Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
File: DuhjrFcK7qH5ML6l52qufdVTgE4.mft (raw, json)
Hash identifier: VUhyZ7nAFj3WreV4n0nrsCZpNxauybkoK2B8yO/8vJg=
Subject key identifier: 0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 0AF0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
Manifest number: 0AA3
Signing time: Sat 29 Mar 2025 08:29:54 +0000
Manifest this update: Sat 29 Mar 2025 08:29:54 +0000
Manifest next update: Sat 29 Mar 2025 14:29:54 +0000
Files and hashes: 1: DuhjrFcK7qH5ML6l52qufdVTgE4.crl (hash: ufe+rWTHxvihVxnVevT86qWZ2QozQ+Xy6OAKWOkiiiQ=)
2: _V_7ixByiVG1pjZi1mDw4b4VxpI.roa (hash: XyMDQBmqSSFJJTqxQXZg0E/WbwlH0Rpqj7jDNMHguZw=)
3: cJAPNRcPlRfx94t1spCSlsQGruY.roa (hash: QVD+nt3vSI8wTFmIQdZHzTyisAO3IMVPHg1eYvC0yEo=)
4: m8Mbp3fOk0mfKmCfNvkt2fmUd30.roa (hash: 6PVM1OMBTNJ2+7s4aPik4DaNu6ngPai+hTo90igXodQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Mar 29 08:29:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A6B3361E1F5FA9B0266D7DF924422A40B47149A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:3a:68:7a:71:a9:0e:99:d5:4d:01:d6:5a:
1f:8c:a0:a8:28:df:03:51:4b:45:8e:5a:38:00:08:
03:c7:a6:b6:a7:86:94:91:59:23:85:b1:d4:3f:9b:
a4:f6:0f:d0:22:54:63:c7:80:21:e6:1f:54:57:14:
85:47:2e:4b:6d:17:8b:98:7b:60:66:ce:57:5b:2d:
f4:31:0a:d2:15:14:7f:06:c2:9e:8e:46:75:89:0f:
64:b0:fd:19:43:33:68:c0:33:95:05:89:fe:a4:7c:
5a:fe:fc:8e:75:77:8d:08:3f:9b:77:44:78:37:ac:
ca:7c:85:64:b8:fb:24:24:36:d5:c8:97:db:87:0d:
b0:fe:4c:ae:25:ec:c1:ec:ff:5b:7a:29:d1:5a:cd:
d5:56:47:55:02:d6:c6:13:96:90:03:ed:82:e5:b8:
0a:a6:ca:ba:0a:ea:15:38:8a:4b:c0:e1:61:ff:6a:
a7:bb:40:1d:5a:d9:af:b4:45:92:4f:fc:46:b2:4f:
13:cb:9b:a4:46:c2:b9:b7:cf:05:a2:73:d7:cc:c4:
f5:f2:43:ef:5b:b5:09:de:44:f7:6d:27:6c:0f:43:
f8:15:5a:72:30:b4:82:97:46:41:65:8d:a1:48:45:
b3:bf:aa:58:cc:59:61:c1:48:1c:e3:01:3e:78:96:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:33:61:E1:F5:FA:9B:02:66:D7:DF:92:44:22:A4:0B:47:14:9A
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:b3:0e:3b:3b:f2:5a:dd:52:be:57:e8:bb:e8:62:c4:65:
bc:e2:9c:f9:1e:1b:bd:72:25:84:d5:89:27:38:f3:aa:63:61:
a4:83:db:b4:52:55:b9:0c:d2:e1:fd:37:65:6d:65:98:5f:5d:
5d:8c:56:f1:f9:f4:d5:3a:58:d2:43:24:fe:ce:90:6e:cb:d4:
8e:76:59:7e:19:83:4c:c7:ee:91:a3:9d:b7:28:b1:e1:e3:4a:
58:97:da:8b:88:df:3a:83:11:56:5e:c8:4c:af:23:c6:9e:e5:
27:9b:4e:68:39:5e:45:b7:9a:cc:a0:8c:3a:54:11:ea:be:ff:
29:a8:46:2a:5a:10:b7:38:2d:c1:12:7b:c4:1a:e1:95:8d:f3:
81:a3:1c:d0:7f:3f:f3:72:68:ea:f2:0e:49:bb:c7:53:b6:0a:
53:c5:bc:f8:28:11:87:54:82:a1:7c:07:10:27:6e:b6:b9:55:
b1:e4:f0:3d:2e:2e:f6:c6:59:bf:1e:ff:ee:fa:03:a3:cc:ae:
fd:34:71:5c:4f:7b:a9:78:a8:73:58:36:c3:36:39:50:21:e8:
3e:18:d7:4f:02:4f:b3:fc:ef:1f:94:81:f0:b1:d6:7a:ee:47:
e4:5b:73:e8:c2:97:93:f5:80:26:f5:39:b0:df:ea:11:62:80:
f0:d5:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:49:36 2025 by rpki-client