Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
File: jj4CcULGM9VlmEGN9t68Ab3YAIw.mft (raw, json)
Hash identifier: Wmy8sKrFhVs6BPzGg2zz8Pyudo1d4RCYKaEqAiBDzbw=
Subject key identifier: CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 14F8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
Manifest number: 14F0
Signing time: Sat 17 May 2025 17:39:19 +0000
Manifest this update: Sat 17 May 2025 17:39:19 +0000
Manifest next update: Sat 17 May 2025 23:39:19 +0000
Files and hashes: 1: 4mivCFMBAf7EEBKKxRo0rub4T64.roa (hash: jz9z1yXxrP3c49QtbOgAGOSwj2Y8ZkTwUpXiF59bJtI=)
2: jj4CcULGM9VlmEGN9t68Ab3YAIw.crl (hash: B6sSWYWCXKZzWjkjGY354QwH006lCnV9he1x61MyYh0=)
3: kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa (hash: XHI0J5/o5O5ceg1Z+ckCn+FaTtcIPko4W8gNfs++aKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5368 (0x14f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: May 17 17:39:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CD0DA4347661962168388026EA8966599564316C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:1c:56:12:f8:80:bf:f0:c2:fd:a7:4d:2d:
16:9e:1d:4d:9e:3e:08:a2:38:57:36:91:63:3d:f1:
e4:5b:44:e8:9e:e7:a7:79:48:59:02:ec:34:53:6b:
ac:59:7f:70:4b:62:43:fa:08:97:27:12:4f:31:13:
e9:1a:eb:49:15:35:eb:7f:75:7c:2e:98:23:ed:f4:
7c:15:ec:81:50:d2:bb:63:2b:70:f6:af:ce:34:eb:
88:fe:46:f2:d3:9f:fa:3c:f2:96:6b:31:26:5a:f4:
c3:7f:19:06:92:95:ae:2c:ac:5e:eb:77:b4:c8:1b:
26:15:84:ec:8e:f0:a9:48:25:5f:d9:46:3a:16:42:
8d:5f:aa:ef:04:6f:2d:5b:7d:68:ea:0f:44:48:d5:
d1:db:ff:ce:07:3f:7b:65:09:55:7b:b2:2f:b0:be:
55:97:02:ef:2e:a3:8b:f0:01:87:57:38:a8:24:bf:
b9:5f:65:23:4a:7d:56:3b:b2:3d:71:04:31:d5:74:
dd:c0:b1:12:81:8f:82:50:8d:5f:3e:50:d6:f6:18:
b4:66:f1:27:d9:90:62:79:c2:c1:0b:d5:d9:7c:20:
12:0c:b6:5b:ce:6f:6c:8a:c9:0e:c4:db:18:65:53:
d6:17:a0:aa:da:28:8e:d2:25:62:50:bd:0e:51:20:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:79:c1:8b:42:67:9e:32:89:61:32:00:ec:21:76:69:89:e7:
34:b8:33:3f:1b:d1:fb:7b:17:4a:f6:e7:0b:b2:7a:dc:6c:92:
3d:97:3d:5f:b5:20:24:48:2f:52:71:c8:ff:94:94:25:27:25:
aa:14:59:18:f0:61:f5:72:b7:6a:57:d6:5b:dd:ff:ef:9e:c7:
94:8f:62:a7:a4:fc:8a:4f:9d:4f:b6:68:37:a9:25:47:da:e7:
a7:f8:7f:5a:f7:54:52:70:8d:93:8b:a6:45:87:28:ae:a9:28:
2a:b7:74:07:4f:71:7d:25:88:22:20:88:8b:99:08:0a:20:a8:
6b:d1:86:dd:a7:95:aa:84:34:64:3a:ef:21:63:c3:a9:87:76:
5e:9f:0b:ee:b0:20:9b:33:b5:12:2a:e8:5c:d4:8f:ed:89:bc:
55:ac:a6:fe:5c:ed:87:dd:f2:62:e5:29:24:f5:9f:ce:80:75:
5d:a1:8a:15:80:04:31:40:fa:8a:46:88:04:ec:61:d3:06:f1:
d4:5d:39:c0:f4:22:da:c6:d2:a8:d2:0b:e6:03:41:0d:df:1f:
a1:e1:d9:f3:c0:5c:8e:2e:20:0d:24:bb:59:50:fd:6c:13:25:
44:cb:d9:ed:b5:9a:46:ea:26:6f:44:db:af:6c:9d:53:fa:ba:
ca:e0:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:46:10 2025 by rpki-client