Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json)
Hash identifier: UybTGrSKy8nmsEoA5ym2ValsExbjmVBSwmHRMoUChjM=
Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Certificate serial: 05E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
Manifest number: 05E8
Signing time: Mon 28 Apr 2025 19:39:09 +0000
Manifest this update: Mon 28 Apr 2025 19:39:09 +0000
Manifest next update: Tue 29 Apr 2025 01:39:09 +0000
Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: SAAAIlopA8PDduMZa/PqcefAcZADTeKbfDOrRmZlO70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1512 (0x5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Validity
Not Before: Apr 28 19:39:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24:
aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e:
ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae:
75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a:
08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44:
f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a:
13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1:
9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f:
3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b:
d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99:
26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28:
e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49:
5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a:
a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a:
87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28:
6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0:
d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
X509v3 Authority Key Identifier:
keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ab:a6:c2:4b:c3:71:dd:cb:16:b1:3f:25:e6:fd:cb:87:b8:
12:f5:60:35:76:90:c3:58:91:5f:d9:1f:32:39:61:f4:f2:23:
e2:ff:76:15:fb:96:5e:cb:75:12:a7:96:73:7c:45:fe:08:8c:
8e:2d:ba:bf:64:b8:7b:d4:6a:b1:19:57:73:8f:f6:4f:6f:44:
b6:76:a9:8b:92:df:d7:9e:33:78:0e:5d:f6:93:55:d5:62:dd:
e2:34:8e:0e:60:60:c9:9c:7b:58:6f:78:9f:b5:60:ae:1c:34:
53:e9:02:71:89:05:f6:8e:0b:7a:62:e7:08:82:29:46:6f:ca:
33:53:12:33:b6:81:ac:b7:72:d3:51:f5:ea:d1:5e:30:d0:95:
07:be:f9:d6:d7:57:97:3d:df:bc:d9:eb:9d:00:c1:e6:e2:a1:
ae:ea:bd:f5:87:17:76:66:b4:10:a6:75:8d:c8:ef:86:ff:30:
52:53:d0:ba:b2:b3:6e:ed:0d:a6:d0:cc:9b:6b:46:98:d5:fb:
3b:2f:bc:e5:a2:9c:08:63:e4:68:14:0f:fb:ab:15:92:1b:84:
30:af:2f:36:ff:dc:4f:6e:a0:a4:d5:8f:24:22:9c:51:d6:b6:
f9:a6:5e:11:69:f8:91:9d:ef:3f:4a:5c:4b:3d:54:c3:59:f7:
ef:a9:bb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net