Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
File: DuhjrFcK7qH5ML6l52qufdVTgE4.mft (raw, json)
Hash identifier: 9VajxYcuSNHxARU7vpxmG8wAF0a3hcPDKJsb+Yr6BXc=
Subject key identifier: 0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 0B26
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
Manifest number: 0AD9
Signing time: Wed 09 Apr 2025 06:07:45 +0000
Manifest this update: Wed 09 Apr 2025 06:07:45 +0000
Manifest next update: Wed 09 Apr 2025 12:07:45 +0000
Files and hashes: 1: DuhjrFcK7qH5ML6l52qufdVTgE4.crl (hash: H+UpUOaVUvnwp0J1l7KqZj8Y8cdYa8K1EJtySpq3CAA=)
2: _V_7ixByiVG1pjZi1mDw4b4VxpI.roa (hash: XyMDQBmqSSFJJTqxQXZg0E/WbwlH0Rpqj7jDNMHguZw=)
3: cJAPNRcPlRfx94t1spCSlsQGruY.roa (hash: QVD+nt3vSI8wTFmIQdZHzTyisAO3IMVPHg1eYvC0yEo=)
4: m8Mbp3fOk0mfKmCfNvkt2fmUd30.roa (hash: 6PVM1OMBTNJ2+7s4aPik4DaNu6ngPai+hTo90igXodQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Apr 9 06:07:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A6B3361E1F5FA9B0266D7DF924422A40B47149A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:3a:68:7a:71:a9:0e:99:d5:4d:01:d6:5a:
1f:8c:a0:a8:28:df:03:51:4b:45:8e:5a:38:00:08:
03:c7:a6:b6:a7:86:94:91:59:23:85:b1:d4:3f:9b:
a4:f6:0f:d0:22:54:63:c7:80:21:e6:1f:54:57:14:
85:47:2e:4b:6d:17:8b:98:7b:60:66:ce:57:5b:2d:
f4:31:0a:d2:15:14:7f:06:c2:9e:8e:46:75:89:0f:
64:b0:fd:19:43:33:68:c0:33:95:05:89:fe:a4:7c:
5a:fe:fc:8e:75:77:8d:08:3f:9b:77:44:78:37:ac:
ca:7c:85:64:b8:fb:24:24:36:d5:c8:97:db:87:0d:
b0:fe:4c:ae:25:ec:c1:ec:ff:5b:7a:29:d1:5a:cd:
d5:56:47:55:02:d6:c6:13:96:90:03:ed:82:e5:b8:
0a:a6:ca:ba:0a:ea:15:38:8a:4b:c0:e1:61:ff:6a:
a7:bb:40:1d:5a:d9:af:b4:45:92:4f:fc:46:b2:4f:
13:cb:9b:a4:46:c2:b9:b7:cf:05:a2:73:d7:cc:c4:
f5:f2:43:ef:5b:b5:09:de:44:f7:6d:27:6c:0f:43:
f8:15:5a:72:30:b4:82:97:46:41:65:8d:a1:48:45:
b3:bf:aa:58:cc:59:61:c1:48:1c:e3:01:3e:78:96:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e7:02:59:5d:84:ae:87:3e:5a:90:77:ce:c6:24:7d:33:9c:
a1:12:b4:0b:b9:0d:11:cb:58:23:6d:20:bb:d5:3f:4d:48:57:
f6:7f:0d:a0:cd:84:5f:51:93:47:44:49:82:cc:4c:00:ff:78:
bd:64:fd:7f:b4:6d:36:08:e1:e8:70:bc:8b:8b:70:00:1b:83:
4d:42:2c:dc:36:38:9c:0d:6d:35:24:c4:d0:04:15:43:3e:9e:
c9:5b:bf:69:52:4b:fa:e1:fa:6a:20:9d:e1:5f:14:5a:e3:ad:
ea:8f:1c:f7:0f:b4:2f:da:2c:7a:24:e7:a5:9b:d5:dc:bb:39:
15:f0:90:1a:c9:c6:6d:10:59:12:6e:fb:2b:f8:4c:e1:9d:f9:
f0:5b:56:12:1e:8a:bf:09:50:61:90:5d:7b:63:b7:ce:39:ce:
f1:c0:1f:06:83:77:be:04:26:df:78:6a:6f:16:a8:b0:0b:02:
5d:c8:78:cd:02:57:fe:94:65:09:da:4e:ec:71:1c:35:63:62:
b8:3e:3c:1e:a7:9f:fe:af:77:df:8f:7b:c1:fa:9d:81:bf:a4:
51:6f:98:d0:b8:ce:c4:c4:c0:4d:fe:d5:c1:b7:da:85:99:3e:
fb:ff:70:d4:e4:ea:34:57:c1:d8:b3:ec:7a:ef:99:b3:97:d4:
c1:19:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:05:43 2025 by rpki-client