:0a:90:c2:75:59:
0c:b8:9c:7d:e2:96:bd:fb:dd:da:0f:95:6e:08:8c:fa:20:51:
8f:6c:be:2e:c5:81:03:d1:f7:17:54:a3:53:46:da:95:f8:ca:
20:b9:16:ed:af:04:85:b4:5e:5c:41:aa:c6:77:c8:31:85:a6:
e1:c4:65:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:04 2025 by rpki-client