Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1407/XaCl7MIYLbAOuFxiMT1XuWt_1o4.mft
File: XaCl7MIYLbAOuFxiMT1XuWt_1o4.mft (raw, json)
Hash identifier: xB/NGZQZUkBNCeDGmQOFB3jhxQGNbsBvdO/Ib7d0s0I=
Subject key identifier: 28:77:52:BE:C0:FD:A7:B7:93:BF:EC:2A:92:AF:3F:53:F9:5A:C4:30
Authority key identifier: 5D:A0:A5:EC:C2:18:2D:B0:0E:B8:5C:62:31:3D:57:B9:6B:7F:D6:8E
Certificate issuer: /CN=5DA0A5ECC2182DB00EB85C62313D57B96B7FD68E
Certificate serial: 1DDA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XaCl7MIYLbAOuFxiMT1XuWt_1o4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/XaCl7MIYLbAOuFxiMT1XuWt_1o4.mft
Manifest number: 1DD0
Signing time: Mon 28 Apr 2025 19:40:05 +0000
Manifest this update: Mon 28 Apr 2025 19:40:05 +0000
Manifest next update: Tue 29 Apr 2025 01:40:05 +0000
Files and hashes: 1: 6vSxA0diVCR8XMmvW-nu2EPxVx4.roa (hash: JVPAyeOrMTMc4c6qkPIL4jxz1GwHHYoSVQr8/TXy3C8=)
2: DxfIjbOOEwQlrzFpYd7_pZyLomY.roa (hash: H+2wDltBpsljHYGjKXHuiv3/rnGdiCmtbvwrJ+M6pEw=)
3: XaCl7MIYLbAOuFxiMT1XuWt_1o4.crl (hash: SQYcdKg+32hvwXPbdPXsswOkp8ied8ld4jW+oSWkF44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7642 (0x1dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DA0A5ECC2182DB00EB85C62313D57B96B7FD68E
Validity
Not Before: Apr 28 19:40:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=287752BEC0FDA7B793BFEC2A92AF3F53F95AC430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:ef:96:ea:9c:43:2a:bf:98:64:05:ae:64:
1e:c6:6c:65:ad:d5:f8:e3:52:f4:94:f2:1a:da:83:
0a:2c:1d:b9:60:41:ff:38:8d:68:a3:92:ba:1b:a0:
d0:9e:35:9c:66:1b:94:26:ad:7d:c6:77:03:d7:50:
a9:7b:ce:83:b7:b6:d9:19:69:5d:3e:48:90:b0:e9:
fc:cb:fd:94:5d:70:d7:dd:c6:4c:0b:0d:2d:59:d3:
4a:0e:c4:fa:00:47:0f:97:93:3b:4d:7b:31:f5:70:
b4:f8:59:f1:84:fb:65:10:5b:2f:c4:cd:55:94:84:
b6:a2:ae:3f:95:ab:66:3f:3e:77:c3:38:91:d8:ab:
00:c4:cf:73:33:7e:e4:47:16:f9:f2:ad:07:61:f3:
20:20:17:33:02:07:4a:fb:d5:cc:3c:e4:d9:ec:ca:
3c:0d:e0:30:da:fc:a2:26:e2:8d:bb:5e:61:5a:5b:
c8:e3:56:9e:73:0a:72:a6:9d:f8:18:8b:f8:f7:92:
94:5a:54:98:53:56:bc:a9:81:4d:56:db:12:ae:19:
3d:11:1e:7d:b3:fb:70:08:9e:26:60:74:26:f2:72:
4a:cc:47:bc:f0:93:07:91:cf:f8:69:fe:ec:f7:3d:
09:64:0a:69:49:2e:98:94:b2:cc:72:e9:b4:62:a9:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:52:BE:C0:FD:A7:B7:93:BF:EC:2A:92:AF:3F:53:F9:5A:C4:30
X509v3 Authority Key Identifier:
keyid:5D:A0:A5:EC:C2:18:2D:B0:0E:B8:5C:62:31:3D:57:B9:6B:7F:D6:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/XaCl7MIYLbAOuFxiMT1XuWt_1o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XaCl7MIYLbAOuFxiMT1XuWt_1o4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/XaCl7MIYLbAOuFxiMT1XuWt_1o4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c5:a2:a7:ec:04:5e:56:3d:8e:cd:b4:ed:c0:3a:db:c8:ce:
22:99:e9:a6:c8:f1:27:f4:b3:23:02:a3:50:13:d1:c2:c6:bb:
7e:1d:7f:2b:33:08:3f:87:b7:b6:35:c8:5e:ef:97:6b:6b:04:
f1:c4:55:d0:18:ce:2f:c2:54:84:30:57:aa:4f:df:67:fe:f3:
70:0c:86:10:61:a6:70:16:e5:f9:4b:92:18:7b:b4:db:36:b4:
37:e5:50:58:4a:ce:d9:93:63:c8:66:ea:47:da:0b:d3:c0:83:
7b:75:55:c8:15:49:b3:81:71:17:3a:bf:2b:44:d2:63:99:9a:
b5:88:cb:5d:27:1d:35:2c:3a:e1:31:c7:75:09:2d:50:a9:5d:
41:8e:fb:31:71:a0:63:4f:92:ce:92:00:b3:d4:55:f3:6d:82:
5b:14:05:fa:8d:01:04:27:53:07:d3:ed:6d:5c:12:8c:42:f4:
d9:fa:81:a0:c8:e1:1d:0b:86:5d:74:25:73:1b:66:85:ae:85:
b8:c4:55:4a:9b:a0:cb:65:7f:6c:45:82:35:e7:f7:92:aa:8f:
3c:13:4b:86:f7:d2:4f:ba:5c:84:49:f9:8d:78:d7:65:34:82:
a4:1c:71:f0:ef:02:aa:90:4e:61:71:19:81:4a:93:86:a5:67:
9f:21:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net