Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.mft
File: erbi9MRXMdA8J66v3WCGEYcbQjw.mft (raw, json)
Hash identifier: TKNC6u2ul2oLJHACwmQ63RfYNVCzDSLPe0n+0/ak+K0=
Subject key identifier: 53:02:D3:FB:83:49:03:BC:D0:6F:61:22:61:62:1D:D1:64:57:EF:C6
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Certificate issuer: /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial: 1128
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.mft
Manifest number: 111F
Signing time: Fri 01 Nov 2024 22:23:49 +0000
Manifest this update: Fri 01 Nov 2024 22:23:49 +0000
Manifest next update: Sat 02 Nov 2024 04:23:49 +0000
Files and hashes: 1: erbi9MRXMdA8J66v3WCGEYcbQjw.crl (hash: Osbz9cI+RLddSAYLDlitJ0GmtqQbLBU2Y2FEcMTXxgU=)
2: r7WQGMREEfI4Fmg6PQ3ktSkAtpc.roa (hash: HFIG7iXNBsXb+vT7M7qx9nPx1zt4/JVmwPHUeyaqDfU=)
3: rtWQWkNzdmM7X4cgcVVh0l6Nwcw.roa (hash: GH/OShse8GQ4IEPWkcEUIqoGm88NyQuvgij1K2K17yc=)
4: v7BCrE2vagBj7IKaaD72gqvDsZg.roa (hash: 35v0vkO/Pxf5ZzM1m6kgzGZZX6mDLFimhwTmlHj8J5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4392 (0x1128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Validity
Not Before: Nov 1 22:23:49 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5302D3FB834903BCD06F612261621DD16457EFC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:d0:bc:40:3a:6b:7a:7d:30:ef:be:30:85:
5f:20:c6:96:af:28:70:95:54:1a:36:59:81:1e:fc:
d4:50:40:45:72:e6:0e:bc:1c:1d:e8:82:cc:3d:f7:
bf:84:97:e0:3e:b9:62:df:99:4e:49:97:da:78:78:
1c:1f:8d:fe:05:ed:dc:4c:7e:e0:ab:d4:04:85:83:
8f:6b:a5:65:cf:48:09:9b:a1:7f:86:24:1d:41:6d:
cb:79:3e:79:a4:a9:e2:34:9b:1c:3a:d3:02:61:f4:
0a:3c:24:84:38:4d:ac:87:5c:e1:80:43:e7:5c:19:
b4:14:3a:40:3a:93:b3:a5:73:da:10:be:52:de:2a:
95:ce:d1:58:36:b6:ab:84:cd:5b:ce:12:4c:fa:91:
3a:7d:37:55:78:71:a1:ba:09:77:7a:9d:86:3b:24:
70:8f:be:34:a0:42:f7:9f:9e:fe:45:43:95:69:e2:
d9:b9:86:b4:12:51:2a:e9:4b:fb:ab:d0:8b:93:4d:
f0:6f:b7:84:79:eb:c0:90:d4:58:e3:0c:b4:63:df:
7e:df:ba:f7:d4:13:6e:38:9d:33:57:f3:a9:da:af:
d9:19:69:97:9b:fb:23:0a:2a:9f:e8:d9:0a:1e:e9:
5e:9f:0d:29:8a:c3:ee:6f:1c:57:25:f2:c6:1f:74:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:D3:FB:83:49:03:BC:D0:6F:61:22:61:62:1D:D1:64:57:EF:C6
X509v3 Authority Key Identifier:
keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:5d:2f:8d:42:b7:c5:5e:1b:3d:35:a9:33:3a:e7:40:06:da:
f4:e3:c8:e0:a5:9f:80:05:9d:35:67:1f:79:c1:46:ab:c8:cd:
f2:61:86:26:2a:ad:51:7a:33:ee:f9:7b:da:43:bf:68:87:22:
c2:dd:65:d8:45:b7:80:0d:b9:72:f7:2a:b2:53:8b:6a:4e:5c:
32:f7:09:ca:2a:37:c0:88:fc:9d:4b:cc:8e:3e:cd:a7:c6:c6:
8b:06:0f:b3:8a:0c:c2:66:bd:92:13:58:c8:39:f4:4c:80:62:
21:c7:84:0d:ff:df:c1:1f:df:89:19:56:6c:d3:62:2f:c5:df:
f5:24:0d:4c:7d:e7:67:af:18:b1:48:18:d4:f2:a3:0d:3b:4f:
e3:4c:2b:11:0d:5e:85:ed:51:0e:01:8f:65:30:a1:f4:f5:06:
da:12:6e:c2:70:5b:39:ef:ce:a7:09:21:e8:50:41:36:38:14:
69:a6:5b:2b:0c:f8:76:12:8e:fd:d7:2a:bb:ab:f4:9f:d3:0a:
b1:14:3b:78:de:fd:52:3c:8e:d3:ae:3d:44:77:a8:ea:98:ed:
77:97:be:a0:36:72:8f:33:0d:fb:93:f8:65:12:c4:e0:b2:90:
ff:89:ba:35:07:68:44:27:b2:55:87:c8:6c:1b:9f:2e:e1:32:
45:88:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 04:34:54 2024 by rpki-client on console.sobornost.net