Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
File: kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft (raw, json)
Hash identifier: bEtvXNAkU53KOLxEcKPA3ORvWlvRg9kXdhisRIcu8i8=
Subject key identifier: 02:BE:71:AB:DC:17:50:55:EE:56:6B:24:25:4B:64:E8:B0:74:2F:4B
Authority key identifier: 90:77:E7:B0:AF:58:0F:78:FE:01:06:99:FA:0D:B8:10:7E:18:6F:07
Certificate issuer: /CN=9077E7B0AF580F78FE010699FA0DB8107E186F07
Certificate serial: 0872
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
Manifest number: 0870
Signing time: Wed 09 Apr 2025 01:06:10 +0000
Manifest this update: Wed 09 Apr 2025 01:06:10 +0000
Manifest next update: Wed 09 Apr 2025 07:06:10 +0000
Files and hashes: 1: kHfnsK9YD3j-AQaZ-g24EH4Ybwc.crl (hash: /rZtUQMn/0Ah+Uz3+nZ2jFS2JMlth4GbQPRq8b1fh1g=)
2: pAdMn1MlkjJlCVSP2QmkkAwaBc8.roa (hash: 1Ko/Sx6oQmP0Opi3hp+4gnvjm2R0mnMU8LAySvjv/+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9077E7B0AF580F78FE010699FA0DB8107E186F07
Validity
Not Before: Apr 9 01:06:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=02BE71ABDC175055EE566B24254B64E8B0742F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:bd:b4:6b:bd:11:af:30:2c:d0:71:fd:49:
1f:03:b2:6b:b5:d8:8d:53:07:dd:d3:83:d6:09:75:
9c:d1:03:b3:14:fb:e4:07:00:76:be:03:b6:13:6d:
82:32:7e:39:ab:c4:dd:18:d1:e4:a7:a1:72:07:12:
3f:1d:da:60:0c:05:cb:3e:a7:7c:2d:eb:a1:77:3a:
6e:95:7e:6a:0f:b3:d0:cf:d9:d5:72:88:87:7b:bf:
cd:45:d8:3d:b7:5a:51:9a:c5:82:33:0c:ca:f8:46:
0f:5c:ba:16:92:05:2f:cc:cd:bd:d7:dc:95:5b:40:
3e:56:bf:65:af:99:b1:23:83:5c:d3:23:46:4b:c0:
1f:db:a0:fa:f9:10:a3:35:29:c7:1b:49:c0:a0:88:
66:f7:f0:f2:b4:e4:12:d7:f2:45:10:5a:be:9a:8a:
bb:68:30:a3:62:6e:df:30:e5:58:0c:e4:03:22:bd:
b6:bb:b5:6c:27:fa:4c:62:02:b3:03:d9:f3:2c:4b:
93:97:3b:1c:3d:3a:d5:e6:ba:81:ad:c0:84:99:c2:
b0:a0:b6:b9:cf:04:5f:c9:57:91:d7:68:a4:65:fe:
3d:d2:e0:1e:5b:94:f5:63:c0:3c:ce:bb:da:8d:ae:
8e:76:32:4c:b2:dd:4e:6c:a0:9b:2d:4b:ad:3a:c1:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BE:71:AB:DC:17:50:55:EE:56:6B:24:25:4B:64:E8:B0:74:2F:4B
X509v3 Authority Key Identifier:
keyid:90:77:E7:B0:AF:58:0F:78:FE:01:06:99:FA:0D:B8:10:7E:18:6F:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/kHfnsK9YD3j-AQaZ-g24EH4Ybwc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:f6:1e:36:48:83:5a:61:98:34:15:ca:8a:c7:01:fd:6d:
a8:00:10:35:d2:de:98:95:ba:66:0f:fa:89:bb:ae:53:e6:b3:
16:6b:6e:c6:b3:0f:ca:83:f9:d8:ef:be:0d:65:d0:82:83:b3:
47:81:99:0a:ff:8b:9e:73:ce:8d:ca:5a:cc:0b:33:41:c0:09:
06:7b:41:77:a7:af:de:a6:e5:78:93:ab:23:42:7b:23:06:36:
68:d6:06:89:bf:01:16:46:86:9f:8a:88:cf:1c:bd:41:90:2c:
80:c0:17:5f:9b:ed:b2:ed:f7:7d:7f:0b:60:83:39:c3:fa:c8:
01:58:2b:47:61:7a:56:b0:9d:2c:33:11:31:20:aa:01:2b:b7:
aa:a0:64:5d:ee:21:a2:78:20:b0:e8:49:f2:8c:51:f8:ab:7f:
f6:bc:c7:70:14:4d:20:47:4d:e7:30:11:92:28:0e:19:4d:d4:
d8:e3:9c:35:4a:6c:c1:ae:7e:af:0f:44:77:cd:7f:65:b5:96:
0d:02:1d:23:b7:2c:d1:76:8a:3b:f8:bd:09:56:66:e6:84:16:
ca:69:a5:e2:ca:c1:ae:25:0e:96:f6:26:5e:f4:d9:d9:de:87:
63:19:3d:25:2b:2b:08:6f:b6:7b:fa:58:98:54:c9:9a:55:55:
f0:93:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:24:32 2025 by rpki-client