Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
File: Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft (raw, json)
Hash identifier: 1q2NMsikUC2wtzFXp9Bg4Tq9/k98d3gcOoq8m7PvOpY=
Subject key identifier: 6F:FA:CD:7C:0D:1C:23:69:3C:22:25:6D:B8:AF:B2:DE:DC:36:EB:75
Authority key identifier: 46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
Certificate issuer: /CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Certificate serial: 1D7B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
Manifest number: 1D70
Signing time: Wed 09 Apr 2025 03:08:21 +0000
Manifest this update: Wed 09 Apr 2025 03:08:21 +0000
Manifest next update: Wed 09 Apr 2025 09:08:21 +0000
Files and hashes: 1: Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl (hash: PuRkFxP/NKTf0KWR4k1vAsnEHx/9VT4OHWZ2EOj1YaY=)
2: iek1MXEBlWdmapPhIY_db4hE_nw.roa (hash: T7/0qiWSi3qRHPuAOTmMfdsbThcG2N5WBZt8W2VUrcw=)
3: zfSe_iql4Q8Zvjm6B18MpmZPol4.roa (hash: bDo0RYNVzgOCrUT9k/28io0lTz3YF0dVaV4I+1scPtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7547 (0x1d7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Validity
Not Before: Apr 9 03:08:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6FFACD7C0D1C23693C22256DB8AFB2DEDC36EB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:c1:71:53:38:1a:90:ab:b1:98:a8:98:08:
db:a8:5e:4e:ce:f6:b4:9e:e7:e3:d4:c4:63:5a:51:
33:31:3b:9d:51:08:4f:7a:42:e1:b7:52:87:ed:b8:
dd:6a:72:9b:fd:7c:4b:ff:8c:36:2f:ed:c8:11:31:
d4:ec:18:05:eb:ed:03:6a:96:be:af:43:f4:b8:bf:
4e:d3:2b:1d:11:9b:66:2b:f0:2a:7a:7b:c9:a6:74:
d8:10:30:5a:6a:83:92:0f:9e:3b:1d:04:bf:5e:23:
51:71:2d:36:ec:a8:bf:07:bb:21:92:5e:33:e8:e6:
7e:60:e6:33:15:74:73:10:6c:98:f4:51:4f:81:74:
8d:f7:41:97:39:5c:89:fc:a8:b9:1c:41:f2:7b:99:
13:e9:b8:44:54:e9:e8:99:58:3d:8a:4f:c2:c4:e6:
0e:c9:b4:a6:17:6f:47:18:5f:ed:ba:ce:35:d4:f2:
90:18:b2:12:eb:b9:aa:57:3b:8f:48:14:c8:1e:c8:
b8:7f:0c:7f:17:bd:ec:58:4b:03:6b:52:18:04:52:
a1:cd:41:cb:4b:9b:3b:fa:26:3c:45:d1:45:40:83:
23:50:b7:01:fa:d5:86:79:c7:da:a7:12:a9:59:c8:
d2:09:fe:75:34:4f:41:5d:3e:31:0f:48:d6:39:75:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:CD:7C:0D:1C:23:69:3C:22:25:6D:B8:AF:B2:DE:DC:36:EB:75
X509v3 Authority Key Identifier:
keyid:46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:64:c7:67:dd:c2:bd:d1:fe:78:ae:c2:15:62:0d:33:a1:
e9:5f:30:c5:67:df:83:ee:2b:ed:16:28:a4:e8:85:3c:29:3c:
a3:d7:df:b3:6b:bc:ff:82:45:68:15:e1:9e:2e:40:47:94:a5:
85:fa:54:7a:a1:2f:42:6a:c0:f2:d5:60:6e:fa:c9:23:27:e9:
85:4a:a2:9b:e4:47:cc:6d:45:a9:64:16:17:ab:33:34:ff:c0:
d9:0c:3e:c6:ae:bc:05:d8:cd:64:30:03:65:3f:d7:08:43:52:
d9:ec:89:73:40:d2:de:2c:29:16:19:39:bb:f7:ea:32:ea:cc:
66:73:c7:f7:5b:67:dc:d2:5e:08:96:59:d1:30:ab:79:73:f0:
f7:14:1e:db:72:aa:e3:f3:25:03:0a:e2:6c:ad:ac:a8:ee:fc:
56:e1:71:30:99:a4:db:40:d3:9d:95:22:8e:32:24:6c:85:ac:
9e:ef:00:6e:8b:d2:6c:c5:98:7d:22:ae:f8:cb:ac:6b:89:1b:
f7:9a:bb:8d:85:30:a2:94:67:6b:04:b0:a7:ce:60:d5:a8:59:
1c:45:b0:55:3c:c5:63:87:48:54:b9:fd:32:64:ae:fc:6f:68:
77:c2:13:02:74:2f:6f:f9:8e:c3:08:dc:83:b7:57:df:7c:73:
70:3b:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:25:59 2025 by rpki-client