Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
File: OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft (raw, json)
Hash identifier: ErY2Eiwgc4+ZfyJHoNp8iuNlhy9OruYIuHZdGt7as4s=
Subject key identifier: D5:C0:84:64:B4:0A:63:4F:DB:E6:79:1A:74:15:94:0B:79:FA:BB:61
Authority key identifier: 39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
Certificate issuer: /CN=39E47899249325DB499BFC6910919D2F36003E9A
Certificate serial: 1CDF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
Manifest number: 1CD0
Signing time: Mon 28 Apr 2025 19:37:53 +0000
Manifest this update: Mon 28 Apr 2025 19:37:53 +0000
Manifest next update: Tue 29 Apr 2025 01:37:53 +0000
Files and hashes: 1: G5iEYI6Dwscu1XilnJmkTfSnjd4.roa (hash: x3CpaBWMVRnKyrGFZka1Ai0pi8wftnuSGn+H/aoW1IA=)
2: OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl (hash: aU9Vfk+N9dTY2mxuLsjPze0DkXQB+B8SmscsW+MkVuE=)
3: m8zlQDUB60ZgEGyYMLytgspKht8.roa (hash: uIqreK0uiS+D1JElY/pXyROsFto2K8/E77t/EU9ybng=)
4: vNjioWiQKWOYvKzvvRRsQO4AftA.roa (hash: lRDdC4pBhtHMqAtHZOgxXsE0QLSzXvk/ir07rNAjaKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7391 (0x1cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39E47899249325DB499BFC6910919D2F36003E9A
Validity
Not Before: Apr 28 19:37:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D5C08464B40A634FDBE6791A7415940B79FABB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:98:90:78:55:2c:20:cb:a2:b3:29:ed:dc:
f3:25:4d:a0:36:42:42:0f:12:8f:41:e4:92:79:28:
84:9f:f0:80:bd:6c:22:33:42:6e:fc:44:b4:49:8f:
14:81:bb:94:ba:44:58:be:45:f2:81:20:e0:88:86:
58:f8:ad:ad:97:46:6f:b0:8c:5f:7a:6a:df:94:a1:
cc:aa:33:73:1b:a0:87:17:0f:f7:16:c5:a6:a2:b6:
e2:f5:77:47:fb:37:85:e0:6c:83:fe:25:4d:9c:4d:
02:dd:6d:c4:91:58:3c:bf:a1:0b:f4:d7:35:e8:a6:
fd:f8:37:5d:de:04:60:5d:c1:e5:eb:80:48:8c:6a:
bc:f0:e8:37:54:ae:35:c7:dc:f8:98:71:d8:aa:f4:
e8:7a:ac:f6:b9:1e:60:c3:db:b9:ee:fc:9b:a5:24:
ae:78:51:b8:98:d7:6d:18:41:40:3b:4a:45:11:b6:
90:9f:78:54:34:31:c5:83:ce:a7:50:63:d3:97:f2:
ad:96:fa:ef:21:6a:0f:ac:00:2b:0d:93:44:b8:cb:
2f:57:49:37:96:0a:93:28:e3:64:ce:4e:56:bf:41:
4f:2e:1a:12:a2:6c:a4:f6:8b:bd:4b:12:88:50:0f:
e4:70:20:4c:5e:f0:84:70:4a:c6:9e:69:1a:39:8c:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:84:64:B4:0A:63:4F:DB:E6:79:1A:74:15:94:0B:79:FA:BB:61
X509v3 Authority Key Identifier:
keyid:39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5b:f4:71:f2:ef:03:c0:bf:5a:2d:29:85:5d:cd:45:b4:d6:
6c:d7:d9:e2:e6:05:52:c1:77:c8:76:9a:36:22:bb:ec:b6:91:
24:f8:75:28:1b:ef:b6:39:8e:2e:16:0f:b4:e2:8c:fc:d6:63:
ad:67:88:a4:fd:d2:30:dc:9e:1c:17:5a:65:ef:0c:d1:fb:f9:
e7:75:d9:59:08:33:2d:1f:31:00:11:b7:66:a4:21:de:11:7d:
67:8f:c5:cb:e0:51:17:29:24:f9:23:2c:1e:43:7f:4c:9b:d6:
96:91:39:e4:2e:e5:26:dd:8a:85:eb:05:c1:ab:e9:04:87:ff:
5d:84:3b:00:62:63:80:93:a4:6e:e8:48:48:1f:d6:66:39:97:
ed:b3:a0:33:07:71:b8:fe:d5:9c:ce:9c:4d:9f:d7:b7:ea:c2:
3f:03:63:6b:ac:6b:74:8f:be:20:97:de:7f:6a:69:6e:95:db:
08:6f:4c:d8:d3:a0:0a:b8:30:33:40:a7:f3:08:1e:2f:c4:52:
14:a1:09:ec:96:52:f7:c7:49:f0:cc:af:1a:3b:d6:12:69:e7:
45:55:17:ca:7a:a5:7a:3f:ad:33:2b:e7:84:7c:6b:36:f1:4c:
f4:93:60:76:cc:ae:2a:d8:b6:15:df:d0:25:98:1f:14:e3:d8:
1f:63:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net