Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft (raw, json)
Hash identifier: 0P5+I+hDcSWbi8x0FDLsCAFXP3yBhsS0/hCr6zgf++0=
Subject key identifier: DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35
Authority key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Certificate issuer: /CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Certificate serial: 1DC4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
Manifest number: 1DC4
Signing time: Mon 28 Apr 2025 19:38:31 +0000
Manifest this update: Mon 28 Apr 2025 19:38:31 +0000
Manifest next update: Tue 29 Apr 2025 01:38:31 +0000
Files and hashes: 1: vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl (hash: BbTBUp4YOia9PI1LnxhsN7x9SGd0OG6j46vCiMmkDgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7620 (0x1dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Validity
Not Before: Apr 28 19:38:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DBD9F4F5914A39ECDE3E5EAEB2E400EE30131135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:75:68:4d:86:6f:36:a4:da:5e:c9:c9:ac:
e4:0d:29:b9:86:9a:6c:b9:54:b5:76:2b:51:2e:7a:
f9:1f:8e:5f:c1:9e:74:c3:8b:1c:d7:28:d4:83:be:
96:5b:aa:b5:2a:fc:21:26:ce:12:62:66:c0:e9:38:
d6:b9:09:14:50:be:43:bf:6a:09:e1:0e:57:20:37:
de:05:f6:91:7f:40:75:d6:2b:29:7b:76:15:24:4b:
cd:71:18:cf:71:41:ea:fe:70:c4:a2:4a:e5:ae:83:
45:4d:29:54:9e:15:65:75:da:68:ff:db:ce:a6:e9:
b7:fb:24:89:2a:2a:bd:44:a9:d2:55:da:1d:2c:ca:
2e:8b:ae:87:ee:3e:1e:0e:9b:32:e4:22:61:f5:86:
fe:49:0e:d9:2c:26:6b:28:52:ba:76:32:24:b7:ad:
3f:65:2c:a5:8a:67:7d:c6:12:f2:2d:55:54:50:8b:
22:6e:65:32:1e:a3:4e:7d:3a:8d:f3:c4:34:6d:e2:
84:a4:48:d3:eb:18:0a:6c:c3:73:a9:f6:ce:58:fd:
c9:5e:17:d6:67:f0:75:14:b8:8b:73:3a:11:76:57:
8a:39:24:b0:d1:0f:48:6c:7f:77:25:33:37:f4:92:
54:a2:bc:0e:64:9e:90:e1:6a:b5:5a:7c:00:1f:24:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:F4:F5:91:4A:39:EC:DE:3E:5E:AE:B2:E4:00:EE:30:13:11:35
X509v3 Authority Key Identifier:
keyid:BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:67:01:fd:22:d9:97:50:45:e3:a0:41:ff:f3:02:2a:7f:
49:37:9f:8a:c0:6c:74:8f:83:01:24:a5:b1:0b:12:e3:b7:ce:
ae:6c:ad:83:05:7a:30:29:a6:72:50:93:b0:7e:5e:91:0c:7f:
35:32:14:de:b5:0d:54:8a:fc:45:83:e4:12:2b:71:ab:32:a9:
fd:55:12:1a:9d:b8:83:0b:ee:6c:b7:e8:ae:97:a1:5c:8c:ea:
1a:76:09:cc:04:e1:3f:3f:5b:d8:e2:c6:ef:f8:fb:ba:94:85:
de:1f:fe:2c:0a:b5:9b:92:5a:7f:9e:1d:26:79:6c:0c:c9:ca:
6a:41:30:aa:d8:46:d2:6e:b2:8a:e8:7c:21:6d:6c:0c:a1:56:
ab:43:2f:92:1a:67:3a:91:e5:b1:8f:80:ee:67:a3:97:5e:be:
78:7e:92:48:a6:f6:c4:97:16:2f:25:b0:17:ac:89:e0:f2:21:
cb:c4:20:3e:c5:e5:05:3a:df:98:46:eb:36:4f:0d:27:9a:d9:
22:48:2f:5c:5a:08:d0:89:9a:dd:89:43:5c:b7:04:f0:02:39:
5e:db:84:5c:9b:59:c9:67:0a:67:7a:86:cd:ab:b9:31:11:ff:
76:7e:a6:d1:24:c6:e2:ed:17:87:52:fa:c4:1c:96:5a:83:15:
fa:46:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:29 2025 by rpki-client on console.sobornost.net