Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
File: 4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json)
Hash identifier: V6ckamQpz8JAzzgXNNvnT8ZpASs8IbcD53+5juGCpBs=
Subject key identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0
Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39
Certificate issuer: /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
Certificate serial: 1491
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
Manifest number: 148E
Signing time: Mon 28 Apr 2025 19:40:08 +0000
Manifest this update: Mon 28 Apr 2025 19:40:07 +0000
Manifest next update: Tue 29 Apr 2025 01:40:07 +0000
Files and hashes: 1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: EGrUkJcDU/dvbzKafIS671qPETlxGhmEIoX53du0Um4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5265 (0x1491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
Validity
Not Before: Apr 28 19:40:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72:
42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8:
13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de:
f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9:
59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75:
6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13:
26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc:
a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66:
3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69:
48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14:
8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e:
22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64:
0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee:
9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83:
ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb:
c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99:
a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0
X509v3 Authority Key Identifier:
keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:38:95:03:e1:a5:09:ca:ce:76:75:34:b4:93:ad:7a:6c:eb:
49:76:a5:4b:b2:9a:88:63:23:67:2c:7f:cb:9c:a6:de:8f:c7:
07:9c:b9:d5:9f:8b:80:ff:60:06:a7:ce:ce:62:47:0e:82:25:
67:13:4e:14:bb:29:df:47:40:58:20:9e:20:b7:eb:34:89:2a:
c6:9a:1d:ec:75:f5:c8:97:bc:f2:61:1c:6b:8a:16:29:13:d3:
6a:9d:f2:0a:a3:2a:c1:b1:1d:e5:ee:0b:89:52:75:c2:21:41:
cd:b4:6e:40:d0:b9:6e:1b:0a:f3:9a:78:9e:a1:50:80:d0:9b:
c8:29:27:8d:23:d4:eb:e1:e1:2f:13:aa:41:07:1d:32:94:c1:
8b:24:91:4f:c3:42:16:84:e6:e8:74:ff:6a:81:9c:3c:a5:1d:
8c:e2:2d:5e:ae:3a:e1:f6:9c:34:85:2b:1d:05:a1:12:89:10:
42:48:06:64:af:22:8b:b3:d5:0f:f4:73:08:e7:26:c9:33:6c:
eb:60:91:07:5b:26:87:56:05:f3:01:1f:67:29:1f:e7:cd:b5:
08:3c:81:61:f8:e3:0b:9e:32:2d:ec:df:d3:ec:6d:f4:89:fb:
79:ad:33:f4:e7:5d:c4:a5:e3:50:30:30:f9:f1:dc:b5:58:05:
0e:83:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:31 2025 by rpki-client on console.sobornost.net