Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft (raw, json)
Hash identifier: FH3+YtU3rZp6y8/0kqva2r93/ufpigiHTQhCQ/ZyX58=
Subject key identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 4EB7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
Manifest number: 4EA6
Signing time: Wed 09 Apr 2025 01:07:56 +0000
Manifest this update: Wed 09 Apr 2025 01:07:56 +0000
Manifest next update: Wed 09 Apr 2025 07:07:56 +0000
Files and hashes: 1: 5xiBP9oAgtPkPbuqp_jQN04CKOk.roa (hash: tceHGoGymQUtpl0azpN7OzZGjav6xnOi9XVl7tk4RAQ=)
2: 62dLcW3plavrpsIbNHqw720lfPk.roa (hash: gCTxCmZ8gdoRjQKUaCHDH/9k8CDn24niIaIerASZoKo=)
3: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl (hash: zTGqx6tyall1kBajyXvn8zfvTDzwpjVuMiTP7mvAnTA=)
4: a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa (hash: O0NyOV0UC0NpDn6gKD43mD7tWOO7tpD0289aGPnpmeU=)
5: qhqQ6XGpQKke9iH_XzcMeWU6yJs.roa (hash: SYubhtFtKwSFcNFEuS+OIUJ6kBhpjBEexfpRrZUfZr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20151 (0x4eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Apr 9 01:07:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=339CE041528F9C61F954C6F0EBB8166EFB62E93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:45:9a:5e:6f:d5:e6:df:34:4a:eb:9c:c4:
81:f4:30:d4:e4:49:ab:f8:bc:e5:31:7c:db:aa:97:
31:91:30:9f:12:80:99:cb:5a:5f:c4:27:6b:ff:98:
04:b1:a1:72:03:32:10:d4:8a:4f:15:6c:f9:a6:dc:
e9:7a:3c:4b:e9:3f:4a:06:90:33:ef:9a:76:36:87:
12:62:7d:94:07:fa:4e:d0:ee:c4:f5:00:b7:90:55:
aa:a5:79:23:32:36:02:0b:f3:98:c3:7c:fc:2e:90:
d3:c6:f4:e8:93:b7:f3:54:84:b1:ea:58:82:f0:9d:
6b:10:91:18:df:67:81:8b:c7:2c:6f:51:8d:b8:35:
cd:29:e7:09:5e:91:3b:4c:33:9a:3b:96:08:6d:96:
a1:0d:00:d2:27:04:6c:d1:1f:40:8a:7c:4f:c0:a8:
92:65:1c:41:32:41:37:bc:67:f4:6c:10:94:51:b1:
07:be:ec:21:57:6a:0e:4d:ac:26:1f:aa:c5:19:11:
f3:1a:8b:28:f7:a0:67:25:b5:b5:62:fa:14:9f:5c:
fe:ab:b5:25:c0:eb:c0:f4:c2:57:0f:14:82:e9:7f:
2b:b8:97:cd:4e:3e:53:b5:d8:2c:a2:6d:73:69:3f:
5f:56:4a:94:3b:d3:ff:b7:ff:9f:8f:d8:94:9b:d1:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:1a:b7:de:66:08:4e:86:c4:b8:6d:1b:e2:b4:b5:9e:f5:7a:
df:59:dc:0f:22:d9:60:6f:05:a8:99:d0:a3:85:d5:74:57:07:
8e:63:7c:15:02:f2:94:ca:24:d8:53:3e:1b:a2:b5:a5:8b:19:
9f:6f:53:61:2e:ef:0d:cc:12:41:c0:4f:39:ca:76:6f:0a:cb:
46:26:29:9c:df:41:3e:cb:b7:72:95:50:a9:0c:e1:5c:7d:9f:
7f:32:d5:7b:9c:85:51:04:f3:bc:f1:c2:02:09:f7:c7:fd:6e:
45:8e:f5:95:f5:18:f0:d1:97:54:ec:a0:5b:bc:9d:9e:74:ce:
c7:5b:b3:d5:b2:91:a0:c3:38:48:9d:ba:d4:85:3d:d8:bd:e6:
7a:62:1d:b3:03:71:b9:9b:9a:eb:bf:19:b8:be:6a:b7:0e:0b:
3d:a3:7d:1f:0b:c3:f2:3a:8e:4c:60:ba:5f:e1:57:8c:eb:aa:
1f:24:41:30:96:92:93:28:e5:ed:ed:f2:f6:d0:f8:f2:c3:90:
e1:de:ab:42:e5:c2:ce:ab:40:19:12:61:3f:95:0e:08:b2:89:
51:30:32:02:3b:5c:a6:67:3b:7d:db:55:f6:b4:85:af:ed:76:
a1:41:59:52:00:73:fa:b3:2d:d0:78:b4:f9:f9:ec:7b:89:cf:
ff:42:bb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:59:35 2025 by rpki-client on console.sobornost.net