Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.mft
File: 5nly8uDEjmq9G__KM5YicDZJm28.mft (raw, json)
Hash identifier: DYBbLPgUT1jggm9I8/Jy+BLRags7zUePCftDDZYmWCY=
Subject key identifier: E8:1B:8D:2C:D9:AA:BC:34:41:DF:C8:A1:75:68:18:54:1B:6D:89:DC
Authority key identifier: E6:79:72:F2:E0:C4:8E:6A:BD:1B:FF:CA:33:96:22:70:36:49:9B:6F
Certificate issuer: /CN=E67972F2E0C48E6ABD1BFFCA3396227036499B6F
Certificate serial: 0E2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5nly8uDEjmq9G__KM5YicDZJm28.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.mft
Manifest number: 0E2F
Signing time: Mon 28 Apr 2025 19:37:00 +0000
Manifest this update: Mon 28 Apr 2025 19:37:00 +0000
Manifest next update: Tue 29 Apr 2025 01:37:00 +0000
Files and hashes: 1: 5nly8uDEjmq9G__KM5YicDZJm28.crl (hash: ayribdZgE2YcG2agTGgq7HqeL77UOmGhHCURWVfyUMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3631 (0xe2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E67972F2E0C48E6ABD1BFFCA3396227036499B6F
Validity
Not Before: Apr 28 19:37:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E81B8D2CD9AABC3441DFC8A1756818541B6D89DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:11:47:e9:65:0b:f8:62:f2:4f:c0:1e:78:b5:
8a:c9:c5:07:a5:ab:c1:bd:2c:76:a6:79:a4:ac:7c:
bb:50:37:04:83:e6:0d:dd:01:dc:fb:d5:3a:f6:c9:
d3:1f:48:43:96:08:34:db:92:0f:54:3c:44:e1:05:
9f:95:d7:94:30:2f:be:81:7f:4b:84:83:93:9e:a9:
ce:ae:8b:36:1c:63:fb:d9:49:7c:0e:89:f3:33:f1:
e0:eb:56:ec:45:fb:f2:4f:fb:ae:f0:59:3b:7e:b8:
54:68:e7:44:a8:d2:bb:e5:1b:4d:42:e3:2d:ad:dd:
5c:53:b6:05:f2:3c:2d:a4:d7:a8:6c:aa:90:cf:3b:
ff:71:b2:50:0f:61:65:b5:5d:bf:1a:33:61:a0:7c:
4e:f0:7b:89:61:c7:ba:1e:ff:6f:91:e6:40:2c:f6:
fd:3f:25:3a:64:92:f7:78:8e:e6:b5:2b:58:48:aa:
d7:da:26:71:5a:dd:f4:bb:4c:9f:b7:cb:77:2d:df:
b3:cb:c8:6c:b9:1f:fe:03:7c:a7:a0:9c:65:ed:06:
97:b3:d6:a3:48:58:e0:ef:b8:7a:46:85:2a:ef:ce:
a7:9a:7a:8a:70:10:b2:d1:80:d6:89:33:ba:e4:ba:
d4:a5:ea:87:25:6c:0b:c4:8f:97:8f:1d:e8:96:e5:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1B:8D:2C:D9:AA:BC:34:41:DF:C8:A1:75:68:18:54:1B:6D:89:DC
X509v3 Authority Key Identifier:
keyid:E6:79:72:F2:E0:C4:8E:6A:BD:1B:FF:CA:33:96:22:70:36:49:9B:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5nly8uDEjmq9G__KM5YicDZJm28.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3215/5nly8uDEjmq9G__KM5YicDZJm28.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c5:02:19:b3:9c:f5:b3:74:cb:85:ae:48:9c:50:3e:35:9b:
37:d6:09:fb:27:5f:2d:85:b3:1a:34:42:7e:7d:11:cf:33:f7:
e9:96:59:d2:d4:36:73:84:68:55:3f:84:ab:c0:37:9a:15:5f:
cb:52:1d:45:71:de:35:37:00:fd:90:77:53:f0:f9:80:64:df:
eb:ad:66:b5:3f:45:67:70:cf:72:4c:d1:26:25:52:bf:1b:53:
b3:f1:4c:0b:53:46:2e:18:fd:af:bf:d0:78:c6:28:34:f2:fd:
d7:27:cc:51:1d:1d:a5:09:58:b2:dd:79:65:d4:85:56:44:ec:
b2:fe:5c:86:1e:b7:51:0e:dd:9b:96:cc:ea:62:49:9b:5d:55:
b4:0e:bb:96:9e:97:dc:0b:55:d5:36:40:bc:f6:05:d8:05:ed:
94:09:90:1c:27:44:5f:a3:ae:cb:29:24:63:dc:49:ef:6d:9e:
6c:5f:9c:f0:e3:8d:09:21:24:07:a6:60:0b:69:15:6b:e7:5a:
63:e1:38:c2:e7:40:6e:a8:a2:c8:a8:ba:a7:f2:f4:58:28:54:
4a:27:2a:2f:df:ca:15:e5:86:7b:87:ce:a1:13:93:27:67:c6:
05:c9:9f:88:7d:06:da:43:49:9f:fe:27:a7:13:2c:89:71:10:
77:e8:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:44 2025 by rpki-client on console.sobornost.net