Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
File: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft (raw, json)
Hash identifier: KsXHFX22gdh1cnmzhKOwvG7asKW9AA7kHwyuwR11oWs=
Subject key identifier: B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
Authority key identifier: 13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
Certificate issuer: /CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Certificate serial: 0B7B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
Manifest number: 0B78
Signing time: Sat 26 Apr 2025 11:07:46 +0000
Manifest this update: Sat 26 Apr 2025 11:07:46 +0000
Manifest next update: Sat 26 Apr 2025 17:07:46 +0000
Files and hashes: 1: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl (hash: y4crg/XcF0pHdm5CHO8gEqWWd+G3ARaSlK/tGD5hZHU=)
2: dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa (hash: acKWSIHX1ZbTm99RSURHM2kfCk/nXcKQCe+6vMB1VMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2939 (0xb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Validity
Not Before: Apr 26 11:07:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B9438C5506FCB9C47B7F7F60BA4C123BFB484F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:84:3c:bc:71:4c:46:3d:ab:2e:d8:52:f4:
b7:ec:1a:b2:26:2c:91:04:ab:9d:e5:db:17:1c:5a:
30:36:89:dd:3e:9a:0f:9a:16:e5:8b:34:05:67:0f:
da:fe:e5:81:1b:06:9d:46:f5:de:30:76:34:a6:34:
ce:34:e5:88:0b:72:dd:0c:e7:11:59:cb:06:28:04:
be:61:e0:cf:8a:93:47:cc:16:df:d1:94:62:f7:60:
26:f4:c5:25:97:28:90:96:0e:51:0b:f4:56:0b:87:
b5:28:e8:ff:45:69:e9:35:08:5c:a5:91:c5:6b:a5:
c2:07:fe:f2:c3:6f:cb:44:ec:25:1f:36:e2:4e:de:
60:ab:54:cd:87:10:48:68:cb:88:62:d0:f5:4f:4f:
ac:92:4b:7a:a6:a4:4e:ee:68:0e:67:4f:f1:2a:36:
0e:f1:43:e0:3a:da:78:ee:ca:89:a0:dc:88:54:c6:
04:f5:1e:a2:58:04:04:85:8b:8a:b0:9e:21:b8:61:
66:42:61:84:53:f6:ef:4f:45:9c:f8:a5:83:ad:9b:
9a:1c:a4:0b:1d:63:b8:9e:67:c0:4f:8a:e0:d2:02:
88:84:91:d9:06:b0:1c:b3:1e:ed:54:d8:34:e5:34:
50:4e:c8:2e:4f:7c:1c:74:a0:e4:65:a5:f7:a5:8e:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87
X509v3 Authority Key Identifier:
keyid:13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:5b:08:03:6c:c3:9c:b0:c4:73:e2:c0:37:39:86:a7:20:4e:
05:eb:33:b0:dd:c6:23:67:75:29:67:eb:5f:c8:15:0e:20:c7:
9c:f8:06:73:55:a1:34:f5:00:bc:a4:e9:20:66:b8:33:bf:bb:
b3:20:b7:fb:b5:7f:20:30:32:69:14:f7:92:73:69:d0:a4:59:
bf:35:d6:c8:a3:79:3d:ae:f6:20:2d:b2:e0:62:54:ae:86:50:
ff:7b:60:27:6f:0f:7f:5f:7d:4f:27:f7:50:eb:61:47:d0:31:
ef:02:48:2d:00:84:7e:84:ae:33:e6:2a:c1:f1:dc:6e:69:63:
7e:5d:5b:85:13:96:02:50:c1:ff:07:b7:2e:de:07:2b:4f:df:
90:a8:b7:e2:61:b4:ad:2a:b3:a6:f5:db:8c:f8:b7:0a:c9:1e:
2a:3f:50:2f:89:b9:bf:94:b6:4d:b5:0b:ff:9a:7c:03:ea:ae:
3c:45:95:cd:11:a5:d9:89:ba:fd:ed:d2:50:c4:86:1b:92:f8:
a5:f6:a8:c4:4d:be:59:92:08:27:30:6e:31:07:c2:a4:01:f3:
9a:47:90:f4:e9:5e:d1:2b:41:e4:13:f4:64:6f:b5:bc:e9:35:
35:c4:1c:6f:40:1c:d2:ee:e2:7e:51:d6:69:8e:95:a3:05:cb:
97:b7:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:57 2025 by rpki-client