Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft
File: wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft (raw, json)
Hash identifier: 5/956BfRddJPqB9lC/U1nNVTfJfLS6o62XDW0goehcI=
Subject key identifier: 80:C5:F0:5A:0C:56:AA:43:B1:1A:07:DE:30:80:98:F4:12:4A:37:66
Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Certificate serial: 1251
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft
Manifest number: 123F
Signing time: Sat 26 Apr 2025 11:08:20 +0000
Manifest this update: Sat 26 Apr 2025 11:08:20 +0000
Manifest next update: Sat 26 Apr 2025 17:08:20 +0000
Files and hashes: 1: SYjAfi0lWO4VUcWEZyu6ay2aivE.roa (hash: WpsblR9kVPNn114J/aQtNqA0/vOqQOXaPI95AzMP4h8=)
2: WwhYoGpzHS3AWtY2_rLx2jCdH28.roa (hash: HUKIxbLW9sU8i1IJCRzoVFe5zFBzm2zcEHJ2jgjqtD0=)
3: nSRgEczP2Vah6cKvfQ3tFq7a3no.roa (hash: b4moQm23csiDLb5kUqMGU2XFsorLRE9/0BS2ulVpWw8=)
4: wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa (hash: 3UUSZj4EE6g7iwWFskgE2wH0pWTu3Li4PZOPkm9Vn2o=)
5: wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl (hash: cZwmLG5rZ3JIEoH4RwIVYB5o+UU99QfuvH371roFy3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4689 (0x1251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Validity
Not Before: Apr 26 11:08:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=80C5F05A0C56AA43B11A07DE308098F4124A3766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:b3:69:e8:5c:3b:bd:c0:09:4d:7d:25:e4:
60:b3:e0:62:80:d7:72:07:b7:6f:79:9f:5f:17:6e:
d7:97:fd:64:a0:ef:60:0a:25:11:5b:9d:62:98:01:
e7:22:c2:3d:9f:31:63:f3:52:ae:3b:77:ae:96:2f:
e7:3e:80:f6:d8:60:1a:6d:4a:60:db:25:c4:dd:05:
ec:33:3c:58:b2:36:bc:9a:b9:1c:c1:e4:d2:f6:e6:
97:c3:79:a3:f6:84:dc:0c:fa:01:72:e3:a3:71:d4:
5b:c0:31:70:19:bc:ac:ba:28:6e:0a:d3:76:39:5f:
4f:50:bb:33:a7:55:b9:55:2b:05:68:ee:87:db:09:
9e:06:09:5e:ff:cc:c8:ca:7d:a6:11:64:c1:b7:a2:
4e:2c:23:dc:da:d7:49:a2:2a:d5:75:64:2d:2f:87:
7f:2e:a5:29:aa:43:da:bb:76:39:da:b9:40:6e:86:
fe:78:e2:63:7e:47:34:98:68:39:15:ee:89:97:a5:
0b:14:b4:c1:bd:c4:a6:5c:04:47:8e:71:15:bf:46:
6b:77:ae:a4:62:e2:e8:7d:24:67:34:c5:1c:99:22:
a5:5f:32:8c:23:29:1b:f8:17:37:9d:a4:c0:75:b5:
c4:99:30:b9:a4:c0:9a:60:2f:eb:5d:33:98:10:c9:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:F0:5A:0C:56:AA:43:B1:1A:07:DE:30:80:98:F4:12:4A:37:66
X509v3 Authority Key Identifier:
keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:93:51:9e:56:f2:91:47:76:4a:0c:0a:07:89:94:f2:d2:86:
52:32:bf:2e:f6:61:3d:6d:24:36:46:94:ba:dc:00:d0:da:f4:
db:54:2b:bc:18:8b:2d:ca:48:d4:71:87:5f:96:12:21:cb:be:
9f:65:1b:94:99:2c:14:31:0f:5c:a3:87:00:67:86:96:2c:61:
14:b4:6f:ab:e4:01:d0:8a:68:41:e4:05:59:90:03:28:a6:57:
27:77:01:b1:12:9c:6b:01:b7:17:1c:65:51:6b:7d:2c:88:66:
bf:4f:a1:bf:6c:9c:1b:4e:49:00:03:36:e8:0c:66:d3:32:af:
60:42:12:26:c1:bf:d3:94:7e:c3:f2:8d:68:07:94:57:3e:ac:
84:75:bb:88:22:dd:c0:f2:e2:e6:f4:67:d8:62:c3:84:34:68:
ba:87:e2:bc:eb:3c:cc:b4:73:0b:e5:17:62:d8:a1:12:f6:7f:
82:a8:c8:8f:3e:d2:bf:a1:b9:d0:9d:e9:34:2b:7e:5a:ae:0e:
9d:81:03:e0:9f:7d:58:bc:91:4d:0b:6c:96:ca:e7:41:30:9e:
ee:00:85:35:ac:57:31:c4:8b:62:87:79:87:9c:57:94:d3:a6:
ec:19:f3:c4:3d:77:3e:5a:97:af:8e:04:1c:cd:75:ea:53:7f:
51:f0:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:22 2025 by rpki-client