Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3316/kWLQT5EJ__33LPWxec7ZK58aU94.mft
File: kWLQT5EJ__33LPWxec7ZK58aU94.mft (raw, json)
Hash identifier: BYTLnZ3jU1rfol/4rxh5CH0IQpmplFhKuWCSov/7L2U=
Subject key identifier: 42:BE:FA:30:1A:72:FC:08:25:64:02:FE:D8:FD:66:22:AB:02:5C:ED
Authority key identifier: 91:62:D0:4F:91:09:FF:FD:F7:2C:F5:B1:79:CE:D9:2B:9F:1A:53:DE
Certificate issuer: /CN=9162D04F9109FFFDF72CF5B179CED92B9F1A53DE
Certificate serial: 0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kWLQT5EJ__33LPWxec7ZK58aU94.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/kWLQT5EJ__33LPWxec7ZK58aU94.mft
Manifest number: 0C
Signing time: Tue 03 Sep 2024 20:50:30 +0000
Manifest this update: Tue 03 Sep 2024 20:50:30 +0000
Manifest next update: Wed 04 Sep 2024 02:50:30 +0000
Files and hashes: 1: X-IezH7IZsP-5NMicLi3D8itEBg.roa (hash: pC3j0o4XeODIVN9cul3i3daXwi3udSN3Z95cSEDWD7A=)
2: kWLQT5EJ__33LPWxec7ZK58aU94.crl (hash: +5fnBFgfBLuWUa9zq8mkI5Y00WmJU1hz/vgXMs/XCfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9162D04F9109FFFDF72CF5B179CED92B9F1A53DE
Validity
Not Before: Sep 3 20:50:30 2024 GMT
Not After : Sep 2 01:19:22 2025 GMT
Subject: CN=42BEFA301A72FC08256402FED8FD6622AB025CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:41:f5:dc:35:af:40:31:62:4a:8f:d5:32:
6e:88:d1:50:f2:23:4e:ae:2b:fb:5d:66:70:e9:56:
7d:84:e8:d7:10:95:3d:e5:6e:ab:82:38:f8:e5:04:
ff:6f:f6:9b:17:49:eb:07:27:2b:45:ba:ef:2c:fc:
11:6d:0f:ae:32:84:ac:75:69:4f:00:6b:1e:68:23:
6a:56:2f:02:ad:e5:15:80:5a:84:fc:ed:86:8f:bd:
5b:e5:d7:92:dc:d6:f7:51:35:9d:98:02:34:22:26:
33:be:fa:24:92:66:b3:3b:6d:91:0a:ea:a7:a3:7a:
6e:00:83:77:8b:71:0c:8e:a6:5f:46:fb:b6:c3:3a:
a5:45:17:4a:90:8d:b2:9b:bb:05:c2:6e:07:a7:99:
7e:04:39:43:67:8e:6d:fe:32:d7:da:4a:e8:21:d1:
d0:c9:48:f3:6a:70:f8:23:86:ab:53:38:f6:b4:80:
ab:2e:21:65:76:c0:69:72:d1:3a:65:28:3f:44:b0:
b8:09:21:15:29:6e:7f:2d:f5:37:06:ac:65:b7:3d:
d3:22:b8:94:32:00:b9:01:67:0b:ab:b6:45:9d:72:
ec:88:69:d0:73:0a:65:ea:d7:7e:63:50:05:fb:78:
5a:b3:00:92:27:57:a1:9d:95:1f:1f:cc:d5:df:94:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:FA:30:1A:72:FC:08:25:64:02:FE:D8:FD:66:22:AB:02:5C:ED
X509v3 Authority Key Identifier:
keyid:91:62:D0:4F:91:09:FF:FD:F7:2C:F5:B1:79:CE:D9:2B:9F:1A:53:DE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/kWLQT5EJ__33LPWxec7ZK58aU94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kWLQT5EJ__33LPWxec7ZK58aU94.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/kWLQT5EJ__33LPWxec7ZK58aU94.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ce:e4:36:ec:d3:c0:ba:cb:ca:8e:fc:fc:e8:fc:5b:a5:a8:
32:21:f3:af:8d:2f:cc:b8:4f:2f:34:1b:06:d0:80:de:40:83:
eb:c1:60:5f:3b:f6:f8:95:42:87:0c:67:a2:90:53:22:ca:cb:
07:6f:02:b2:70:6c:2f:c5:37:af:6f:0e:af:3e:b8:ab:1b:5d:
a2:e6:10:7e:96:ec:5b:64:1d:e9:78:2d:b2:6a:58:62:42:c0:
e9:64:54:39:24:27:f6:5a:ff:fa:d3:97:39:3a:66:19:c0:bb:
f4:e6:27:bc:f3:0f:c0:10:2d:80:aa:d3:66:8b:10:6e:27:b5:
b4:c2:82:52:4f:59:87:8c:68:5d:36:21:88:b1:43:72:33:2b:
a3:41:e0:c7:62:67:b0:8b:c3:fa:28:f9:37:7f:53:2a:3c:11:
62:fd:ba:64:f0:ce:ed:b9:a5:c8:03:25:18:76:a4:4e:33:d7:
57:4d:1b:9d:3a:bd:df:d4:2d:e1:23:9e:e9:97:48:68:d0:f2:
fc:3e:d9:4a:ab:8e:7e:a8:d7:83:d9:15:0e:61:90:b6:f0:14:
9c:f9:5f:dd:8e:87:57:1a:0d:ae:20:ba:10:7a:df:49:c0:5d:
15:73:ff:a1:fd:f2:1d:f1:b2:85:78:9b:78:2b:3a:2b:3e:ba:
65:67:2e:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MTYy
RDA0RjkxMDlGRkZERjcyQ0Y1QjE3OUNFRDkyQjlGMUE1M0RFMB4XDTI0MDkwMzIw
NTAzMFoXDTI1MDkwMjAxMTkyMlowMzExMC8GA1UEAxMoNDJCRUZBMzAxQTcyRkMw
ODI1NjQwMkZFRDhGRDY2MjJBQjAyNUNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOSvQfXcNa9AMWJKj9UybojRUPIjTq4r+11mcOlWfYTo1xCVPeVu
q4I4+OUE/2/2mxdJ6wcnK0W67yz8EW0PrjKErHVpTwBrHmgjalYvAq3lFYBahPzt
ho+9W+XXktzW91E1nZgCNCImM776JJJmszttkQrqp6N6bgCDd4txDI6mX0b7tsM6
pUUXSpCNspu7BcJuB6eZfgQ5Q2eObf4y19pK6CHR0MlI82pw+COGq1M49rSAqy4h
ZXbAaXLROmUoP0SwuAkhFSlufy31NwasZbc90yK4lDIAuQFnC6u2RZ1y7Ihp0HMK
ZerXfmNQBft4WrMAkidXoZ2VHx/M1d+U4hcCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBRCvvowGnL8CCVkAv7Y/WYiqwJc7TAfBgNVHSMEGDAWgBSRYtBPkQn//fcs9bF5
ztkrnxpT3jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzE2
L2tXTFFUNUVKX18zM0xQV3hlYzdaSzU4YVU5NC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAva1dMUVQ1RUpfXzMzTFBXeGVjN1pLNThhVTk0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMxNi9rV0xRVDVFSl9fMzNM
UFd4ZWM3Wks1OGFVOTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW87kNuzTwLrLyo78/Oj8W6WoMiHzr40vzLhPLzQbBtCA3kCD68FgXzv2+JVC
hwxnopBTIsrLB28CsnBsL8U3r28Orz64qxtdouYQfpbsW2Qd6XgtsmpYYkLA6WRU
OSQn9lr/+tOXOTpmGcC79OYnvPMPwBAtgKrTZosQbie1tMKCUk9Zh4xoXTYhiLFD
cjMro0Hgx2JnsIvD+ij5N39TKjwRYv26ZPDO7bmlyAMlGHakTjPXV00bnTq939Qt
4SOe6ZdIaNDy/D7ZSquOfqjXg9kVDmGQtvAUnPlf3Y6HVxoNriC6EHrfScBdFXP/
of3yHfGyhXibeCs6Kz66ZWcuNw==
-----END CERTIFICATE-----
Generated at Wed Sep 11 08:39:37 2024 by rpki-client on console.sobornost.net