Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File: vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier: dOys/duz/UICoBCTphb+/Z5MpqvIlyKkBeotPpmnQMI=
Subject key identifier: E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5EEB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number: 4268
Signing time: Mon 28 Apr 2025 19:41:39 +0000
Manifest this update: Mon 28 Apr 2025 19:41:39 +0000
Manifest next update: Tue 29 Apr 2025 01:41:39 +0000
Files and hashes: 1: TSY7JcOEbzPWgbE9NK4zQt1XAvY.roa (hash: aLhl2+Q8OwATqdMYpJ2RVYRINELa+dVAZvh7RXDHT3g=)
2: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (hash: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4=)
3: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: MtKfVSsQov2j7kvUps7OTaGwyRVBwNYLwjJz6U6dAYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24299 (0x5eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 19:41:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:48:78:f6:2e:4c:5c:11:ab:f2:51:f1:15:f7:ae:46:18:
a4:2c:e3:25:52:50:28:7f:77:f3:9b:b5:c1:58:17:6b:6f:b2:
a5:a6:e0:84:39:1d:bc:3a:a8:d1:a5:7d:25:67:1f:00:2d:2f:
50:33:8e:9e:a8:2c:d9:ee:ee:fc:fe:fc:49:fa:bf:ec:c5:80:
84:38:ea:0e:06:3a:ac:4d:ba:bb:d5:91:c6:ef:43:cb:4f:91:
7c:03:be:06:64:0a:b1:fd:95:f8:05:ec:c3:df:4e:d8:20:62:
74:bb:85:24:d6:2a:d7:16:ab:df:1e:c7:b8:41:21:18:ee:8c:
4f:ae:c2:a7:24:f6:b2:fb:c7:bf:93:be:c5:60:0c:0a:b5:d8:
e4:b3:1e:ed:c2:5e:32:57:97:44:99:61:c8:cc:96:10:3a:65:
27:1f:1d:56:1c:ca:26:fc:3f:a3:45:96:c2:ff:9e:e2:7e:b6:
39:78:5c:89:00:19:a5:33:d3:81:53:be:24:62:ca:6f:3f:c0:
a5:59:d5:3b:60:54:f9:8e:e5:4b:9d:69:ad:ba:4d:a4:d0:91:
7a:e8:1e:b5:4b:54:3f:65:86:e4:16:84:71:99:9d:6d:5e:8d:
60:d4:3b:3b:03:16:8c:42:1c:24:90:d5:f1:a2:4c:30:c4:3f:
2c:c0:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net