Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft
File: ldntqLoorwPp7aZMarFbbPYvoGM.mft (raw, json)
Hash identifier: jgPDuQ2uxMVpHVv+LCesSO+COpu0OG1y22D0oP2oOXU=
Subject key identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70
Authority key identifier: 95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63
Certificate issuer: /CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063
Certificate serial: 02AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft
Manifest number: 02AD
Signing time: Mon 28 Apr 2025 19:40:41 +0000
Manifest this update: Mon 28 Apr 2025 19:40:41 +0000
Manifest next update: Tue 29 Apr 2025 01:40:41 +0000
Files and hashes: 1: ldntqLoorwPp7aZMarFbbPYvoGM.crl (hash: kW1nSO0ecsNs4T7BK375QkcVc+l2WGM2rdGmlQZKw/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063
Validity
Not Before: Apr 28 19:40:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F1422785AEB77794E677E837686C920829C22C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:1f:1b:36:2f:ba:66:78:29:1c:e0:a7:3a:
97:52:e5:09:dd:d1:91:b2:73:8a:72:5a:fc:a9:11:
97:73:c7:c1:13:86:59:6c:bd:a3:25:61:19:5c:d7:
b5:44:e8:47:12:14:87:85:36:53:cd:b7:8c:5a:0a:
86:22:22:05:c5:8e:1c:9f:27:8d:d0:8a:82:f3:20:
ca:3c:41:96:1d:51:34:21:07:d8:78:7a:f9:35:f9:
f0:0d:4c:70:c8:71:b5:74:b6:34:d8:38:6c:88:c6:
b8:48:bd:24:d3:29:c3:d7:86:b8:08:12:f8:a0:01:
3c:63:5f:36:f8:36:15:90:cb:02:62:21:8b:4e:5d:
90:cd:e8:cb:d7:7c:6f:e4:54:09:01:77:f8:bc:8a:
71:90:b1:fc:a6:ad:c1:17:d0:66:90:b7:1e:53:98:
e1:d6:30:e6:60:ef:29:8c:1e:48:d6:b0:cf:53:d7:
3a:22:b5:cd:53:64:8f:76:ca:4b:21:ec:90:ce:06:
cd:4b:35:e0:75:02:fd:aa:fe:22:75:36:99:ea:32:
1d:4e:04:8a:56:3a:06:14:0f:f4:d5:60:02:81:2d:
20:30:5f:c3:48:55:ed:db:e7:72:77:e6:2c:99:ef:
84:7d:e3:ba:fc:f6:c7:f9:a2:35:46:c8:65:41:76:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70
X509v3 Authority Key Identifier:
keyid:95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:85:80:c8:f6:39:b9:d2:ac:cb:e2:92:2e:fc:4c:df:f0:92:
97:ea:74:45:44:c0:1d:0a:3e:c9:ee:dc:83:9f:08:7a:10:a3:
6e:b7:03:b2:82:27:09:5b:a3:2b:17:61:ee:1a:0a:f9:73:e3:
76:53:9f:6c:30:ca:94:b1:53:2e:40:c8:fc:d9:25:a2:bd:ec:
d5:b1:73:70:15:09:9b:69:5f:dd:02:bf:42:7f:65:04:a3:8b:
1e:d8:2e:e3:49:3c:7c:e3:54:c4:f9:91:67:2e:f7:fa:08:33:
a8:44:cf:7c:5a:9a:2e:af:60:e5:bd:29:23:8f:fd:e2:45:8a:
1a:93:21:a6:a7:93:f0:d6:05:8d:72:43:fd:50:90:a7:6d:51:
08:e2:f7:eb:ba:4f:db:bc:44:b1:ee:bf:65:86:14:47:f2:fe:
b9:ea:71:5d:3f:3d:5f:a6:be:55:06:75:e2:cf:70:5a:30:86:
f3:19:dc:73:bf:c1:33:2a:c6:8b:0c:63:b1:5a:b1:6d:01:6e:
21:a1:fe:61:87:c4:7c:0a:89:8f:3e:0d:d7:28:f9:12:f7:c1:
ce:a3:2a:dd:5c:09:4b:e0:7d:94:1c:a8:7a:dc:86:a2:64:e1:
45:aa:ba:52:0d:3c:50:7a:82:8f:5a:3a:13:64:45:c0:28:37:
27:36:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net