Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
File: MtXsFcXlZORw7HsUzUfeLYYqzoM.mft (raw, json)
Hash identifier: +KzXhI/6fXYVfRbYfuTxhK1gtbvZ8UromjOpw+Rr6Fo=
Subject key identifier: 47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
Authority key identifier: 32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
Certificate issuer: /CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Certificate serial: 0361
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
Manifest number: 035D
Signing time: Mon 28 Apr 2025 19:41:42 +0000
Manifest this update: Mon 28 Apr 2025 19:41:42 +0000
Manifest next update: Tue 29 Apr 2025 01:41:42 +0000
Files and hashes: 1: JLQYInniMmjrZ1vFfNGSmRm-nvs.roa (hash: QlXwsqHXts+1fdHKwVf4SHuTfyC0wOTsCK0g1e5FrpE=)
2: MtXsFcXlZORw7HsUzUfeLYYqzoM.crl (hash: o+YGvlIA+J3CLgznDkzDqyiSdWVXHWxbGnLJaFyjx1k=)
3: RdzlYXdrkIlz5zdq_uky2869UaM.roa (hash: Zrtno3SiPYmnE7VIpxd3/w1CoF3rH7IuIaaCg+DwPAU=)
4: dhForz2_NrloVzISJkp8QaFMXCs.roa (hash: /umIRMrhIJaUfWsHQfs27h7od4A6sDNvV6muipplBvw=)
5: phU4YJh5EUs8U1V3CbndmrNmfO0.roa (hash: CZhyDj2FMIi+v5w3tJPQMA4talNR9mcJmi9qREPZn/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Validity
Not Before: Apr 28 19:41:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=47AC346E7B3AC13DA66FB22DEB396C0EE042F7C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:ad:80:a7:c7:cb:d9:7d:75:2c:0c:3f:cd:
c2:0d:d0:0f:94:80:71:80:08:b7:0d:13:d2:22:2e:
1f:69:28:26:a3:1f:7b:5b:82:d2:b7:18:d1:6b:dc:
dd:7a:40:ed:ab:f0:fa:0b:60:77:af:60:f3:87:e8:
42:da:79:19:1c:dc:e1:96:7a:b5:cd:15:32:74:d9:
78:00:f9:ed:c6:df:84:c8:58:88:9a:91:31:55:c1:
21:2d:57:8c:47:bf:a1:ce:cc:9b:dd:07:18:30:67:
a2:a9:94:4c:69:ea:53:21:88:d6:5c:10:c3:f1:a7:
b4:90:07:76:2e:23:65:d9:ee:4a:48:ab:82:aa:20:
49:96:56:a2:82:28:70:db:75:f7:51:7d:82:16:97:
b5:05:af:af:f5:ea:ee:ec:4a:e0:12:d8:ba:30:1b:
11:b3:aa:d5:db:a9:3d:12:36:63:cd:09:e9:b8:b4:
4d:cc:4b:d0:a9:a2:d2:e9:66:a0:cd:7a:e6:1c:b2:
09:c2:0c:7a:5e:5c:13:94:b5:64:28:13:c3:a6:c1:
02:5f:67:c7:b0:62:2a:2e:00:c8:15:04:d7:4f:59:
e8:8c:7f:84:b6:f2:3d:50:37:04:31:c8:8a:88:b6:
4a:77:c9:be:89:01:e8:ca:76:2c:05:d7:91:52:25:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:34:6E:7B:3A:C1:3D:A6:6F:B2:2D:EB:39:6C:0E:E0:42:F7:C3
X509v3 Authority Key Identifier:
keyid:32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:6d:4f:9c:11:ab:a4:c6:1c:b6:09:b0:f5:37:b8:43:27:
1d:1b:ea:53:08:3b:36:c4:87:e3:c0:20:e7:b1:e7:12:f4:eb:
cd:47:a3:e8:b9:7c:06:aa:38:24:cd:04:ec:f9:41:bd:c9:b8:
7a:92:86:10:8c:e2:09:e0:ae:9a:d6:db:54:b3:e3:4f:39:40:
7f:03:19:8e:ec:e7:99:0e:e0:e3:f5:f5:85:f1:69:95:80:18:
84:1f:bd:a4:7e:f9:44:e9:94:9c:c5:92:b7:ce:f1:74:b2:db:
53:80:1a:03:fb:d6:a2:e8:3a:bd:ea:5b:77:98:82:59:50:82:
c2:7f:4a:9f:27:e5:72:b9:d3:5c:47:c9:77:9d:1e:b3:6a:b5:
6d:e4:f0:0f:4e:50:fc:d7:99:73:c1:a6:8e:2c:e6:da:ee:dc:
94:7d:7c:56:34:95:51:16:c3:35:c2:a5:79:a3:be:0b:12:1a:
0a:b9:a9:d6:75:41:bd:f5:ae:c0:3c:2d:fd:af:4c:e6:d9:72:
c6:30:91:06:80:b0:08:a0:fa:86:fb:23:21:66:71:d2:31:c6:
dd:36:f4:ca:b0:9c:7f:f4:99:7d:e2:47:a5:08:b8:20:82:e8:
7c:f6:2e:b8:fe:1b:9c:5e:29:8b:59:6a:bd:80:f7:25:a7:6c:
83:81:17:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:29 2025 by rpki-client on console.sobornost.net