Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
File: 2hcs9oXXoU8egRnVmgEv4GHAblE.mft (raw, json)
Hash identifier: vTYOIpRrHIX3OjsIOZUTLbKpw6fLzm5TcdhhCg1EnMs=
Subject key identifier: A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA
Authority key identifier: DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51
Certificate issuer: /CN=DA172CF685D7A14F1E8119D59A012FE061C06E51
Certificate serial: 1E71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
Manifest number: 1E71
Signing time: Mon 28 Apr 2025 19:38:57 +0000
Manifest this update: Mon 28 Apr 2025 19:38:57 +0000
Manifest next update: Tue 29 Apr 2025 01:38:57 +0000
Files and hashes: 1: 2hcs9oXXoU8egRnVmgEv4GHAblE.crl (hash: lQNpcP2w3lCLEB7iKeQRYKBsLhDfcCJEzjeYoqoOtek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7793 (0x1e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA172CF685D7A14F1E8119D59A012FE061C06E51
Validity
Not Before: Apr 28 19:38:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A14412443289FF6A8840257C69CC8F1CBDC61DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:fc:db:c0:7d:9c:8e:a7:df:5d:1b:49:fd:
08:8d:a0:1b:06:86:cb:1c:b9:e7:00:72:bd:1a:73:
94:98:01:66:a5:ab:68:96:69:cb:ab:fc:be:c2:93:
59:a9:e5:2b:b0:19:f4:33:0c:a6:db:77:ba:a5:56:
0d:da:d6:f5:04:ea:ff:48:10:69:99:e9:78:43:29:
56:01:bd:0d:90:26:43:1e:6d:b5:0a:90:73:12:4b:
35:4e:43:75:8e:83:7f:c5:db:0f:72:09:5d:90:9b:
83:c9:f6:0d:8b:1e:41:68:db:9c:8e:10:0e:1f:3a:
1a:d9:62:a2:40:29:2e:5b:54:08:53:80:d2:6b:1f:
c3:96:cb:b9:8b:5d:3b:8a:5f:c9:55:42:02:cf:7a:
5a:d9:04:f6:cd:a9:22:10:0e:30:51:28:06:25:02:
bb:65:38:04:0a:b5:00:b5:60:d5:d2:62:0c:92:72:
b5:9f:32:8a:ea:54:cc:d2:b0:e7:f5:c8:51:cc:db:
15:6f:08:be:19:aa:4b:5b:0e:38:18:d2:e6:4e:04:
59:23:a4:01:0c:98:bd:94:5c:f0:59:aa:d7:d7:0f:
72:80:01:8c:09:0a:88:7c:72:b6:b7:a4:44:9a:70:
cc:8e:5a:bf:67:32:49:1c:4c:58:9a:1d:2c:69:20:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:12:44:32:89:FF:6A:88:40:25:7C:69:CC:8F:1C:BD:C6:1D:FA
X509v3 Authority Key Identifier:
keyid:DA:17:2C:F6:85:D7:A1:4F:1E:81:19:D5:9A:01:2F:E0:61:C0:6E:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2hcs9oXXoU8egRnVmgEv4GHAblE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/2hcs9oXXoU8egRnVmgEv4GHAblE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e2:d5:64:c8:fe:74:b7:22:15:25:d8:70:16:11:02:f1:7c:
d0:28:1b:b9:e6:20:f8:5b:a8:ed:cc:40:1f:b6:40:f1:d9:6f:
98:6e:70:96:07:f7:1f:57:cd:54:89:2e:36:86:ac:65:f9:9e:
04:c3:13:09:2a:23:0f:2c:d9:a9:3b:62:17:2a:2f:60:0e:cc:
73:e6:81:7b:b5:9e:7b:94:14:e2:49:9b:ef:32:ad:cd:80:93:
4c:52:a4:73:34:54:81:25:47:3e:ae:17:ba:20:22:55:bd:ad:
9c:18:25:1c:52:58:d3:27:84:7d:85:98:e5:92:57:6d:25:ec:
fc:8a:e5:da:a5:3c:49:97:17:e8:4c:6c:65:08:56:aa:8b:03:
08:91:66:80:2b:70:6d:70:ee:96:b3:ff:44:12:c7:98:b9:ca:
f9:89:e2:f0:a6:ef:7d:9d:9b:b7:74:72:3f:7d:3c:54:61:8e:
38:59:60:09:de:3d:14:25:68:eb:db:ac:02:f3:d8:ee:2d:f8:
98:6d:67:1b:31:b1:7c:cc:7a:38:e0:d5:97:69:95:3a:a3:06:
98:d8:84:40:76:ff:75:72:06:96:da:3a:9d:a5:fe:9c:a1:60:
91:62:9a:89:47:e9:2e:19:43:66:44:32:67:1a:44:d8:8f:e2:
12:a7:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:48 2025 by rpki-client on console.sobornost.net