Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft (raw, json)
Hash identifier: I25986QOcjppSRxXYCdEEhWpbftTwvaU5nkNz4gD4lQ=
Subject key identifier: 7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
Authority key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
Certificate issuer: /CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Certificate serial: 03E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
Manifest number: 03E8
Signing time: Mon 28 Apr 2025 19:40:52 +0000
Manifest this update: Mon 28 Apr 2025 19:40:52 +0000
Manifest next update: Tue 29 Apr 2025 01:40:52 +0000
Files and hashes: 1: o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl (hash: z36GfvOAMkKBR8o9IhQ1jN+iDWwBW0gRkj6OQBVh5jQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Validity
Not Before: Apr 28 19:40:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7DBCF4A1EA8EEB3E124E8E23CE7F82EEDDF04BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:95:67:6c:b0:cd:c7:64:a1:13:8e:d9:0d:
8d:96:58:1d:08:c8:2c:68:59:8a:4b:2a:92:76:32:
07:01:1d:ab:14:13:b2:ce:a1:06:a5:9b:84:5c:1c:
f8:a3:c2:22:9f:6a:5c:0e:f5:95:3b:4e:55:01:2e:
6e:17:d8:04:f1:c3:43:91:0a:b6:4e:01:cc:4d:6d:
66:ba:99:a5:a1:dd:0f:92:6e:ef:fa:55:e4:3f:16:
12:1d:85:09:6d:29:a0:57:1c:07:8f:a9:6b:ee:4f:
c7:ec:36:26:a6:f8:5a:0f:2b:24:7a:7c:c7:72:f4:
48:42:89:55:2d:21:d0:fe:de:be:51:86:02:d6:19:
38:32:ad:02:c7:d7:68:d5:7e:76:47:39:5d:01:42:
ed:ff:a1:f2:d8:e7:c3:ba:48:2b:e7:1b:ed:85:14:
23:56:60:aa:7b:95:6d:c7:1d:bf:f3:0a:a7:00:95:
ff:23:69:7a:be:8a:5c:7e:4c:ef:e5:12:77:c5:a5:
d1:44:61:77:6f:31:7a:8c:ed:49:3e:c9:2f:bd:ed:
ab:e6:75:17:61:3a:d3:ea:ef:6a:fe:74:9e:53:95:
be:f1:c7:28:dc:18:2d:c5:76:f8:15:59:77:df:c2:
8e:b3:19:c7:7e:0a:8e:d1:3d:6e:f5:87:c0:6e:42:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:F4:A1:EA:8E:EB:3E:12:4E:8E:23:CE:7F:82:EE:DD:F0:4B:C0
X509v3 Authority Key Identifier:
keyid:A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ec:fc:3c:8d:bb:02:b9:eb:3a:59:43:29:3a:84:46:1f:d5:
7c:39:a2:78:e3:c5:08:98:66:99:b7:7f:21:77:61:9c:56:66:
af:80:d5:c3:d9:51:39:0d:79:eb:7a:b8:64:bc:e2:38:29:eb:
37:61:24:af:13:9a:f9:71:c2:a9:4b:de:26:cc:b2:d2:71:81:
93:f4:ca:ff:70:a6:dd:fb:1f:0c:c0:ca:2c:83:b8:0a:34:29:
c1:91:23:96:15:21:14:8f:24:d0:e2:49:d4:96:56:f8:d7:10:
9d:45:60:e0:0f:14:9f:70:1b:97:15:36:dc:29:d7:ab:53:71:
71:03:45:93:12:93:e7:89:43:8b:c7:02:be:fd:c9:81:f8:94:
d3:0d:46:43:af:bb:09:61:d7:4e:d8:d3:b8:7a:18:87:3d:88:
51:ea:6a:6d:7d:0f:b8:3f:34:6f:a5:5d:27:d8:8d:e8:33:bd:
d6:c8:89:1c:61:9e:12:63:01:33:7c:3d:5a:05:55:73:7d:6c:
e5:fc:65:4d:1f:b6:9e:59:8b:71:ee:22:e0:90:a8:c1:fd:a7:
4c:ae:13:f1:2b:b5:2d:13:db:91:8e:d0:4e:56:9e:23:31:c6:
99:d0:52:dd:e5:03:e4:48:14:2a:5d:0b:35:be:52:07:43:41:
ef:0c:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net