Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
File: AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json)
Hash identifier: 9roZiaHIaCvk4OAs+vNMKxIM1t56Hc5L/mTbOY98Chw=
Subject key identifier: 0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 23DA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
Manifest number: 23B8
Signing time: Mon 28 Apr 2025 19:40:13 +0000
Manifest this update: Mon 28 Apr 2025 19:40:13 +0000
Manifest next update: Tue 29 Apr 2025 01:40:13 +0000
Files and hashes: 1: 5VxcwIzNajDMHEYME1Yi6C_m-58.roa (hash: dDLOAOOftWIbv5I88SwAUdDrKySq1imBz6NTsUXSYc8=)
2: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: IBnv+fdUmU//YzVzlmrFvFKEdNPpFbxRSybW3SkP9fw=)
3: RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa (hash: 0/rtIA/CyHWaNlCG1HaTHIQcMOksE7XMp+JwopuZVL4=)
4: VGsDB4v3z34fgz6mTQpMiK6jV3E.roa (hash: ko073jVWr+L3zYWIN4KcfYIWAEUrrOH8DRWanxZK8OE=)
5: i9Wb0lXHusy29QdbWjgWITeMGUs.roa (hash: hVOE6xAI+JBYye91BoZfX5ItXD5PbDPtawX4vwL7d6k=)
6: mn_61Uh0dg5m8R77lzKSAlYF91o.roa (hash: 3ltxYACGJn82Squrtq08gjCr8hy92b30+efZms5okys=)
7: qp6Gf54HwcpxFNxE1V9IBQ1uTCc.roa (hash: +54+lOciLvOJSyFmNOuvRxquzUIP39hKyQLnLEeQ6lA=)
8: sfuB7dNVQ9f1FokZ_OrVFV_UCvI.roa (hash: i3ZyghyUgF4y+pkbHG5zVgIztn5YNrIiihQP1pglqiE=)
9: v76ZeUDL7XeuImG3Z6XfawB1r4s.roa (hash: 591TgDtgoDv30DyaGcx7qNWrjSUDGPFlI5TjhU5Rz0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9178 (0x23da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: Apr 28 19:40:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0ACA00C337354773164EFA107456DA00F2479420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35:
84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4:
15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5:
55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba:
61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c:
56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0:
bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d:
e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16:
1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60:
c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c:
87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e:
75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c:
fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b:
fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91:
a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70:
b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7:
28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:7d:2a:97:e0:d3:1a:53:4b:40:cc:31:3b:42:db:34:23:
f8:b8:00:5d:64:38:4a:73:a6:80:9c:7e:43:4c:15:9c:c7:74:
66:bd:db:3b:2f:f9:d5:26:65:c7:7a:5b:2d:1d:54:11:c7:9b:
3a:65:01:37:0d:b5:4f:8a:c2:86:6d:34:1c:0a:d0:e6:f0:04:
5c:12:77:64:35:52:fa:4e:1e:96:6a:9d:d2:dc:ab:09:68:27:
e4:a5:3b:4d:da:0d:d5:4b:14:dd:a4:a5:07:fb:ea:6c:d7:81:
e3:8f:cd:c3:13:4d:f7:c3:8f:24:f4:8f:4c:06:5b:cb:bc:01:
3a:2e:49:19:a2:ef:da:a7:ff:b6:4a:82:22:82:da:c8:68:6b:
d7:68:32:36:ec:2b:a9:8b:7d:35:c4:3e:de:22:a6:90:e7:c5:
41:f6:7c:12:11:13:4c:b2:83:8b:b4:81:ac:65:d2:38:f9:8b:
b9:ba:82:ac:8d:0c:e1:8b:46:36:42:25:25:1e:17:49:f4:c8:
11:4a:de:88:c5:78:83:50:1e:4a:2a:6b:38:a0:3c:b4:bf:c2:
a1:ca:d5:15:00:59:6e:37:4a:34:b2:09:d2:4f:42:11:4f:c4:
68:d7:6b:ea:f4:81:f6:14:cd:95:06:df:d6:e9:c4:8f:9b:22:
61:60:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:40 2025 by rpki-client on console.sobornost.net