Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/kPMOHfMn0QOQfxvgjtPqZL-3eOM.mft
File: kPMOHfMn0QOQfxvgjtPqZL-3eOM.mft (raw, json)
Hash identifier: gkGKRacxTFqRf5HNRur60DUwFHKME3j9mSh2w49ynZQ=
Subject key identifier: F7:CE:72:31:FE:6F:7D:35:AC:67:E1:25:13:0F:01:40:32:45:BB:CE
Authority key identifier: 90:F3:0E:1D:F3:27:D1:03:90:7F:1B:E0:8E:D3:EA:64:BF:B7:78:E3
Certificate issuer: /CN=90F30E1DF327D103907F1BE08ED3EA64BFB778E3
Certificate serial: 0904
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kPMOHfMn0QOQfxvgjtPqZL-3eOM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/kPMOHfMn0QOQfxvgjtPqZL-3eOM.mft
Manifest number: 0901
Signing time: Mon 28 Apr 2025 19:40:55 +0000
Manifest this update: Mon 28 Apr 2025 19:40:55 +0000
Manifest next update: Tue 29 Apr 2025 01:40:55 +0000
Files and hashes: 1: SGpuOxsalusTzpYR3fphfkpzMVY.roa (hash: YMN9QVglyHTZ+uAe4m7iUyKbPe/xcnJgsyMEy+dbYZI=)
2: kPMOHfMn0QOQfxvgjtPqZL-3eOM.crl (hash: p3puvn0jOk06VYk6mPE1R8Ke+M3owiHV7hZYqX8erUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90F30E1DF327D103907F1BE08ED3EA64BFB778E3
Validity
Not Before: Apr 28 19:40:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F7CE7231FE6F7D35AC67E125130F01403245BBCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:cd:57:be:fe:14:84:57:30:f0:64:79:4f:
fe:86:52:f9:94:99:db:ee:be:6b:7c:2e:c6:ad:a7:
d2:8f:b5:7b:ea:3b:38:7d:1d:b7:ec:45:19:15:95:
0a:c3:56:ba:78:7b:ea:a0:5b:fc:09:f9:8c:2f:33:
36:a8:c7:a2:89:ef:ab:26:8f:90:e4:8c:f1:90:02:
6f:3c:40:d3:e8:96:70:1a:d4:d6:c2:4e:95:c2:9a:
12:9e:ec:9f:ab:8f:64:45:bc:54:43:a2:fa:46:16:
9f:3c:32:7e:26:a3:47:f3:1a:87:0b:67:c8:c4:e3:
23:ed:62:52:b1:bc:a6:5e:e7:66:ec:e0:c6:a7:25:
d2:ea:75:e5:81:9d:b0:8b:d7:ee:98:06:11:f2:35:
d1:87:7c:a5:02:89:e0:65:e5:b4:05:38:fe:d9:e9:
6e:92:b0:2f:28:b2:59:0c:66:27:a0:aa:a5:01:ac:
58:eb:7e:3d:12:fb:eb:0f:a1:9b:02:cf:2f:e2:70:
f5:40:fa:b3:92:25:64:a1:eb:a0:cd:57:11:b8:f4:
35:e2:92:21:db:d8:b5:86:1d:02:a2:e9:d8:31:1e:
0b:7a:da:5b:df:0c:bc:2c:c3:75:e1:89:27:97:cb:
12:7c:a2:ac:8e:ba:9a:2f:e9:21:78:35:47:61:d7:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:72:31:FE:6F:7D:35:AC:67:E1:25:13:0F:01:40:32:45:BB:CE
X509v3 Authority Key Identifier:
keyid:90:F3:0E:1D:F3:27:D1:03:90:7F:1B:E0:8E:D3:EA:64:BF:B7:78:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/kPMOHfMn0QOQfxvgjtPqZL-3eOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kPMOHfMn0QOQfxvgjtPqZL-3eOM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/kPMOHfMn0QOQfxvgjtPqZL-3eOM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ee:af:bf:18:a5:2d:2e:9c:14:ad:bb:7c:72:b4:b9:4d:66:
4c:34:40:78:c6:9d:1f:21:90:1c:3a:81:0f:a9:f6:ca:0f:8b:
75:6f:f4:72:53:25:88:87:a4:d1:e0:7f:e6:9b:64:b9:bf:35:
aa:67:39:1c:37:7b:db:4d:bd:f1:12:eb:10:75:9f:ac:44:58:
e4:d0:af:68:8b:db:0d:df:fe:e3:54:c0:45:c1:9d:c9:71:e2:
f4:9e:6d:c6:a5:91:d3:f2:a9:4c:c5:e4:d1:ad:7c:c4:ab:4a:
fb:23:d2:1e:b7:c2:f8:7c:af:45:24:da:fd:b7:10:3c:32:5f:
f5:95:94:51:96:5c:78:0a:b0:fa:39:9d:e0:02:d4:83:46:b7:
c3:e8:87:02:59:43:6e:dd:80:db:b0:d0:81:b5:51:da:c5:f2:
25:1d:ba:20:fd:ca:dc:4b:a8:74:b6:5b:bf:39:c8:58:57:76:
00:df:4a:12:6d:7b:bf:76:9b:1e:de:b8:2f:22:bb:0b:9e:3c:
2b:64:a4:44:0a:ea:e7:17:62:00:f8:4a:6f:c0:d9:80:c8:22:
76:a2:3a:17:b2:de:29:93:c0:44:9d:35:0b:c5:75:44:58:7e:
6b:84:67:66:fb:2d:9c:e3:83:cc:77:10:55:48:55:b2:bb:9d:
98:27:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net