Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
File: RJgA4NOab6QpLdGwZto9qI0i-rw.mft (raw, json)
Hash identifier: 2xwC26rFTDFA0VGsZJQ7+V1r7my/3gKtd4uxFmZyYuM=
Subject key identifier: A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09
Authority key identifier: 44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC
Certificate issuer: /CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC
Certificate serial: 032F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
Manifest number: 032F
Signing time: Mon 28 Apr 2025 19:38:18 +0000
Manifest this update: Mon 28 Apr 2025 19:38:18 +0000
Manifest next update: Tue 29 Apr 2025 01:38:18 +0000
Files and hashes: 1: RJgA4NOab6QpLdGwZto9qI0i-rw.crl (hash: OWFCvDbGDD+RLoM7X9NtrAn4o5XxewJrWdNbPjlv2CQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC
Validity
Not Before: Apr 28 19:38:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A21902D82F6C08116AC14E15D910AA41902FB009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b6:d6:e9:4a:69:59:89:35:9b:c3:c0:9d:01:
96:9b:84:97:1a:d0:7a:63:ed:5a:a8:10:c7:1c:cb:
52:e9:ab:01:5c:2d:b2:b6:a0:66:50:e2:c5:3f:43:
c0:ff:11:cd:5b:c6:f5:0e:f3:fe:b5:78:08:26:66:
bb:3f:e1:36:82:ee:7f:c3:60:10:76:04:8e:26:10:
13:a8:0f:30:3f:0e:16:87:45:a6:1b:33:21:eb:02:
12:58:2a:b3:5c:96:64:90:8d:c8:1a:a0:5e:8a:f2:
ac:95:c5:fa:e0:ab:d7:1a:89:98:45:4d:ab:20:3f:
18:43:2d:02:2b:56:95:b9:73:05:a2:9a:ec:d5:20:
dd:1b:0e:78:ce:a6:66:eb:ba:47:af:4d:35:29:d4:
fe:d0:c3:0a:07:3f:1d:b4:0c:f2:48:2d:c9:fd:81:
a5:3b:3f:29:a6:3f:42:3f:00:a6:f4:e0:ee:4a:ab:
84:4b:56:8b:db:24:d2:54:4b:ca:4e:e3:ab:4d:72:
08:34:47:1b:e2:f7:be:66:d5:ad:89:ba:d4:52:ca:
6d:d4:6a:30:48:e0:bc:13:54:82:4d:4f:3b:60:18:
ba:15:4e:56:c0:8b:27:21:26:11:4c:0f:71:3b:24:
cf:f4:57:fe:93:e8:e6:69:25:09:0b:db:d3:80:67:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:02:D8:2F:6C:08:11:6A:C1:4E:15:D9:10:AA:41:90:2F:B0:09
X509v3 Authority Key Identifier:
keyid:44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ef:43:34:bb:8a:93:00:9d:c7:43:dc:95:fd:82:b3:18:9a:
d4:f5:38:d4:02:bd:8a:c8:1c:80:f8:d6:2a:6e:66:f8:ca:ef:
88:e9:1b:8b:50:7c:2a:ba:3b:12:68:fc:29:81:3a:8a:ba:ee:
04:af:54:70:c9:bf:8a:07:f8:bc:a5:5c:45:27:bf:8e:82:cc:
61:53:c0:56:69:25:ba:99:83:c5:dd:90:31:06:f8:aa:0d:fe:
b8:dd:69:d9:14:3f:ff:2d:4f:d7:45:a3:a2:99:72:66:12:10:
de:9b:8f:f2:1d:a4:f4:5e:52:53:6d:76:9d:5a:31:ad:51:33:
d6:01:55:c5:94:23:79:69:e6:84:68:39:db:6f:ab:97:e5:cc:
4b:ac:de:b4:59:3a:6a:b7:1c:78:77:de:83:00:fe:48:f9:26:
bb:00:c7:d5:0f:12:5e:d3:45:7d:da:f6:10:24:ac:f3:c7:14:
13:55:4b:0d:c4:83:4e:f3:f6:d0:12:c3:23:0f:19:1f:ff:1a:
9a:d0:19:ad:a7:e2:82:93:23:45:ad:a9:4f:ab:80:a0:f2:03:
b2:78:5d:e5:74:51:42:d7:ac:bc:68:45:da:9e:8d:32:dc:99:
4e:a9:9b:87:c7:49:68:5e:ab:3c:88:9e:7f:05:a2:7c:9e:3e:
04:22:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net