Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
File: LznWwjiJNFGgbrNMUtd6vBiQa-A.mft (raw, json)
Hash identifier: GxOPvjyMDuEt+jWtW0/aLJBGiaOE9hmhJdl3Pt/enRM=
Subject key identifier: 2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial: 1E24
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
Manifest number: 1E1B
Signing time: Sun 18 May 2025 03:43:51 +0000
Manifest this update: Sun 18 May 2025 03:43:51 +0000
Manifest next update: Sun 18 May 2025 09:43:51 +0000
Files and hashes: 1: LznWwjiJNFGgbrNMUtd6vBiQa-A.crl (hash: oBFMWiqvKQn+0FoezidYz91fg1zsILrK+lKrn2rC/W0=)
2: TFHfVA751cHS7jHgiJVox534jDc.roa (hash: 6uhr4XPAMsXDZRhUd2yY0O3csi02n5IkElZ1806zd3s=)
3: d7cwv4DUcWOjqOPvssJYW2Q6SzE.roa (hash: uDrdkDtV0+glPcCXYcNhF6UYlio1F2EoZKjIywgkxLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7716 (0x1e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Validity
Not Before: May 18 03:43:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2F4059F1B7DA8AB0E612967F7C4FD308DF777777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:ca:33:df:74:25:87:a5:16:88:35:68:4d:
40:cc:11:97:81:e4:7f:5a:b8:8f:59:bb:88:5d:8a:
a9:23:5b:ad:d6:41:67:10:ec:9c:dd:3b:83:52:15:
a0:d7:e2:6d:7e:48:e3:55:d1:fa:db:c7:a5:7c:82:
02:79:9f:e1:ef:35:3f:16:cd:5e:67:3f:16:b0:7e:
46:56:a0:53:04:d3:14:d2:ef:3f:e1:4d:35:d0:df:
04:b8:80:d0:74:88:d2:59:e2:33:97:42:57:c2:c5:
8f:df:da:13:2a:6a:34:08:4f:09:9c:0c:68:da:8f:
bd:d2:3e:79:02:e2:df:ee:a3:c1:37:e8:3a:f2:64:
1f:5b:f8:67:33:5a:03:f6:17:cd:c3:89:62:aa:a0:
4c:6a:66:e0:cf:cc:f0:b5:22:c6:80:e7:80:2f:62:
be:e2:72:3d:d4:5f:e9:99:f7:22:cf:8e:86:b1:70:
4c:00:08:e4:0a:6a:d1:90:31:cf:a2:f6:fb:d8:a1:
87:6a:a8:fa:17:02:7d:54:58:9e:a4:e7:dc:be:57:
a7:c3:e1:c7:eb:18:4c:7b:79:19:98:8f:d9:65:28:
58:2f:14:c3:93:ab:bb:73:95:ec:b8:05:94:8a:0d:
94:bf:07:df:a7:05:c6:1b:f8:0e:90:09:d7:09:34:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77
X509v3 Authority Key Identifier:
keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:1b:89:f7:74:d4:ee:63:02:a9:9b:c3:f2:f4:f7:f2:02:
4e:56:0b:2c:45:3c:9b:c6:d6:35:02:10:d9:d1:24:a0:30:5c:
0e:8f:e1:87:11:90:23:b0:61:76:63:d2:8f:87:e6:67:66:3d:
9c:f8:36:7d:6d:ca:74:ca:96:aa:75:94:0a:1e:d5:bf:2f:e0:
c1:64:8f:88:8e:73:2c:47:41:d0:1c:d6:0a:aa:44:29:05:51:
d9:be:f1:70:6f:d3:43:ae:b9:f7:4c:a9:4c:1a:e7:f1:3f:f4:
9f:7e:b7:fa:15:e8:4f:d0:a4:73:49:2f:f3:8f:a7:1e:e8:27:
75:82:47:23:8c:37:8d:f0:24:29:c5:9d:66:91:0e:9e:ec:34:
c2:55:1a:3f:18:e7:97:10:d9:55:ce:fc:8f:08:cd:5d:5e:72:
45:27:29:ac:9f:ee:ca:8c:2a:48:fc:e7:19:69:f3:1f:57:29:
4d:72:1c:76:59:45:a1:b6:7d:73:79:27:0b:20:75:75:2d:49:
52:d0:10:5f:c7:f0:42:c3:49:19:d9:e6:51:dd:5d:ac:da:6a:
81:b6:42:7a:6e:ec:11:cf:b6:eb:e9:f5:a2:47:1e:ff:23:f2:
62:2e:72:dc:a5:ea:9c:81:6b:5e:cd:76:6b:e9:62:e6:2e:b5:
d4:68:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:55:36 2025 by rpki-client