Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
File: wd4p357Li9rL--H924bfKWtpCOs.mft (raw, json)
Hash identifier: sB4gn0MHIOXO7x84Vgo9DHHIZbNVwSj3QE/MyGGIDwU=
Subject key identifier: D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Certificate serial: 3084
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
Manifest number: 3075
Signing time: Sat 26 Apr 2025 11:07:18 +0000
Manifest this update: Sat 26 Apr 2025 11:07:18 +0000
Manifest next update: Sat 26 Apr 2025 17:07:18 +0000
Files and hashes: 1: 5ZhYonZWF6UpfWYWQVUXPqifwQI.roa (hash: bmZ6Rph2bMW9NufuEE/7yqvrLx3PWEO6FMdcW1JmeyE=)
2: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (hash: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M=)
3: wd4p357Li9rL--H924bfKWtpCOs.crl (hash: c3tSGOqZyt6c/YKwJ3D1kRCgZdDTaLm1njbUJ4hq6og=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12420 (0x3084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Validity
Not Before: Apr 26 11:07:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D50904F288CA106FC94061AABDF81FBD35239B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:ec:55:7c:6b:01:58:d8:57:d8:e3:34:70:
09:65:59:ad:b7:bd:fd:33:c7:21:f7:53:05:f8:4e:
52:4a:85:1a:f7:7c:06:db:55:c2:b2:d7:09:55:d5:
39:a2:2c:2b:2a:70:29:13:35:99:ca:d8:bf:59:d5:
ba:e4:24:48:6f:73:98:44:3d:ac:6d:3d:47:75:d1:
11:fe:8c:e6:01:4e:52:b5:8c:fc:79:d7:c5:75:ea:
a8:23:6d:91:87:e8:5a:aa:95:9f:13:91:de:25:77:
45:9d:9f:19:20:36:3a:5e:7a:0a:03:f0:94:29:e2:
0c:19:09:23:ce:6a:08:74:e5:b9:67:ab:9b:67:31:
f1:24:9a:5f:12:81:5e:0c:a0:6d:c6:14:4e:b0:e5:
ff:a4:f9:9d:27:47:16:d5:ea:ae:27:e8:1b:e7:71:
74:d6:9f:99:11:62:d8:7a:ba:3b:5a:2b:73:37:33:
02:6c:58:11:7d:95:13:20:95:ec:0a:68:b1:fb:4a:
9f:ce:25:9d:6c:f2:00:c5:e9:d7:9b:a2:62:84:ee:
47:26:88:dc:5d:1e:e6:27:7c:91:0b:08:59:7b:0a:
32:f3:c9:59:12:57:8c:b4:c9:e9:82:a5:6e:b4:96:
5c:ad:99:7e:74:e5:91:9d:f5:cd:37:28:11:7d:41:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
X509v3 Authority Key Identifier:
keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:65:f1:f8:c6:af:73:b3:fd:3b:12:77:ac:5b:ab:78:4e:bf:
9a:e1:f0:73:cb:d9:af:af:e7:10:7a:67:6b:7a:05:26:89:ca:
bb:4b:ec:3f:66:8b:56:59:10:5f:5b:9a:22:95:d9:32:6b:42:
5f:92:7b:98:9e:9b:53:4a:d4:fd:33:9a:41:1f:f6:74:2a:d0:
86:d3:2e:7e:d8:a9:c7:39:11:38:a3:3c:33:9a:5a:0f:a1:8d:
22:a8:89:b0:1b:50:77:8c:ff:12:4e:c0:1a:d3:2b:d4:81:17:
24:e4:74:e2:0e:df:60:d7:d2:2f:4e:c8:29:a0:c7:d8:e2:5f:
af:de:51:5c:7e:8d:5b:4c:9e:59:ba:ec:38:cf:84:2a:98:d7:
ae:c6:ed:66:3f:ea:f3:1f:de:4c:1a:8c:c7:00:9c:e9:5a:54:
d2:4d:06:95:0b:92:61:75:cd:a1:61:f7:1c:ad:7d:d2:fa:68:
41:93:7f:d8:ea:aa:68:cc:56:9c:d0:92:a7:ad:2e:f1:49:76:
ba:97:38:89:b6:9c:00:2c:79:6a:91:14:35:21:ab:a4:76:b4:
fe:6f:ed:60:fb:71:89:00:c1:f9:bf:8f:d2:2c:fd:6c:ac:bb:
43:65:6c:0b:6b:79:be:c1:57:2c:52:d8:b0:d4:b7:60:b2:1e:
3b:57:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:30:49 2025 by rpki-client