Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
File: KCAlirZf9h_V1m2Vlk9I76NdzIY.mft (raw, json)
Hash identifier: 1OUbVYXiyosQ+4OJDosONx7kUSkYgHhl9P/gDMo9Dgk=
Subject key identifier: F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB
Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Certificate serial: 13A0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
Manifest number: 139C
Signing time: Mon 28 Apr 2025 19:38:27 +0000
Manifest this update: Mon 28 Apr 2025 19:38:27 +0000
Manifest next update: Tue 29 Apr 2025 01:38:27 +0000
Files and hashes: 1: KCAlirZf9h_V1m2Vlk9I76NdzIY.crl (hash: mWhN/1L0WOWh++xgR2PpMOEglfm43G6jda9XmeH+dbg=)
2: WgrIRnAmsxWBO3TfjMU3y8eDt78.roa (hash: tiz5vTjFJ5BFKOBFmxtwDOUTL38Wd7N2mFJNr9UBYpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5024 (0x13a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Validity
Not Before: Apr 28 19:38:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F22C52B900B880022A9210A686FE1A8006C4DAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:01:ef:f8:9d:ec:b2:12:09:20:58:1f:f3:
bd:ff:df:54:3b:c9:ac:13:5f:ac:3e:9a:f0:59:2a:
74:83:21:ab:51:13:b2:13:63:81:d9:61:f8:5e:72:
60:1f:12:b1:10:b8:dc:7a:b2:56:21:d0:fb:d7:f2:
aa:49:63:be:c8:7f:19:56:97:04:da:4e:53:1c:16:
c3:31:42:cb:b6:b8:63:dc:61:e5:98:a1:85:70:f3:
67:09:3e:d7:5d:db:ba:22:5d:14:68:44:54:17:ce:
af:66:c2:4f:e8:75:a9:e8:cc:15:f5:4e:86:ae:4d:
bd:6c:c9:56:d8:e9:b3:55:b2:0b:eb:a7:5b:fb:a0:
b1:ff:b0:ab:0f:f4:d2:07:47:cb:2c:90:1f:0e:ef:
ef:7f:4a:20:a2:34:ae:d9:44:8f:d9:a7:52:23:ad:
22:31:a4:2d:eb:05:2e:7a:97:20:23:ab:b8:dc:74:
6e:b5:ef:14:54:01:f8:0d:d1:90:ef:1f:be:ed:99:
aa:81:f8:f5:48:90:4c:c3:2c:07:cd:df:be:58:06:
0f:72:e1:81:bf:f1:58:33:a0:10:5c:bc:6c:0d:34:
36:2e:f3:d8:1a:b3:bd:d0:1b:c2:fa:72:fd:13:9f:
ab:9b:01:90:e8:66:7d:12:2b:b9:80:20:93:cb:4f:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:52:B9:00:B8:80:02:2A:92:10:A6:86:FE:1A:80:06:C4:DA:EB
X509v3 Authority Key Identifier:
keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a0:ad:14:c0:d3:99:3e:ff:2a:4e:67:a2:11:fc:83:6c:e8:
6b:76:a8:34:c7:a4:8c:ae:4d:5d:73:d1:70:95:bf:a4:8c:6a:
91:d0:1e:72:5f:13:fd:96:f2:13:1c:b4:6a:a4:51:d7:d2:35:
9f:f9:8d:de:ee:56:5a:7d:ee:4e:cd:84:6d:61:b0:c6:63:58:
1c:89:10:be:4d:57:06:e4:0e:e4:6e:89:ab:53:fb:67:1a:1f:
91:5e:41:3e:a9:bb:c5:bb:97:31:2b:f8:76:4e:67:e8:eb:2b:
88:05:a0:b8:65:f9:22:5e:11:d6:27:3b:e2:d9:48:85:73:f3:
a1:21:e5:40:1a:fb:75:42:04:08:b0:b6:da:3f:ca:cf:c6:5a:
2b:d0:14:aa:36:d6:9b:e4:9b:be:c3:eb:8c:94:ee:69:09:1d:
a2:87:43:48:92:6f:75:d9:47:5f:70:d1:d7:1b:43:8a:fe:ce:
c1:70:da:59:d1:50:08:bc:f9:92:8a:4b:ad:51:2a:bf:be:42:
f6:bb:00:37:5b:c4:df:4e:d8:87:c6:bb:e1:ef:30:24:54:b0:
03:1c:5e:d4:e2:8d:d7:a2:03:1f:f8:80:fe:59:d5:61:af:13:
41:6a:3a:6d:6e:66:4f:96:c1:09:8a:ad:e5:64:2a:9d:db:ea:
f2:d4:4e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:29 2025 by rpki-client on console.sobornost.net