Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
File: iY_NiB8trZUa3DHkgcTtyCCTGtM.mft (raw, json)
Hash identifier: emWImm0vr7zuMqkAks3HVt5wjNJYPO8u+z3bGmJW7Bc=
Subject key identifier: 26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
Authority key identifier: 89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
Certificate issuer: /CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Certificate serial: 1929
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
Manifest number: 1929
Signing time: Mon 28 Apr 2025 19:37:14 +0000
Manifest this update: Mon 28 Apr 2025 19:37:14 +0000
Manifest next update: Tue 29 Apr 2025 01:37:14 +0000
Files and hashes: 1: iY_NiB8trZUa3DHkgcTtyCCTGtM.crl (hash: xCNziJw+Vf4l+St7WdIHaZvelnH0EzT8uMXxf4iue20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6441 (0x1929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3
Validity
Not Before: Apr 28 19:37:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=26D5A2250C9C07F5B0C055570D9FF4BBDA7D20B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:a5:d2:e2:cc:2c:37:c8:aa:43:13:1a:2c:
9e:fb:21:87:69:c8:00:c4:83:45:43:c3:87:cf:ed:
29:50:14:42:61:c4:66:ce:6d:c5:59:9d:2a:9f:f5:
67:c5:ae:17:f8:1b:2c:75:60:2b:dd:bf:b3:fe:59:
02:7a:11:d2:9a:11:21:36:5f:cc:8b:3b:2c:5b:8c:
d4:bb:20:52:8e:a0:62:a2:dc:14:29:42:26:97:7c:
8e:fc:af:7b:14:b3:8d:df:61:27:09:8f:a5:1f:f8:
e9:93:a3:ba:ab:cb:79:80:5b:c9:45:d3:bb:50:d8:
ce:eb:7c:84:95:48:98:37:e8:22:8a:cd:36:85:2b:
c1:56:70:63:86:c1:cb:55:20:10:42:5e:ad:98:9b:
d2:ac:c2:40:1b:3e:66:55:7e:6e:49:9d:1c:8a:75:
c7:5b:e5:2f:77:8d:20:67:2c:a6:aa:d6:f8:b4:d1:
40:47:e2:71:23:01:9a:19:7f:9e:ff:62:95:a1:39:
e9:1a:c6:76:14:3a:93:c2:13:9f:4e:5c:81:88:80:
f6:e4:0c:d9:2a:b6:c9:98:88:1e:d8:e0:53:92:bb:
e7:43:08:67:11:12:ed:90:b3:45:9d:3f:ae:be:a5:
6d:91:1f:d9:b3:9a:8d:d2:bf:4e:09:a1:76:43:b3:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:A2:25:0C:9C:07:F5:B0:C0:55:57:0D:9F:F4:BB:DA:7D:20:B8
X509v3 Authority Key Identifier:
keyid:89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:a3:8b:b6:2d:12:4f:da:43:9f:95:41:a9:88:60:f1:92:70:
19:71:3d:82:b7:83:3b:06:fe:ff:c6:55:46:bf:fe:d1:3e:de:
6d:32:4d:5b:5b:28:ea:05:59:3d:0c:ee:5a:f3:6c:95:a7:72:
f4:8c:30:d9:8d:9f:d0:7f:f5:5a:4f:50:ab:a2:b7:ac:b6:ed:
e3:65:e6:2e:78:cc:80:b5:4d:ac:81:60:0c:96:3e:96:34:c4:
98:dd:22:88:e2:23:bf:25:00:22:32:f1:a9:eb:be:02:c2:8c:
c2:4c:52:11:66:2a:96:00:a7:d5:07:30:dc:11:ae:03:36:f4:
07:16:33:32:9d:3a:48:3c:3d:8d:5e:5d:d1:c1:b9:54:02:6c:
9c:26:84:75:84:22:99:83:a6:87:11:84:1c:52:ba:c6:5f:8a:
0d:fb:28:cd:96:b3:96:d9:df:1b:0a:f4:5f:26:ec:9d:2d:a8:
81:6b:75:81:da:22:83:9c:db:06:c7:6e:a3:e2:06:47:f9:06:
21:bd:c0:78:49:bc:55:5c:7f:4f:09:e9:36:9e:38:64:fc:e0:
30:97:62:c1:ec:66:48:e8:fc:da:17:e4:8e:d5:d3:f4:8e:ee:
99:14:c5:97:db:ae:aa:c5:b5:93:70:62:8e:60:6e:c3:90:df:
7c:4e:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net