Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
File: OrqLQlIyvliWg5beMqjrWgXuplg.mft (raw, json)
Hash identifier: 3UJevNY6U/3wPSktElHwNwbP40idpaFwZ+dScY06hjo=
Subject key identifier: EE:3D:61:32:5F:A4:15:8F:6D:D8:75:32:51:AA:A0:A4:34:31:9D:AF
Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Certificate serial: 1DC8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
Manifest number: 1DBE
Signing time: Mon 28 Apr 2025 19:38:36 +0000
Manifest this update: Mon 28 Apr 2025 19:38:36 +0000
Manifest next update: Tue 29 Apr 2025 01:38:36 +0000
Files and hashes: 1: 9BneQEOFwVmbNV9qi1-Mifgisio.roa (hash: j8Zpmg3gffAltASgieZws8QEaUrwW5YvuNKDhkgVhao=)
2: OrqLQlIyvliWg5beMqjrWgXuplg.crl (hash: JTbMjGyVF1qSFuQQTzWjWbPkHxmER07uNzRRKhSZ5EE=)
3: tRswCJdL2GSrkhJ4sEMCKesQ7Qc.roa (hash: G0Oe7HR1J3rXDzcBIqEhXwBkH9bfb0Jw85W7o7SLlc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7624 (0x1dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Validity
Not Before: Apr 28 19:38:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EE3D61325FA4158F6DD8753251AAA0A434319DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:bf:c1:b3:f6:44:ba:99:72:56:cb:1f:b3:
33:33:73:4e:03:34:6d:68:51:d4:2e:d3:f3:99:db:
a5:47:b5:52:24:59:1f:31:c9:99:f2:42:a3:78:6b:
29:d6:70:26:97:8c:3d:d1:bf:0c:04:01:6e:72:9f:
9b:41:14:eb:2d:bc:db:b6:ab:ed:2b:5f:1b:a6:f1:
56:0b:6e:15:69:89:4b:3e:1f:d3:ce:ae:90:48:ab:
fd:07:de:04:40:7a:ef:52:20:c2:c1:bd:b8:2e:19:
11:71:82:24:72:ad:09:42:84:cf:0a:ac:7e:6a:f4:
93:5e:20:86:65:82:6a:7a:15:fd:29:8e:59:74:0d:
0f:73:3f:78:d7:3b:11:e6:7c:af:e1:75:1b:58:82:
89:37:b1:c9:6a:b8:11:00:35:25:51:ff:81:2d:9b:
80:d6:88:03:10:90:f7:49:06:81:1f:ca:b1:fc:4c:
29:f1:db:4c:ca:e2:47:0d:52:28:cb:a5:9c:a0:09:
2d:ea:c8:95:1a:a0:bd:2e:93:af:0c:f6:c2:d2:89:
66:bc:0a:82:9d:2b:6d:40:29:8c:68:8b:06:85:7f:
b7:85:1e:05:92:30:d7:7c:86:66:cb:9a:41:a4:52:
7b:e7:f9:ab:be:06:f1:8a:48:85:23:b5:45:f7:6f:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3D:61:32:5F:A4:15:8F:6D:D8:75:32:51:AA:A0:A4:34:31:9D:AF
X509v3 Authority Key Identifier:
keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:12:fe:3c:da:4e:d1:73:2b:c8:2c:46:b9:d2:42:11:88:9f:
1b:5a:c7:b0:65:09:8e:1d:06:42:ff:f2:a1:83:73:9f:6a:12:
9b:dc:82:22:ae:55:7d:e1:e3:3c:3e:c4:c5:01:45:16:d3:61:
56:e0:01:fa:ef:5a:bb:39:41:f5:3e:43:97:a6:94:9c:61:92:
f4:b3:ad:6d:59:b6:f8:b0:4d:11:ec:de:4a:24:5a:c9:62:8b:
91:77:5c:c7:85:65:fc:40:55:70:56:a2:5b:d3:4e:ae:f4:20:
46:b1:23:c1:e7:e3:37:72:61:30:4b:d3:34:3d:ab:b9:68:c8:
12:f1:3e:9a:ff:aa:17:9b:1c:fc:09:d7:ea:59:7b:00:13:d7:
dc:a7:97:ad:49:07:6a:46:bb:e5:0d:a1:46:20:3e:9c:9a:af:
d9:38:1d:76:d2:af:6a:e3:d5:d1:8f:a2:e4:01:b4:be:9a:5a:
6a:db:14:80:8e:14:0e:49:51:dc:40:0e:0a:87:89:4a:cc:2b:
5f:d6:2c:01:ad:8b:2c:5c:a5:a5:5a:31:17:62:a3:df:cc:b1:
6a:e6:e9:2a:d7:25:e5:5c:88:d4:3f:76:42:10:2b:09:a1:3f:
8b:9f:28:4d:3c:ae:7b:41:d0:c9:3b:af:38:bc:7f:c9:e2:94:
63:5a:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net