
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
File: 1rsep985B3YngQY-7FeZ2Qdz2cI.mft (raw, json)
Hash identifier: 6AdkJFhgaeIQpJRv0ETJndiyMRW+7eb/FoDrGAZxd3s=
Subject key identifier: A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08
Authority key identifier: D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2
Certificate issuer: /CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2
Certificate serial: 4FB8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
Manifest number: 4FB8
Signing time: Mon 28 Apr 2025 19:41:53 +0000
Manifest this update: Mon 28 Apr 2025 19:41:52 +0000
Manifest next update: Tue 29 Apr 2025 01:41:52 +0000
Files and hashes: 1: 1rsep985B3YngQY-7FeZ2Qdz2cI.crl (hash: Pu8cTpCKDpY8Z49mGnCrFVHqpEb6vrHXCEa3JKV2cF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20408 (0x4fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2
Validity
Not Before: Apr 28 19:41:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A144D761B98C3D6E46F99E2385934E207F3F5608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:8d:e3:1f:16:6d:a5:05:7c:2e:71:f0:c5:
80:18:2c:f5:ec:f3:a6:6b:0d:9d:64:b9:17:52:69:
6f:ad:06:89:79:31:51:8b:38:54:24:21:0c:51:7f:
7f:2c:03:bc:de:70:b6:81:21:2a:5e:d9:e8:64:c6:
58:ee:55:18:8f:c8:1e:4f:a7:a1:62:0c:c5:e0:d6:
6e:9b:98:24:01:5b:8d:77:19:78:c9:24:d8:d0:72:
11:1a:8a:e8:dc:03:ff:57:96:aa:a7:5f:86:ba:9f:
c4:9e:3b:8b:ed:d9:eb:9f:dd:60:33:f4:bc:df:58:
13:04:46:da:ba:9a:30:2e:eb:95:ca:cf:9c:d1:b5:
11:0f:fe:76:dc:74:ac:90:b1:e2:06:77:63:f5:64:
11:97:9d:91:29:55:ba:46:bf:08:bb:94:87:e0:39:
a7:0b:f3:e9:5f:c9:f3:1c:9f:10:73:d0:30:ae:23:
6b:b0:d3:5f:47:7e:3f:c8:d1:42:a5:1e:42:12:72:
5d:27:dd:4e:40:ab:b5:0d:ba:05:58:d6:bb:6f:74:
50:2d:45:53:a8:a1:17:22:0c:d7:6f:85:71:f4:22:
d4:81:9c:a3:51:c4:06:ed:54:71:07:5f:d7:b2:49:
18:9b:2c:3b:cd:7d:1f:2b:f6:c1:40:71:20:e8:01:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08
X509v3 Authority Key Identifier:
keyid:D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:ab:c2:5a:b3:6c:a3:83:95:e2:5f:61:dd:2b:ba:79:8f:
55:69:ee:13:6f:35:6f:16:25:a3:3d:11:0e:2a:34:3a:30:8c:
65:24:89:d8:5f:e9:1a:b7:a4:68:c7:d9:88:4c:46:21:b7:bd:
98:38:1e:02:20:ee:d4:25:9f:1f:dd:7a:a2:63:7a:fe:14:e8:
64:b9:12:c2:41:7f:70:69:79:84:79:30:2e:9d:76:08:24:b4:
cf:5f:40:e5:27:ba:25:ad:b3:f1:cd:62:0e:d6:cb:83:6c:1e:
74:d8:42:f4:8c:a3:44:47:27:6b:0d:e3:a8:3e:e8:26:f2:d1:
08:9e:e8:86:01:a8:51:df:b8:e8:1f:fe:ec:43:53:d8:75:0e:
70:3d:e3:e9:1e:8f:7b:01:06:dd:89:07:20:c3:89:14:c7:5b:
77:1d:8a:b6:50:28:42:a8:b8:6e:91:13:99:25:d2:7e:d2:e8:
b3:ed:72:99:72:ce:51:d4:9d:95:3d:7e:fb:e4:4d:46:46:fa:
c8:d2:d4:d8:94:d1:c1:1e:48:0c:36:22:72:6d:5f:6b:4c:1f:
aa:90:0c:85:de:38:f8:d1:5b:c1:4f:e3:55:20:74:60:31:f9:
fc:46:ab:9d:ed:a7:d0:38:cf:1c:e4:d6:c1:cc:96:24:5e:d5:
80:5d:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net