Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json)
Hash identifier: f+rBNVAFwPPZY+DKa3KkSs/Op+VoZKKHR5y27T4MvHA=
Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Certificate serial: 05F7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
Manifest number: 05F7
Signing time: Mon 28 Apr 2025 20:36:27 +0000
Manifest this update: Mon 28 Apr 2025 20:36:27 +0000
Manifest next update: Tue 29 Apr 2025 02:36:27 +0000
Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: YVi64OZULosmfgyV7t5kYNx1v/hK7vspIHdfnWrdDn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498
Validity
Not Before: Apr 28 20:36:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce:
e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b:
b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d:
13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65:
ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30:
6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee:
3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50:
e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd:
66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59:
56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa:
72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36:
46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24:
db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97:
4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a:
e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea:
83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8:
4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0
X509v3 Authority Key Identifier:
keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9d:02:60:0e:eb:a0:ba:f2:70:86:d8:7b:42:88:ef:0a:55:
ca:1d:d5:9a:34:75:87:61:59:8f:78:df:16:7f:ff:34:ee:52:
3d:3c:f8:1c:35:2c:bd:93:55:c5:3d:05:17:cf:ca:86:89:0f:
60:db:c2:b8:73:cd:25:5a:df:b4:fe:33:e8:82:e1:e8:2c:36:
d2:b7:8c:e4:c4:ad:bb:eb:a2:83:f2:ad:8c:de:0f:7f:18:29:
4a:63:a6:a2:2f:bc:24:81:3f:58:96:f4:5f:5e:fb:ca:3e:cb:
70:10:02:44:98:09:52:87:cb:09:84:07:05:06:59:af:34:20:
ef:19:01:3c:72:81:b4:85:c1:49:57:cf:9a:8f:7c:3d:82:9f:
4d:07:76:a4:4b:27:72:47:ec:87:ef:0c:e1:fe:45:c5:9d:20:
0f:0d:85:81:1b:4f:d0:7a:f1:e3:d6:57:55:83:98:6b:a3:32:
43:05:88:7b:e4:c2:f4:09:08:f4:39:a8:c4:57:89:a9:c0:7d:
49:8f:9f:cf:09:eb:36:5b:2e:6b:b4:df:16:d2:73:8f:a5:e7:
d1:4f:9d:6b:17:9e:ac:14:03:94:97:fe:87:ea:51:31:3c:29:
e2:68:bd:6e:51:da:b0:84:a8:8f:94:a4:0a:ee:62:2d:04:b8:
05:eb:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net