Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2292/kIQDi2b0UmxBx2aNFCjNIrM_vng.mft
File: kIQDi2b0UmxBx2aNFCjNIrM_vng.mft (raw, json)
Hash identifier: +CFgrE/yQ5+qtY3ldiL93rbGBnoP+42N6s6FpXe6CEs=
Subject key identifier: 56:8C:CE:B4:B1:41:9C:6C:D2:B3:58:86:1A:C5:BE:2D:44:30:92:2C
Authority key identifier: 90:84:03:8B:66:F4:52:6C:41:C7:66:8D:14:28:CD:22:B3:3F:BE:78
Certificate issuer: /CN=9084038B66F4526C41C7668D1428CD22B33FBE78
Certificate serial: 114D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kIQDi2b0UmxBx2aNFCjNIrM_vng.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2292/kIQDi2b0UmxBx2aNFCjNIrM_vng.mft
Manifest number: 114A
Signing time: Mon 23 Dec 2024 18:23:21 +0000
Manifest this update: Mon 23 Dec 2024 18:23:21 +0000
Manifest next update: Tue 24 Dec 2024 00:23:21 +0000
Files and hashes: 1: 1eAS7-hUU41CTNzjdXn_5f-4mfk.roa (hash: TJcoDrqM0c5Y89PzjxvrShrvCZeh2y3C8O6Py8QtCZI=)
2: kIQDi2b0UmxBx2aNFCjNIrM_vng.crl (hash: MxMB2eKcUQnrR566PmZROhOubCK5Tn45+gTFz/L7NUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4429 (0x114d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9084038B66F4526C41C7668D1428CD22B33FBE78
Validity
Not Before: Dec 23 18:23:21 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=568CCEB4B1419C6CD2B358861AC5BE2D4430922C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:66:ea:ce:41:dc:81:61:5a:19:48:b8:2e:
aa:34:54:2f:d4:cf:5b:0f:7b:a6:82:83:36:2c:ba:
72:f5:92:c1:f8:f1:62:9b:72:0c:a8:a2:15:f1:da:
e8:a8:6b:d7:81:3c:27:66:69:ff:54:1e:ef:ee:1b:
a2:90:c5:84:b1:2a:a0:d4:f9:62:3d:4f:e3:f8:ed:
b3:a9:84:8f:77:3d:58:cc:16:c7:cd:fd:fc:9e:52:
d8:ae:51:02:4a:8c:b8:e8:eb:ab:1e:21:5a:8e:10:
05:4e:9d:2b:29:4a:b6:de:7a:f1:0f:7e:9f:bc:3e:
4a:34:f3:fe:93:29:9c:e5:62:85:6f:58:ae:6c:61:
f7:b1:e5:2d:6b:85:c2:3c:00:ea:e1:8d:42:4a:47:
3d:b3:b8:76:7e:b0:5e:68:a5:19:be:f5:12:27:30:
ee:08:3d:39:84:b5:a0:7c:fc:d9:c9:85:63:95:a2:
92:04:cb:eb:35:d1:69:6d:7b:d2:5e:b8:f3:3a:1d:
d8:85:c0:3a:db:7c:92:8f:fa:f2:6b:65:76:9b:15:
dd:f6:22:f8:2e:1a:c9:39:7f:c5:a5:90:3c:ba:a7:
a0:b3:3a:a0:ff:8b:4c:a6:1f:02:5e:a4:18:ac:04:
ea:1c:57:9e:38:f5:e8:72:ea:46:ae:39:3b:4a:b1:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:CE:B4:B1:41:9C:6C:D2:B3:58:86:1A:C5:BE:2D:44:30:92:2C
X509v3 Authority Key Identifier:
keyid:90:84:03:8B:66:F4:52:6C:41:C7:66:8D:14:28:CD:22:B3:3F:BE:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2292/kIQDi2b0UmxBx2aNFCjNIrM_vng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kIQDi2b0UmxBx2aNFCjNIrM_vng.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2292/kIQDi2b0UmxBx2aNFCjNIrM_vng.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:8e:7a:8f:fe:e0:56:10:bc:ca:c8:ad:da:f3:0c:e4:d6:
6c:35:33:16:5f:e7:fa:42:3f:a6:7f:cf:f1:bd:4f:24:15:c0:
7e:6e:44:fd:34:6b:75:ad:67:fe:a9:c2:0f:c5:f2:cb:66:fb:
30:1f:43:c9:36:80:12:7d:da:c2:6e:12:e6:53:d3:41:70:f7:
5f:a3:67:74:c6:4a:96:13:2c:86:2b:8a:c0:1a:b7:68:ff:da:
b6:a4:3b:d7:35:db:4f:0c:de:e4:a1:cd:b5:9a:1e:7a:bb:e0:
6e:74:64:0f:c0:d9:ae:ad:1d:e5:b5:7f:a3:6d:3c:cb:a5:89:
36:47:ed:1f:9a:f1:7b:00:2b:f2:d5:b5:b0:3c:e1:eb:77:cf:
01:08:a4:27:01:68:58:2d:29:99:88:e0:a7:12:10:a2:f6:5d:
83:1c:2f:f3:03:cd:fc:8e:f9:64:16:eb:c0:b0:2a:95:31:cd:
c1:99:46:18:d9:ac:90:e6:40:cc:82:c3:32:1b:3b:77:c4:52:
66:87:38:49:7f:f3:2d:a3:52:04:94:ca:04:c5:52:06:99:cf:
5f:01:3a:30:10:5c:bc:f9:f3:56:a0:36:8a:0a:2f:06:c9:7f:
94:fc:26:d2:b7:d3:47:e3:d5:34:f7:9b:f2:de:b0:b7:a8:e3:
a5:c1:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:23:24 2024 by rpki-client on console.sobornost.net