Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
File: Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft (raw, json)
Hash identifier: a7muigSjpp/jo8RnLJB4+oQOzcDhUbLL16ByA9zIy+U=
Subject key identifier: 94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE
Authority key identifier: 0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E
Certificate issuer: /CN=0F28658359C977322171F402332342C31DD7C56E
Certificate serial: 05F5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
Manifest number: 05F5
Signing time: Mon 28 Apr 2025 19:39:01 +0000
Manifest this update: Mon 28 Apr 2025 19:39:01 +0000
Manifest next update: Tue 29 Apr 2025 01:39:01 +0000
Files and hashes: 1: Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl (hash: FiZ0ehiJckVNZawoHi1djhW2oAPRSgj+zmUoXAcwXzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F28658359C977322171F402332342C31DD7C56E
Validity
Not Before: Apr 28 19:39:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=944E1C38AFE2E230952C6488E7634B3C0D46DAAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:bf:39:ef:ea:19:21:97:bf:5d:97:ce:93:
81:d6:bf:9d:4a:29:d2:34:01:33:c8:a7:bb:48:af:
f2:bb:99:a9:7a:70:87:2e:53:bb:e2:64:38:38:ec:
52:08:cf:bd:d5:5e:8d:25:e0:84:7f:a1:07:46:1c:
32:52:cf:d6:e0:b3:ba:d5:f0:18:49:16:0d:ce:5d:
e2:ea:f5:b3:6a:28:c8:31:d1:04:b5:cf:2f:05:30:
93:4c:9c:21:98:42:d9:a2:35:08:65:c8:3b:02:20:
ba:01:e2:31:80:ee:1c:2d:50:1b:d9:18:e3:cb:42:
7a:ed:40:66:2d:b6:04:f7:06:a4:f2:df:a7:d4:d2:
47:af:a9:8b:72:90:bd:77:b9:92:e0:31:65:01:ad:
57:e8:be:7e:f6:0c:73:d5:39:e7:6b:2f:8a:52:50:
4d:7e:25:ba:da:e8:e4:94:03:8c:15:e0:ed:d8:27:
df:cf:40:c0:12:69:ed:58:fe:cc:8f:89:28:96:a9:
fd:46:15:0e:bd:40:b0:a8:d5:6e:b6:f4:51:7f:84:
53:f0:ca:fc:1d:7b:6e:09:71:67:bc:b6:b4:ab:3b:
cc:42:df:c3:23:1c:53:0e:09:8d:0a:f3:e5:ba:a1:
d3:f9:2d:22:6b:6e:27:41:91:44:20:85:96:3c:9d:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:1C:38:AF:E2:E2:30:95:2C:64:88:E7:63:4B:3C:0D:46:DA:AE
X509v3 Authority Key Identifier:
keyid:0F:28:65:83:59:C9:77:32:21:71:F4:02:33:23:42:C3:1D:D7:C5:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/Dyhlg1nJdzIhcfQCMyNCwx3XxW4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d7:c1:a2:5a:2f:42:55:ac:e1:ab:a6:38:3d:ce:8a:b3:91:
b9:f5:08:1f:38:5d:bd:01:e3:76:71:1e:10:86:de:61:60:71:
44:b2:ae:6f:c2:ef:95:f2:1c:18:12:ab:c9:f1:3b:5b:26:ef:
12:6a:ab:a9:8b:ca:28:b2:59:76:85:4c:36:e5:99:fe:98:77:
a2:b2:91:04:6e:7d:0a:46:68:d0:e1:9f:f3:40:b6:85:07:e5:
39:0a:b0:29:71:ef:50:30:4e:9d:ad:40:c3:a8:57:de:c3:78:
30:e7:43:8a:e2:07:ff:0a:08:26:2e:14:72:9e:e9:b4:3a:7b:
64:72:cd:29:1a:fe:d5:b1:4c:74:40:cc:7c:64:34:3e:f8:c0:
65:1e:be:16:48:b5:a8:e3:93:09:aa:2d:73:77:61:de:79:16:
1f:0c:49:08:b0:7d:d1:c5:12:19:aa:80:61:87:95:a5:e1:07:
6b:5c:48:eb:41:76:a8:a6:c9:df:ff:3c:89:61:e3:97:2e:2e:
08:67:88:2b:68:82:16:0d:30:4f:ba:f0:5d:ee:8b:31:2e:ed:
cb:a0:a5:88:25:c0:35:0c:24:b6:0b:7e:75:dc:b1:9c:f7:75:
ef:a0:84:ed:38:da:1a:2e:e6:a3:78:32:a2:f8:f5:5c:d4:d7:
91:83:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net