Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft
File: DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft (raw, json)
Hash identifier: cF2xjCa87cJrmmxG1UCz3L4L/Gg2vTDSUAz3mOSP0Kg=
Subject key identifier: 8B:84:A6:71:21:C6:20:97:BA:BC:B7:C2:56:80:22:A9:90:60:7D:72
Authority key identifier: 0C:05:F7:41:1A:CD:19:38:25:F6:D1:26:57:DE:C7:14:BF:5E:49:F4
Certificate issuer: /CN=0C05F7411ACD193825F6D12657DEC714BF5E49F4
Certificate serial: 039B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DAX3QRrNGTgl9tEmV97HFL9eSfQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft
Manifest number: 039B
Signing time: Mon 28 Apr 2025 19:41:28 +0000
Manifest this update: Mon 28 Apr 2025 19:41:28 +0000
Manifest next update: Tue 29 Apr 2025 01:41:28 +0000
Files and hashes: 1: DAX3QRrNGTgl9tEmV97HFL9eSfQ.crl (hash: Hex/BeXTC6yeOeJg7dkDBsGdf6ucuhJfpsdUkZyTEik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C05F7411ACD193825F6D12657DEC714BF5E49F4
Validity
Not Before: Apr 28 19:41:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8B84A67121C62097BABCB7C2568022A990607D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:28:d9:81:0b:3f:c8:63:ac:77:df:04:5d:
10:7c:f1:6a:a4:b1:63:89:64:70:eb:27:ba:46:79:
2d:dc:0a:bb:1b:f1:0a:67:69:4f:3a:7b:cc:fc:14:
dd:3a:62:6c:7a:4d:77:0e:05:87:d6:c1:9f:cb:36:
1d:9c:e4:f2:84:8a:74:80:33:a6:79:c6:de:c3:5c:
1b:dc:1b:bb:bc:af:4f:e7:38:43:18:b1:03:a4:90:
d7:fa:ec:97:7a:78:be:09:f2:82:b3:7b:ae:92:3a:
47:f9:85:41:39:9b:c6:dd:5f:fe:9f:71:cf:02:e0:
b8:5d:31:9d:84:70:e7:81:3c:5e:48:44:79:67:37:
ef:fb:36:8c:2d:cd:86:2d:f7:21:d3:28:a2:64:e6:
58:06:c2:d7:3f:f2:99:d1:78:ad:1f:3d:08:5e:bd:
74:04:84:0c:49:b9:9a:51:8c:c6:49:73:e6:43:98:
5e:ef:1b:23:b5:fd:a5:6c:b8:d9:65:72:24:27:b0:
ac:43:c3:4e:b6:88:b4:b4:66:e0:67:b9:90:75:ea:
b3:bf:9f:a3:08:3d:6d:a9:c6:aa:38:d7:b8:47:8b:
e5:7c:df:bc:34:9a:3e:4b:89:63:65:ac:28:ff:b9:
8e:4d:69:09:b9:2f:31:b2:09:52:95:90:16:7a:03:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:A6:71:21:C6:20:97:BA:BC:B7:C2:56:80:22:A9:90:60:7D:72
X509v3 Authority Key Identifier:
keyid:0C:05:F7:41:1A:CD:19:38:25:F6:D1:26:57:DE:C7:14:BF:5E:49:F4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DAX3QRrNGTgl9tEmV97HFL9eSfQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:b8:bc:f2:56:30:7f:be:72:87:0f:80:3f:62:3d:c5:58:ff:
34:df:50:40:23:be:f9:b0:69:03:8e:b0:94:ca:48:f4:c9:07:
82:6c:15:a6:b4:4c:30:2a:23:e0:33:1b:fb:c4:cd:0a:2c:3a:
f0:6f:8a:b4:88:f3:fa:c6:2d:8f:9d:ba:ef:0f:47:84:23:a1:
aa:70:55:38:dc:77:ea:de:30:be:76:ff:9b:c8:f7:6d:84:0a:
bf:53:85:c3:e2:18:86:09:f5:f1:02:83:f3:74:b3:df:c4:3d:
20:83:2b:d1:d0:08:56:e9:4e:24:95:50:b4:dc:e3:a6:68:ec:
09:7e:e8:b0:15:fa:2c:c5:86:02:35:58:f4:25:2b:65:5d:5b:
20:cd:a1:8f:f0:42:16:70:d2:76:7b:dd:b4:c9:72:d1:b4:71:
a0:38:2b:41:e2:b6:fe:c0:68:e1:42:a6:6e:3b:83:7b:28:9b:
59:13:ca:24:34:b1:6e:3e:0a:71:28:f4:33:e4:7d:f9:d5:20:
8c:13:f5:83:3a:b6:82:2a:bd:ef:61:9a:f1:92:11:f7:e7:13:
d6:16:19:d3:51:70:b9:57:bf:26:73:4a:47:ca:79:00:48:d8:
c2:b2:5d:3e:92:14:81:24:9d:04:4d:a2:49:bc:15:48:db:03:
0f:e6:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net