Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json)
Hash identifier: GJ9cnam1GBhn1/YZo+CEEWPmHOO3vV72t0U9oK7jswE=
Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Certificate serial: 0900
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
Manifest number: 0900
Signing time: Mon 28 Apr 2025 19:40:55 +0000
Manifest this update: Mon 28 Apr 2025 19:40:55 +0000
Manifest next update: Tue 29 Apr 2025 01:40:55 +0000
Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: aLN/huWPYvwTMjH9MrV/PyCIYFHUbcHs18iejnWFvBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9
Validity
Not Before: Apr 28 19:40:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2:
c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23:
42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12:
ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67:
06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32:
16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1:
4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f:
c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a:
e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42:
ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6:
90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7:
d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61:
17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa:
e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f:
53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7:
45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b:
c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3
X509v3 Authority Key Identifier:
keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:9a:b7:3b:90:5f:83:67:01:09:79:be:fe:9e:0f:f4:d1:
6a:45:bf:c1:46:63:e5:21:86:76:f4:3f:fd:7b:ab:e5:28:e8:
29:f3:eb:d2:86:81:71:5c:fd:3d:07:3d:dc:5d:ee:ce:5a:1a:
fb:5e:60:36:ba:7b:6c:e1:f6:f2:e2:d3:cd:5e:6e:5a:ba:9c:
f2:65:1c:0a:20:ae:60:da:16:2a:0b:00:bb:b5:5a:f3:50:e7:
f6:c5:ed:cb:13:b9:f6:4d:49:74:9e:e6:b8:22:39:f9:d0:e9:
b1:c0:05:9a:c2:7d:d4:11:36:33:ad:99:92:0d:08:7b:90:ec:
e5:cc:77:90:74:c1:16:c0:5d:e9:2b:74:c1:ff:83:61:72:bd:
cf:c8:d1:c6:e2:03:33:79:99:07:42:7f:aa:b0:47:85:04:94:
4a:55:63:e6:bd:aa:80:79:bc:8a:3e:75:89:6a:be:8a:01:26:
d0:dc:12:3b:37:b0:40:c6:8a:ff:b1:75:59:dd:17:28:ef:57:
a0:b0:4b:bc:19:e5:e1:c3:d7:f0:98:cc:c0:75:ba:38:48:b5:
d7:44:1e:be:32:af:b3:7d:6a:ee:3e:1a:e9:36:ea:57:43:ea:
dc:ca:dc:ab:7d:fa:84:fa:79:ba:d5:f1:ae:fa:3a:cb:4d:2b:
06:97:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net