Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
File: TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft (raw, json)
Hash identifier: RIZ4BXTW1b1/rGpEaJr3ALT5zbto0Ans30xaWFiAzBE=
Subject key identifier: 68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1DC9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
Manifest number: 1DB5
Signing time: Mon 28 Apr 2025 19:38:58 +0000
Manifest this update: Mon 28 Apr 2025 19:38:58 +0000
Manifest next update: Tue 29 Apr 2025 01:38:58 +0000
Files and hashes: 1: TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl (hash: xyt7kod5/b+EiUjKzB8f1gmlkhRv6P7gnCX68o7W3SY=)
2: dRzZBwD8nn9NRnPMSg6KYfYpdwU.roa (hash: 7mntN1EQX9ULdC3vyzx+A7+0SpzueCgIht3TR71acNE=)
3: iYjkiJaRGnBETZlEydSbbSczJUc.roa (hash: sBB96CAbUt4uz7RB43SUEjN8vs1vOjj5Z2ffnfxN60c=)
4: mlMCvl3JtLRELSM0dAmYY_QyXYA.roa (hash: ycbIxVFuxzhTUCuY+uVju6/YdBab59Sazv1Ubu9YxeE=)
5: p4NdksDiCY31k6x-lrJZdHrDyIs.roa (hash: 1Gt4x4TRC2WlKuqrik2KaqorMtbTmxXQngWbLJW6fZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7625 (0x1dc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Apr 28 19:38:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6800B29027F006269714735503A73430F6BC04F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:27:18:94:1b:76:9e:41:b6:2e:39:c8:17:
73:2e:0c:a1:0b:3a:15:aa:b4:47:bb:81:d1:b1:ad:
fa:96:26:45:24:b4:61:55:47:03:9d:8d:55:6f:a2:
72:e7:a3:d0:95:1d:b8:bc:cb:a9:68:09:ae:7c:a2:
e9:9f:48:05:b0:9f:3d:ce:e1:b3:be:40:53:cd:62:
87:24:c5:7c:41:0b:00:48:83:0a:f9:ec:b4:37:c4:
02:3c:2d:e7:05:0a:d8:f9:a8:3d:17:de:50:03:f8:
9f:d7:4a:06:3a:6c:5d:1b:0c:0b:be:4b:6b:63:0d:
bc:02:bb:bc:44:72:e2:c7:c4:3f:78:62:70:e9:bf:
12:d4:95:2c:4d:c1:e7:52:f3:91:19:b7:0d:79:fd:
8d:b0:fd:a2:88:55:32:07:a4:3f:39:db:94:54:20:
7c:b6:60:f6:3b:47:a0:9f:41:78:1f:59:7e:38:08:
05:5c:a5:c5:d9:f6:18:a6:4d:c0:21:b2:7e:2f:6b:
4e:d0:46:9f:4d:67:f4:19:e4:18:44:74:95:22:04:
8c:9b:e7:ba:af:1f:18:70:4f:72:74:b7:7b:08:66:
da:ab:83:c5:2f:50:71:ae:d8:b4:ae:d1:8e:a8:12:
5a:a1:2c:20:e7:1e:79:8a:77:45:ea:a0:7e:2d:0b:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6e:4e:3a:3e:77:31:13:39:c8:a0:b3:d7:15:70:87:d8:fe:
e1:b0:49:5b:39:a9:5d:f4:83:71:17:f7:b0:c1:06:c7:74:62:
7a:1e:74:c3:e3:fc:1f:f6:6b:3f:1c:ee:bf:41:1a:78:58:77:
12:82:8b:44:b2:06:cb:ca:4a:52:16:8a:22:78:6f:5f:12:69:
ea:6f:09:db:de:e3:99:07:36:8b:61:2f:59:1c:e1:9e:f7:e0:
38:4b:0a:1a:1d:78:36:38:be:43:ba:71:50:05:f0:4b:39:55:
9b:38:24:ee:34:cf:6d:18:57:53:58:44:b7:7c:c6:73:8f:29:
b6:81:71:d2:7f:02:f2:f6:4a:96:40:c6:b7:05:72:78:27:cb:
f9:f7:e8:61:89:e7:aa:ef:a5:f4:75:ae:2d:d8:15:59:ae:c1:
17:84:d1:3b:66:fb:f2:ba:09:ac:9a:36:38:88:47:8e:a3:fa:
37:09:ae:1d:63:e7:c5:6b:bb:54:28:47:24:4a:e1:70:8a:67:
13:53:0d:72:e0:3f:35:32:0b:31:10:d1:2e:9a:48:77:d9:86:
dd:08:14:20:46:fa:3a:f3:53:4c:97:72:ac:0c:53:fc:98:9f:
4d:19:de:b3:b2:c3:ef:92:ae:80:02:14:90:76:15:b6:4f:fb:
8b:56:4d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:31 2025 by rpki-client on console.sobornost.net