Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json)
Hash identifier: t0Jx3LFeCUv3Hh+fEiDtxK053TE3ncsTFUVATuSeji8=
Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985
Certificate serial: 0843
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
Manifest number: 0835
Signing time: Mon 28 Apr 2025 19:38:41 +0000
Manifest this update: Mon 28 Apr 2025 19:38:41 +0000
Manifest next update: Tue 29 Apr 2025 01:38:41 +0000
Files and hashes: 1: NeekGFR5NIVtajaJ5HdjX8R8fNo.roa (hash: AQAjAJlgu+LEfO1yH586ESbhoVxFXl/P5tNzJvUMOEY=)
2: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: nxmST2pLhnk6hZRmiCDgLsF7e4hChCFMnkBdTCh77ms=)
3: yDAVP8H_i8ah3EyHDhnWJS6tjLU.roa (hash: CIzjhzifWM6nzfG8hoac4C+5WTIAXYEvq69J+GVoSuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985
Validity
Not Before: Apr 28 19:38:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39:
6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29:
57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f:
b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc:
69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4:
a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90:
c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de:
7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72:
bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7:
32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3:
88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f:
13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad:
74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94:
5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c:
91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a:
00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15:
a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B
X509v3 Authority Key Identifier:
keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d6:e2:ba:97:88:8f:2e:e7:3f:11:41:02:39:c6:50:0f:64:
9c:29:4d:bd:8d:9c:e0:aa:5c:80:e0:c1:b9:f0:3d:a2:bb:e5:
79:00:b2:5c:19:28:fd:47:05:55:6c:39:f7:70:66:c5:25:c8:
fe:43:a8:a1:a0:ac:10:f7:8f:4f:af:80:c9:40:ec:f9:c4:1a:
c2:ba:cb:8f:b4:17:17:5c:68:95:31:01:39:61:39:cb:7b:85:
9f:fe:59:78:51:e3:d7:2b:66:45:94:24:5c:a8:10:41:9c:b3:
63:2e:fd:70:49:c2:96:6f:a0:83:76:41:3f:ff:0e:a8:68:1e:
c9:1b:ec:e0:db:47:ac:19:7e:52:53:82:59:38:f3:2b:db:d6:
12:6b:8a:7d:15:5d:96:42:ce:69:68:c5:fc:92:54:78:8e:32:
0f:87:ea:1d:66:a8:56:8d:48:8e:0c:a3:79:8b:eb:ca:2a:35:
9c:31:16:21:8d:88:41:1b:e0:d4:61:29:b0:4d:ec:2c:af:1b:
3c:91:2b:2d:04:d2:fa:32:f0:50:a0:2f:75:f1:8a:5d:ee:2b:
20:51:a3:52:6c:6f:d1:e7:6f:81:3c:2d:65:c5:ba:30:5a:17:
f8:0c:c0:62:e3:f4:0b:f3:46:e3:61:29:ff:84:6f:d6:1b:8b:
51:da:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net