Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft
File: rzr00B8M0Fbw4_aYgAsiOu53PSA.mft (raw, json)
Hash identifier: gaT4ZqIDxMI9UEh2VRYWrzr09Ov9VHbKX8cUFB+s4OI=
Subject key identifier: 13:F9:2B:2A:74:56:33:A9:8F:4B:51:2A:97:6B:DE:0B:BD:2F:07:CB
Authority key identifier: AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20
Certificate issuer: /CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20
Certificate serial: 2415
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft
Manifest number: 23FF
Signing time: Mon 28 Apr 2025 19:40:58 +0000
Manifest this update: Mon 28 Apr 2025 19:40:57 +0000
Manifest next update: Tue 29 Apr 2025 01:40:57 +0000
Files and hashes: 1: Kk7lkFGOd63QwS1t6Wm8i_dkaIM.roa (hash: 4azzc8YreuK6NU6y8WTs2uAQ4eEJtFH2AV2cGlG1rC4=)
2: d16R1vhzR6AdU3s3oYlV8svDpoc.roa (hash: pZyYQk5Fbz2ihWXOaIedm3qeVm2r1E2UFUu++wqvZGo=)
3: rzr00B8M0Fbw4_aYgAsiOu53PSA.crl (hash: +FdNlZhJGVJeyQ14i4+KLbbKZw9Y8a8zLG/H93c2X+k=)
4: w6v7yydptDXSZ48j16_eXtT0ihA.roa (hash: CWsOZMP55Xzr2Prr/bR0hScMOPX06WSPiTnRdohDoiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9237 (0x2415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20
Validity
Not Before: Apr 28 19:40:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=13F92B2A745633A98F4B512A976BDE0BBD2F07CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:e1:a1:be:b7:78:45:74:59:a0:58:31:fc:
11:35:85:ee:16:c7:ea:a4:6c:cc:e4:ed:f0:4b:67:
18:80:3c:e3:ab:c5:c8:e6:6c:a9:9b:df:9d:b8:2c:
32:e7:6d:38:a9:ba:fe:4e:5e:9b:79:8c:1f:23:0a:
5f:ca:7b:83:47:ca:c0:5f:64:39:bd:b1:41:1c:38:
3f:58:35:f5:62:9e:21:32:f6:ef:01:99:82:2b:79:
2b:f3:60:a8:22:f4:48:28:ca:21:44:9e:e7:0f:69:
49:d0:10:6e:c9:fb:ae:3c:ed:d3:6e:c2:6e:1e:3a:
17:cf:c6:e3:61:05:50:7a:8b:17:df:e7:8d:16:92:
0f:49:f4:3c:1d:ba:b3:65:fb:b4:57:39:00:41:a8:
a5:84:29:f5:e8:af:24:f7:d2:5a:a1:c1:cf:fb:e5:
ae:7b:8d:a9:9b:52:0b:91:e5:ae:4b:97:44:26:e7:
9e:5c:f6:dd:72:44:d2:a8:53:47:62:46:fe:37:46:
b6:24:10:a1:27:21:a8:dd:02:52:26:94:fa:c2:45:
dc:01:35:cd:74:bc:db:d9:f5:60:cf:ec:20:76:c4:
c5:66:82:57:fe:1f:56:f2:58:34:3b:8e:45:db:ba:
fc:56:ea:b2:23:d3:1b:19:43:6e:7d:e2:7e:98:f5:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F9:2B:2A:74:56:33:A9:8F:4B:51:2A:97:6B:DE:0B:BD:2F:07:CB
X509v3 Authority Key Identifier:
keyid:AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:1c:f8:5c:2e:6e:0b:a3:50:e5:1d:c7:a6:bf:85:df:f6:b3:
76:0a:3e:6e:6c:72:bc:c5:f8:0d:be:be:35:47:9c:f4:76:a7:
72:1d:6b:a5:bf:0a:bc:20:9e:b3:f6:35:16:2b:16:71:ca:97:
23:0f:76:d5:60:af:af:6e:34:3c:5b:16:b8:18:80:4b:11:85:
65:bf:ae:ce:47:73:8b:79:57:ef:04:00:d0:0a:48:c5:f3:b8:
e4:10:f7:16:b3:d0:2c:b9:95:66:ee:52:34:70:20:b5:64:78:
45:46:ea:1b:eb:c7:48:87:c2:af:7b:4e:c5:08:7b:96:34:da:
8f:71:9c:ec:3b:64:3d:eb:42:95:f1:78:d3:40:ae:44:c6:b0:
5a:cb:ed:b4:f9:5a:e1:3a:a1:af:a4:f4:c8:6d:83:51:be:f2:
9f:ae:eb:e8:80:cb:a1:5b:9c:fc:eb:60:2c:ae:88:94:4a:41:
20:d2:d3:5a:02:07:8f:a7:d4:d7:c6:6a:fc:b6:28:e8:4f:c6:
bf:4e:55:3d:c0:0b:4c:43:87:f1:93:73:b8:a9:8e:05:a5:f8:
8a:d7:ba:93:47:a2:ae:32:59:76:81:ca:a1:db:94:65:b9:2e:
ce:cc:0a:94:49:93:54:68:60:eb:43:8d:46:f1:76:85:80:25:
2a:d6:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net