Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft (raw, json)
Hash identifier: GOSuq8Oq3ze7uZgHtszOdJzvJY5r9yhjQ30s8vQFpVY=
Subject key identifier: 33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 4E82
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
Manifest number: 4E71
Signing time: Sat 29 Mar 2025 08:29:36 +0000
Manifest this update: Sat 29 Mar 2025 08:29:36 +0000
Manifest next update: Sat 29 Mar 2025 14:29:36 +0000
Files and hashes: 1: 5xiBP9oAgtPkPbuqp_jQN04CKOk.roa (hash: tceHGoGymQUtpl0azpN7OzZGjav6xnOi9XVl7tk4RAQ=)
2: 62dLcW3plavrpsIbNHqw720lfPk.roa (hash: gCTxCmZ8gdoRjQKUaCHDH/9k8CDn24niIaIerASZoKo=)
3: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl (hash: 3qGh8DF09kM0ECaNLK85bAxR8NiEtQpd67O8VvMteiI=)
4: a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa (hash: O0NyOV0UC0NpDn6gKD43mD7tWOO7tpD0289aGPnpmeU=)
5: qhqQ6XGpQKke9iH_XzcMeWU6yJs.roa (hash: SYubhtFtKwSFcNFEuS+OIUJ6kBhpjBEexfpRrZUfZr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20098 (0x4e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Mar 29 08:29:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=339CE041528F9C61F954C6F0EBB8166EFB62E93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:45:9a:5e:6f:d5:e6:df:34:4a:eb:9c:c4:
81:f4:30:d4:e4:49:ab:f8:bc:e5:31:7c:db:aa:97:
31:91:30:9f:12:80:99:cb:5a:5f:c4:27:6b:ff:98:
04:b1:a1:72:03:32:10:d4:8a:4f:15:6c:f9:a6:dc:
e9:7a:3c:4b:e9:3f:4a:06:90:33:ef:9a:76:36:87:
12:62:7d:94:07:fa:4e:d0:ee:c4:f5:00:b7:90:55:
aa:a5:79:23:32:36:02:0b:f3:98:c3:7c:fc:2e:90:
d3:c6:f4:e8:93:b7:f3:54:84:b1:ea:58:82:f0:9d:
6b:10:91:18:df:67:81:8b:c7:2c:6f:51:8d:b8:35:
cd:29:e7:09:5e:91:3b:4c:33:9a:3b:96:08:6d:96:
a1:0d:00:d2:27:04:6c:d1:1f:40:8a:7c:4f:c0:a8:
92:65:1c:41:32:41:37:bc:67:f4:6c:10:94:51:b1:
07:be:ec:21:57:6a:0e:4d:ac:26:1f:aa:c5:19:11:
f3:1a:8b:28:f7:a0:67:25:b5:b5:62:fa:14:9f:5c:
fe:ab:b5:25:c0:eb:c0:f4:c2:57:0f:14:82:e9:7f:
2b:b8:97:cd:4e:3e:53:b5:d8:2c:a2:6d:73:69:3f:
5f:56:4a:94:3b:d3:ff:b7:ff:9f:8f:d8:94:9b:d1:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:E0:41:52:8F:9C:61:F9:54:C6:F0:EB:B8:16:6E:FB:62:E9:3A
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a7:1b:e1:c4:55:09:ed:08:b5:8c:0a:46:82:4c:4b:e2:88:
57:73:7b:9d:36:fd:7c:4d:7b:fd:a7:75:06:0c:85:57:ef:00:
68:71:94:8f:fc:2a:01:74:3e:3b:fa:de:28:dc:49:1f:fd:29:
db:9e:e8:a2:32:f8:e2:2d:15:c9:06:80:b5:e7:52:d5:80:8a:
d2:e8:5c:89:23:b3:11:0c:5d:1d:86:1c:26:1a:4d:3d:01:24:
f4:55:38:19:81:0b:6c:9b:a5:15:63:46:e0:3d:eb:cb:e7:61:
de:95:7c:30:db:02:a7:a4:3c:fa:86:b1:c5:40:d6:6c:70:c9:
4f:bb:46:36:ea:ac:07:ef:cb:d1:71:0a:d3:36:3f:40:42:38:
f8:68:74:a3:f1:46:fd:29:bb:33:10:22:e4:57:c4:8f:f4:18:
fc:8f:4f:8d:56:7f:04:c6:e1:c1:ea:38:9f:ab:9f:0f:40:bb:
8e:1f:39:df:c1:fd:1d:a4:54:c0:bc:11:b8:97:ae:82:cb:1a:
8e:22:3a:57:4b:7a:df:0f:74:00:8d:42:a8:f9:18:32:72:dc:
83:f6:87:26:4a:58:d2:3a:67:4c:ef:c9:a2:30:f1:94:88:0a:
2f:fb:da:98:b3:3f:a6:c7:9b:70:a2:dd:7b:41:74:ab:10:41:
a0:ee:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:31:07 2025 by rpki-client