Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1384/oZapzKejMT4hgEp8O7SXdfnwZYo.mft
File: oZapzKejMT4hgEp8O7SXdfnwZYo.mft (raw, json)
Hash identifier: uYp4QQtfGEKEQ8NQrONl+Wi9ShiHkPqmKvaTMsgqThI=
Subject key identifier: DA:37:F7:07:93:01:7B:A5:C6:48:F3:BD:80:A4:1B:A9:CF:5C:81:6A
Authority key identifier: A1:96:A9:CC:A7:A3:31:3E:21:80:4A:7C:3B:B4:97:75:F9:F0:65:8A
Certificate issuer: /CN=A196A9CCA7A3313E21804A7C3BB49775F9F0658A
Certificate serial: 0BE8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oZapzKejMT4hgEp8O7SXdfnwZYo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1384/oZapzKejMT4hgEp8O7SXdfnwZYo.mft
Manifest number: 0BE8
Signing time: Mon 28 Apr 2025 19:37:33 +0000
Manifest this update: Mon 28 Apr 2025 19:37:33 +0000
Manifest next update: Tue 29 Apr 2025 01:37:33 +0000
Files and hashes: 1: oZapzKejMT4hgEp8O7SXdfnwZYo.crl (hash: dVFQu9wsfTdnubT0nYbj2hV6NjxcRcRqlJ6nPp20ek8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A196A9CCA7A3313E21804A7C3BB49775F9F0658A
Validity
Not Before: Apr 28 19:37:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DA37F70793017BA5C648F3BD80A41BA9CF5C816A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:da:9c:59:d3:b4:fa:59:cb:6e:0e:17:94:
f0:b3:5e:ce:88:fa:29:03:9d:81:46:cf:4a:57:9b:
e1:59:9e:b3:b1:6a:e8:37:ad:78:a6:51:7a:39:00:
e8:eb:4f:c7:0a:2b:03:56:84:91:e9:ed:e6:0e:9b:
13:5b:bb:8e:20:72:dc:6f:e4:fe:10:34:7f:ad:2a:
49:2b:fb:a0:42:0b:5e:45:3f:9a:6a:bc:61:af:f4:
13:d3:13:3a:27:51:8e:1a:dc:89:eb:cb:df:18:2e:
72:7f:14:e7:93:31:03:8a:f6:51:1e:f7:91:4c:15:
84:de:b0:42:e1:6c:26:f9:a7:59:67:24:14:6a:ec:
38:f2:a8:24:a5:5a:d7:5b:f4:4f:9c:20:33:d4:a4:
91:26:33:f6:b3:10:e8:d3:b6:ac:57:d0:94:a6:a3:
e7:ab:b7:aa:0f:22:44:f4:92:96:7c:06:18:90:ea:
ba:63:06:af:04:2a:a2:b2:f1:2f:29:b4:bf:e5:08:
95:bd:23:b4:a9:f9:62:bc:ed:ea:33:41:d3:d9:d8:
27:21:45:58:f1:00:67:b7:1e:a1:af:86:63:28:29:
d1:8f:0a:07:f1:13:a5:0c:49:54:a4:b7:21:33:a0:
32:7d:ce:24:50:27:ac:c3:96:4b:ce:2a:4d:04:03:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:F7:07:93:01:7B:A5:C6:48:F3:BD:80:A4:1B:A9:CF:5C:81:6A
X509v3 Authority Key Identifier:
keyid:A1:96:A9:CC:A7:A3:31:3E:21:80:4A:7C:3B:B4:97:75:F9:F0:65:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1384/oZapzKejMT4hgEp8O7SXdfnwZYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oZapzKejMT4hgEp8O7SXdfnwZYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1384/oZapzKejMT4hgEp8O7SXdfnwZYo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:85:66:6a:21:23:21:73:ab:e7:ea:10:0d:f9:f6:14:0f:
d9:51:17:52:33:9e:c1:0f:15:a6:f3:3a:d4:37:23:5d:e7:83:
b4:83:dd:fa:42:a7:3b:b7:36:07:70:02:23:42:a6:13:16:c4:
ae:6a:4e:e8:d3:ea:25:42:c9:8c:97:f1:70:2c:46:bb:a4:f6:
41:e5:fa:4c:9e:58:1f:4b:0c:db:0c:80:ef:b1:d0:0f:ec:42:
e0:0b:92:a2:3c:f8:00:3f:31:fa:21:70:1d:57:b6:a3:d5:a2:
71:4a:78:48:2c:d8:ea:47:94:17:8f:61:7f:ed:7d:bf:21:9c:
6f:f4:e8:3c:9b:ed:15:9c:11:8c:9f:8d:e0:63:8a:42:09:20:
af:99:b3:46:d0:9d:54:13:f6:16:e0:2a:65:86:8a:47:c5:15:
dc:02:c6:88:11:3c:81:65:fe:5d:55:c1:f8:74:f1:13:b4:50:
c9:e0:00:98:31:c5:4a:bf:29:9c:5e:56:f8:6c:87:e0:f7:57:
6b:0b:18:48:60:13:03:d7:81:6e:04:d8:0b:33:b3:d2:f4:8c:
db:b4:5b:bc:b6:18:df:68:9a:ac:59:5c:ed:8b:98:dd:12:e7:
ad:84:3e:d9:70:bc:84:f9:e7:57:46:b6:dc:b0:eb:06:40:1a:
79:30:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net