Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
File: rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json)
Hash identifier: y7hzx1Njr7yB2hzEO9+7Z5IlbD927dyNa2Ji3Q98bvM=
Subject key identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05
Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31
Certificate issuer: /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631
Certificate serial: 0595
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
Manifest number: 0595
Signing time: Mon 28 Apr 2025 19:36:37 +0000
Manifest this update: Mon 28 Apr 2025 19:36:37 +0000
Manifest next update: Tue 29 Apr 2025 01:36:37 +0000
Files and hashes: 1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: InSMYTpSADc8O2ZacDCw3Lxo48D5q1lWS9uRiwZ+Fi0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631
Validity
Not Before: Apr 28 19:36:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2:
37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc:
ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63:
8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65:
24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2:
70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04:
12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82:
cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05:
bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9:
82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d:
e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18:
1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23:
77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d:
60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01:
ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57:
ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34:
f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05
X509v3 Authority Key Identifier:
keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:6b:56:88:ea:99:46:f1:97:5d:ee:39:18:b9:0d:f6:39:48:
1c:bc:11:46:ca:04:d5:51:ef:92:a2:80:a7:af:75:1d:74:c2:
8c:3e:41:89:55:50:07:f4:87:10:69:4d:c7:5a:6b:53:69:76:
c0:a0:24:4f:9c:a0:d1:ab:2b:be:dc:c5:4f:1e:5c:14:8a:a4:
5c:13:07:b3:eb:da:bb:5b:21:33:67:1b:f2:cd:d2:6f:fa:b1:
74:bc:db:53:93:5c:ce:ad:74:22:df:be:8a:b7:ba:67:5d:e2:
14:88:d9:b7:a3:9b:db:aa:34:1a:0d:b0:f6:09:f1:0b:79:09:
d6:2f:f1:b4:34:91:37:ed:91:1c:85:55:2c:5e:1a:e2:20:13:
0d:98:f3:6b:fc:3a:85:52:b5:82:18:46:65:f8:c6:38:65:4c:
33:13:d8:e2:58:a5:2f:a4:64:26:2e:ba:d0:4e:86:ed:3e:a9:
af:40:5e:b0:16:b0:c9:a6:ec:e6:35:7d:1b:f0:b1:d8:53:8f:
dc:ea:f1:ae:68:b2:02:ff:1a:8c:ec:ea:98:d9:54:40:87:c7:
5e:2c:c3:c5:a4:f6:bc:d4:41:c7:b6:a8:d1:cf:0d:3a:8b:9b:
fb:c2:f5:82:b6:c1:2d:ba:18:28:31:f5:f7:46:32:65:b9:ee:
7f:0b:cc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net