Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
File: -ta0PAnQSQoN9_iR359jtSDPIQ8.mft (raw, json)
Hash identifier: XKnGUvwmiBcmOsTbv2dctkO48MfrZIThdgt6mT8csGw=
Subject key identifier: 4B:CC:44:71:84:49:7A:8F:AE:B3:76:9A:D7:67:F2:E2:87:1D:2E:AC
Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Certificate serial: 0E77
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
Manifest number: 0E6F
Signing time: Mon 28 Apr 2025 19:36:45 +0000
Manifest this update: Mon 28 Apr 2025 19:36:45 +0000
Manifest next update: Tue 29 Apr 2025 01:36:45 +0000
Files and hashes: 1: -ta0PAnQSQoN9_iR359jtSDPIQ8.crl (hash: WZxUA18OlxWdpIUulMvkmTv+aThxe6epVNwuzRRhtBc=)
2: jZYYEWocgaa7kE62wHrtcbhmeqg.roa (hash: imxvfDsgpwHiKGk2ShLZNPp9PfRPBN6EzLl65EE3xwI=)
3: quj3JK30OXbnje-5SHznSVufOkU.roa (hash: QFco1R1nZco2MXFS8wJ24/UVjY0SEkcS4e5JbGrfWNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3703 (0xe77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Validity
Not Before: Apr 28 19:36:45 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4BCC447184497A8FAEB3769AD767F2E2871D2EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:ee:2b:68:e0:56:e6:b1:31:28:fd:47:ec:
4f:11:cb:57:24:26:ab:d1:62:af:be:7f:2a:fc:e0:
a6:ca:09:fa:df:39:bf:1a:4d:ee:e7:d2:04:13:4c:
ac:e2:0e:1e:ad:f4:e7:66:10:72:a4:dc:dc:58:0b:
2b:30:18:84:09:a9:c2:92:f5:48:0c:e0:c7:e2:e8:
76:37:fe:e1:0b:b8:b7:cc:b4:a7:1c:f6:f0:00:a2:
4c:88:c2:0d:1c:77:ee:ed:5e:1b:ab:6c:63:b1:fc:
b8:42:c7:dc:5d:96:72:b1:a2:f2:ab:6d:8b:6e:f6:
28:87:66:1f:a9:05:09:e7:13:7d:9d:7e:49:b9:35:
62:13:98:cc:ad:e2:3f:3e:50:3a:6d:ad:48:06:a3:
4d:d0:25:33:71:7f:f4:45:31:2e:da:ea:70:d2:f2:
bb:86:d1:7d:04:a2:98:b1:ca:26:25:9b:b7:84:56:
af:f6:ae:d6:85:b8:1a:b5:78:24:84:58:57:60:b1:
ed:e2:3f:f0:d1:fa:4c:57:30:15:22:fa:37:8b:f8:
10:fd:c8:f7:0a:50:d3:19:f8:15:cd:0d:b4:c8:b6:
35:e0:c2:1d:71:28:31:3d:05:53:bd:9f:f7:f2:c8:
51:e0:c9:cb:a8:e3:82:d0:1e:9e:d2:83:a2:44:6e:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:44:71:84:49:7A:8F:AE:B3:76:9A:D7:67:F2:E2:87:1D:2E:AC
X509v3 Authority Key Identifier:
keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:80:06:bc:66:03:60:a0:47:0d:b7:1c:23:35:88:06:9b:f5:
8c:21:72:8b:ca:15:92:08:c8:e5:5c:5e:e5:13:7a:6e:00:0e:
a7:6d:96:7c:9b:33:5d:b1:ee:e4:41:10:cb:93:3d:ca:88:ed:
2b:c7:83:d7:fc:f7:50:1c:bd:0b:96:23:66:87:ce:bb:8f:ea:
6d:74:42:6a:b7:66:3c:a7:cd:d5:2f:2c:4c:2d:e3:df:c5:52:
c0:ef:91:07:5d:9f:aa:93:da:88:81:d1:05:57:d9:9a:a8:54:
1e:be:0f:36:7c:c1:99:68:98:73:2b:3f:bf:09:2c:71:21:8f:
f1:a3:00:e5:a7:47:f5:fc:57:7d:2d:32:02:e9:99:b1:5f:c6:
0f:38:39:f0:2d:f7:ce:87:8c:5c:72:8a:dc:d1:72:79:7a:76:
26:ca:87:c8:6f:a9:27:d5:24:a8:58:81:0a:e8:37:70:50:1c:
25:a7:33:e2:a4:59:92:1f:94:b7:50:e0:5d:f4:31:07:1d:9a:
99:61:91:fc:0a:ba:4b:d1:3d:b8:70:3d:79:bc:fc:a8:37:1f:
26:c2:18:f3:7e:0f:4f:b3:7d:07:53:3d:8f:a7:0f:54:9d:4f:
00:07:1c:d7:83:93:dc:bf:9a:3a:d5:97:24:c0:24:14:f4:4d:
ba:db:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:37 2025 by rpki-client on console.sobornost.net