Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft
File: miDBZtl2yaZsainUqrTfjHbUgiU.mft (raw, json)
Hash identifier: wShhAna5G/6GexaD7oNdNTJiWY6DotUKoifhevkzoQE=
Subject key identifier: 6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C
Authority key identifier: 9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25
Certificate issuer: /CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225
Certificate serial: 11D1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft
Manifest number: 11D1
Signing time: Mon 28 Apr 2025 19:37:47 +0000
Manifest this update: Mon 28 Apr 2025 19:37:47 +0000
Manifest next update: Tue 29 Apr 2025 01:37:47 +0000
Files and hashes: 1: miDBZtl2yaZsainUqrTfjHbUgiU.crl (hash: m4lbokGJ1MpAZHakOwE/Nhc4zHkOHJr/cdZHkgNS64g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4561 (0x11d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A20C166D976C9A66C6A29D4AAB4DF8C76D48225
Validity
Not Before: Apr 28 19:37:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6C1423F4933B6FCC73829060CA9AB943D055651C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:60:4a:ac:c6:a4:4c:e4:05:11:bc:dd:a3:
d2:8a:6c:97:5f:dd:78:2a:11:11:98:dc:cb:39:3d:
dd:b1:a6:b1:6c:05:17:ce:2f:c9:69:2f:85:18:1b:
f9:46:2c:95:76:4e:34:07:27:67:81:5b:a8:1d:01:
cc:53:e8:8e:19:58:c2:01:3d:da:cc:fd:2f:94:07:
51:5b:38:76:7c:ab:2a:34:39:06:be:0c:ba:b3:82:
c3:3d:1a:58:17:c6:36:b7:b2:9e:f3:d2:4d:d5:6e:
24:22:72:c4:79:76:a7:dd:8f:48:2b:26:d2:91:f8:
df:39:ae:ff:aa:fc:2b:51:73:b9:5e:57:55:84:26:
b1:df:2c:fa:08:2d:13:f6:64:01:7a:d9:5c:4a:36:
06:05:e2:d1:92:1b:0e:dd:91:63:38:ed:19:2b:d5:
4b:65:43:35:4f:3a:f3:7f:a2:e4:cd:09:c5:9d:16:
e5:90:94:ab:91:f0:de:12:78:8f:b9:8f:bf:db:f3:
76:03:4f:36:6f:8d:e6:33:76:40:43:a9:49:11:73:
8b:77:f7:9e:a1:a8:25:91:db:e4:71:16:86:07:d5:
84:5b:90:cf:7e:45:a8:99:54:85:92:2b:8a:46:aa:
5a:92:a6:80:44:f6:24:e1:19:31:0e:1b:70:78:e8:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:23:F4:93:3B:6F:CC:73:82:90:60:CA:9A:B9:43:D0:55:65:1C
X509v3 Authority Key Identifier:
keyid:9A:20:C1:66:D9:76:C9:A6:6C:6A:29:D4:AA:B4:DF:8C:76:D4:82:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/miDBZtl2yaZsainUqrTfjHbUgiU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/446/miDBZtl2yaZsainUqrTfjHbUgiU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:03:ec:ae:91:c5:77:b2:52:64:e2:9b:3d:94:36:a0:c5:
f1:3a:e3:35:b5:24:0b:f7:90:63:53:6b:e6:f2:46:ec:0c:c2:
02:88:71:6b:45:1c:44:56:bb:0d:e2:81:18:89:15:c0:8a:5a:
78:a2:fc:37:50:a6:00:e8:1d:10:73:9e:38:cd:c4:5a:1c:fb:
9a:c1:fc:c0:a5:32:a7:a6:0e:2e:5d:90:a4:a5:1b:cb:a8:00:
3a:3c:e4:61:7d:a7:c6:05:63:af:dc:c4:a3:c5:4a:95:a5:84:
f1:6e:d5:7c:3c:17:6e:0b:f5:7f:d7:af:a3:3d:4e:38:48:59:
42:e8:e3:74:bf:c0:5d:c6:3b:bb:dd:b4:de:e4:7f:0d:a7:ce:
0b:68:ee:2c:04:30:c1:7c:fc:7a:67:f4:6a:f3:2e:3f:4d:57:
3e:d1:d5:bd:d4:a2:ca:d9:6d:fd:f0:85:61:2c:b6:01:77:da:
f8:16:58:b3:28:e8:5d:ad:07:43:1a:02:8d:c1:9f:48:f3:d3:
71:b0:77:6a:48:17:ab:d1:96:84:5a:06:70:ca:cf:af:b1:31:
b3:75:2d:99:6a:41:34:30:c7:b2:31:b0:6e:0e:15:41:27:38:
04:ab:d3:68:15:da:07:3f:f8:a6:b7:38:8b:e5:58:86:ba:b3:
b9:38:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:48 2025 by rpki-client on console.sobornost.net