Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json)
Hash identifier: x1T/Xbk1hqawbC4h3P3zykqGXBv7TOc0zTLHUmKP8cs=
Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Certificate serial: 0CA1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
Manifest number: 0CA1
Signing time: Mon 28 Apr 2025 19:40:38 +0000
Manifest this update: Mon 28 Apr 2025 19:40:38 +0000
Manifest next update: Tue 29 Apr 2025 01:40:38 +0000
Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: nSwlPCt+fWxCTjRPVgEdFZpeKZPKqd2X7EsB3vNsDd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Validity
Not Before: Apr 28 19:40:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c:
6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62:
a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5:
2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04:
54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03:
df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db:
c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2:
30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32:
00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92:
4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1:
6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac:
c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4:
24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c:
fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42:
8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc:
30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03:
1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
X509v3 Authority Key Identifier:
keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b3:c0:9d:e9:79:73:c2:56:18:14:e1:d0:ca:66:75:94:22:
9e:13:f7:51:1e:dd:74:16:46:3b:18:da:a2:56:f8:b3:49:18:
62:c6:e1:2a:65:76:6d:5a:ab:2f:c2:1e:fc:d9:bf:bd:fa:85:
7f:d4:f8:23:23:e0:0c:6c:9d:48:72:a1:1a:ca:d8:bf:16:52:
07:e4:57:e9:91:9d:5f:8c:7d:bc:62:ce:77:33:60:52:29:14:
66:2b:d4:7c:bb:30:5a:0f:24:e1:e0:38:83:24:7a:8f:35:cf:
e5:9f:cd:e1:8f:1a:6e:ab:39:11:e9:2a:d5:26:c0:10:e2:13:
a6:6c:17:c0:fe:d7:2d:82:8e:87:2e:f0:b0:c7:39:e0:1f:d7:
50:1a:a4:f3:ce:fe:d8:0e:40:80:57:1d:74:61:76:c7:33:59:
17:ea:6a:41:82:84:28:d7:e7:29:93:f3:e7:2a:4d:04:99:40:
5a:29:2c:d6:aa:08:1f:4c:40:a2:7d:e3:c9:5a:ad:76:64:74:
09:51:65:60:86:20:2b:f0:83:da:47:be:c0:18:c8:80:5b:18:
1b:f6:a9:68:e4:ea:f7:ed:52:6b:b3:b9:61:f9:a5:09:89:03:
60:dd:6e:a1:8e:a9:a8:3b:71:4a:79:3d:51:7d:ae:e5:9c:20:
91:d0:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:44 2025 by rpki-client on console.sobornost.net