Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
File: 0qtsm24WUzTAMtBR1fx9FUfk41M.mft (raw, json)
Hash identifier: yLHn46Q32yrxQxUakgcRcIxYTzth5CWlChxBK7d7jEY=
Subject key identifier: 5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1B57
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
Manifest number: 1B47
Signing time: Mon 28 Apr 2025 19:36:33 +0000
Manifest this update: Mon 28 Apr 2025 19:36:33 +0000
Manifest next update: Tue 29 Apr 2025 01:36:33 +0000
Files and hashes: 1: 0qtsm24WUzTAMtBR1fx9FUfk41M.crl (hash: 4R/XpNaT9zSRO2w0904Mil8S8A4T9JepNd7FHqA1QAs=)
2: 2HOU41wf-RNx3ns6fUrUfDuRc6U.roa (hash: b3lr36MN4jCPuHOJb0pCCMEylOVXJG558DXiQogiClM=)
3: anYE50FB83Biwm9Cdfrin1Pdke4.roa (hash: H3AxRLrszvRvgNqwfmKEg+aMan4hBV5gw92ZRcjtfKI=)
4: hClPUnKZuAxsWwfQLw22FkUyHeM.roa (hash: 3jlVgVH+FCbudtpl6tLV+UmB6U3EaSEXQMSz/+0UPtI=)
5: jNiTXNtw-NVk-9eAX-55MR07eeA.roa (hash: XSnjJtxlfKEVYaAn23dvkns4Olz0nlV680zSSdJIpw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6999 (0x1b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Apr 28 19:36:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5C886375A6AB13626F4544945D738712057FDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:28:bb:7c:1a:f0:d3:9f:66:23:b6:41:bf:
5a:eb:0b:09:49:fd:ac:89:14:fe:ec:a0:d1:e0:65:
77:49:e6:c8:39:06:c2:69:5a:81:ee:e0:f8:9f:39:
b8:ec:a3:a5:ae:85:61:b1:14:70:fa:d2:10:83:9b:
b0:f2:5b:b8:40:03:f4:49:cc:59:26:8b:f0:ba:1c:
a6:54:6f:00:d5:82:a9:d2:72:57:bb:46:7d:03:6b:
d2:97:36:39:77:67:86:9e:6a:b5:67:1e:62:a3:51:
d8:db:94:b3:b3:5c:71:03:0d:43:a8:49:2a:92:25:
ee:67:1d:93:11:93:8d:1a:35:32:ac:75:3c:2c:75:
17:56:7f:b3:cc:59:dd:00:02:7b:58:22:e8:30:c3:
b5:fd:4d:e1:dd:1a:78:3d:4f:63:c4:d6:ea:20:59:
20:ca:5e:29:f8:c0:9d:a4:54:b1:3a:0b:9b:60:a7:
80:84:66:ca:75:d4:cc:73:cd:bf:e8:9f:79:b1:a3:
0f:f4:fa:24:0b:81:9a:4b:7e:61:40:19:4b:fb:b0:
42:ff:13:bb:41:8b:ab:d2:52:5d:f1:4c:ca:d1:8e:
74:c5:5d:d2:c5:d0:39:75:b2:43:6e:ea:68:b7:6c:
e7:16:ec:6b:c2:3b:45:20:37:9e:1c:21:3e:6a:23:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:63:75:A6:AB:13:62:6F:45:44:94:5D:73:87:12:05:7F:DA:AA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9f:b6:f1:4d:38:1e:4e:19:45:19:e0:31:d7:1a:6b:63:ad:
11:f7:a5:2e:6a:47:cc:0b:ed:5f:f9:6a:79:9b:e2:d6:63:06:
6b:a9:6d:4f:df:5e:0a:27:61:94:bf:9e:07:a1:ce:96:a4:bf:
73:c9:d9:4f:59:0b:2a:74:d0:39:53:7e:ef:a2:b6:77:7b:25:
9a:03:9a:15:82:10:b6:47:b4:aa:99:16:a8:c8:2a:ff:49:c4:
16:7f:30:5d:6a:02:8e:43:1d:7a:b7:4a:74:7d:37:cf:b2:6d:
ec:98:9f:8f:f1:8b:73:92:cb:64:33:8c:b1:71:0f:14:d4:b8:
40:6e:86:93:4c:72:70:c7:7c:04:e7:dc:3b:7a:b5:71:78:62:
76:b9:89:b5:a1:f1:56:9b:7c:ac:53:42:a7:ca:f1:c4:c9:90:
f1:89:6e:97:89:38:04:93:32:b3:14:d2:12:e8:71:5f:c0:98:
ab:43:32:b5:4e:20:01:ce:9a:16:1f:7b:f8:1b:eb:e1:bb:ec:
2c:1c:2b:8c:02:d0:9a:bc:b1:46:59:81:a6:44:8e:c0:33:29:
94:00:66:15:ff:96:23:be:ce:b3:45:f0:14:c4:5a:a9:c6:ea:
21:28:c9:32:b7:75:57:54:3f:90:c0:64:29:21:0b:04:2e:e6:
4a:5d:e1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:43 2025 by rpki-client on console.sobornost.net