Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft
File: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft (raw, json)
Hash identifier: yYQ0sWYVcSR5Z6OJ+TEFagwfSo3/kV0yFCxp6V5qEtk=
Subject key identifier: 73:AB:90:37:A3:23:67:0C:D3:0F:4B:63:5F:AE:4D:A5:67:4C:51:E8
Authority key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
Certificate issuer: /CN=2CA390E2780550E44EC03598082E1995474DF2FB
Certificate serial: 1C14
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft
Manifest number: 1C0F
Signing time: Mon 28 Apr 2025 19:38:34 +0000
Manifest this update: Mon 28 Apr 2025 19:38:34 +0000
Manifest next update: Tue 29 Apr 2025 01:38:34 +0000
Files and hashes: 1: KXC0qgIn72LRVsWM0i_L6lscO8g.roa (hash: GSnatx02n+iXry7WlwPh8UpObPD3/2LSBscAoZQxmeI=)
2: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl (hash: JoM+TUTAVqt1RD2Tgyxq3yOyrjf8u4ubmLh7q2GrGSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7188 (0x1c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA390E2780550E44EC03598082E1995474DF2FB
Validity
Not Before: Apr 28 19:38:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=73AB9037A323670CD30F4B635FAE4DA5674C51E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:ec:36:7c:4a:d8:c8:ac:26:fe:38:08:41:
b5:dc:8e:d4:79:55:1e:ba:fd:15:27:54:b7:40:5a:
7a:4b:0a:be:80:87:ad:6f:06:22:23:c4:8b:52:7e:
53:1c:79:31:14:22:38:0d:cd:68:c4:33:fc:e4:7b:
42:45:b2:d1:b7:65:a3:96:5e:b9:4c:41:25:60:ee:
45:eb:df:24:91:4e:7d:db:33:d3:73:2f:3f:72:a8:
92:5d:58:75:25:de:43:06:a7:06:3b:6b:06:39:61:
b8:01:a0:9e:9b:be:e7:5b:a0:15:6c:97:ac:09:3f:
a9:6f:b8:31:f1:4c:24:39:5b:af:16:89:6a:9d:b0:
08:59:46:d4:d3:b1:b1:45:5f:46:a2:1c:82:11:eb:
ec:aa:53:06:7e:7e:27:93:30:f2:9b:9d:c0:5b:f3:
28:b9:3e:e5:ff:3e:57:12:f2:ec:d9:3b:94:b6:9d:
ea:97:03:02:f8:37:fb:d0:80:99:21:2f:b3:d6:5a:
d9:de:ab:a2:25:19:c3:4e:98:15:7b:0f:c4:d9:af:
b5:9f:39:d6:0d:c5:b2:1a:e2:5c:52:4e:03:02:08:
79:36:21:97:81:f3:7e:53:59:df:d2:79:f9:11:8f:
57:60:87:64:14:75:8e:ea:f0:c1:3d:e8:c8:49:7b:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:90:37:A3:23:67:0C:D3:0F:4B:63:5F:AE:4D:A5:67:4C:51:E8
X509v3 Authority Key Identifier:
keyid:2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:a4:e3:a9:f9:f9:a7:e0:eb:68:8f:6f:b6:49:9c:bc:48:
f1:7b:bb:cd:2c:81:89:53:73:fe:6e:5e:83:02:9b:15:8c:fe:
34:5a:2f:fa:26:53:7f:3b:ef:8e:7b:4a:65:d3:8b:27:87:e2:
35:75:38:29:ee:e4:99:db:9d:1b:d6:29:14:71:e1:d4:9d:2d:
0e:68:71:2e:f3:46:20:b4:5c:9b:f2:43:d2:43:d8:b2:2b:57:
b3:01:3b:99:4d:cd:4b:e5:60:d8:81:0c:dd:e2:f5:9b:ea:92:
08:91:f2:36:fe:e0:41:5e:25:9f:a6:5e:38:f6:5b:0c:27:04:
3f:4f:6b:37:e7:bd:b5:38:37:09:c2:ce:b7:ca:ab:1d:9f:c1:
ec:55:bf:46:18:06:03:07:c0:d5:6e:7c:19:43:39:9a:ba:eb:
78:e5:f8:da:57:60:4d:9b:49:80:7b:ce:ee:c9:4f:a0:99:ac:
a8:5f:b4:e5:cd:b0:4b:f6:f9:ab:e0:19:98:c8:c6:0a:a2:58:
19:99:60:a6:5e:db:71:b1:3d:40:25:2a:ed:f0:a5:5d:4e:6f:
c3:3a:15:2b:7e:8e:5b:7b:99:2e:77:e7:cf:c2:90:d8:bb:cb:
3f:25:32:51:7f:cf:2c:4c:59:24:f9:06:70:08:98:b6:c6:b2:
43:51:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:48 2025 by rpki-client on console.sobornost.net