Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
File: A_XQOpMuSOf5T61oEuoovsj1LQI.mft (raw, json)
Hash identifier: xjnQHy5IKmviqMa/V0HIiqrEkdacEH+JZ+fQYLZwYvs=
Subject key identifier: B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8
Authority key identifier: 03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02
Certificate issuer: /CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02
Certificate serial: 252F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
Manifest number: 252F
Signing time: Sat 17 May 2025 13:13:11 +0000
Manifest this update: Sat 17 May 2025 13:13:11 +0000
Manifest next update: Sat 17 May 2025 19:13:11 +0000
Files and hashes: 1: A_XQOpMuSOf5T61oEuoovsj1LQI.crl (hash: xMsRxOhvo9l64zye1PXcLyk/MKF5yXJwt9gujUn6e1s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9519 (0x252f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F5D03A932E48E7F94FAD6812EA28BEC8F52D02
Validity
Not Before: May 17 13:13:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B160D3B1D8F283E740DB349B5E726242F228DDF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:5a:0d:2a:fa:2e:90:fc:19:f4:ce:b8:b3:
7c:3a:88:3f:a7:a9:e4:07:da:94:8c:e5:58:41:09:
16:75:a0:69:9f:e0:be:3b:16:0c:99:f0:7a:01:6e:
f7:35:98:45:0c:7e:b8:81:9c:b3:34:17:c7:25:05:
f6:d7:e6:16:86:18:ab:71:6b:2d:2a:4f:9c:91:1d:
65:cc:c9:96:af:69:3c:6f:83:89:54:ed:08:09:6d:
72:49:10:4d:35:1a:28:0c:ec:e5:14:17:06:55:6d:
ce:c8:23:c2:00:f7:3c:84:00:d2:3f:5f:da:e3:43:
94:57:70:cf:cc:f0:70:9d:88:ac:53:53:23:db:64:
7f:03:64:be:95:28:e7:2d:8d:ce:c3:05:44:d0:c0:
b9:a0:82:c1:3b:65:c5:c7:89:0b:09:b1:e2:09:6a:
32:47:b9:ce:d5:da:2d:6e:7a:57:0d:bf:14:de:b0:
51:f4:7c:f7:22:4b:cb:b9:7e:1e:fd:61:f1:7a:d7:
35:0e:60:94:b4:39:83:2d:d8:6f:32:72:e2:66:23:
d0:7b:ce:a9:c9:69:c8:03:7b:1b:d7:6f:65:f2:69:
ca:d9:da:b7:f2:54:c9:eb:7e:5b:65:ab:04:37:01:
1e:6f:e8:43:28:b7:be:fe:05:e4:48:af:e2:9f:9a:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:D3:B1:D8:F2:83:E7:40:DB:34:9B:5E:72:62:42:F2:28:DD:F8
X509v3 Authority Key Identifier:
keyid:03:F5:D0:3A:93:2E:48:E7:F9:4F:AD:68:12:EA:28:BE:C8:F5:2D:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_XQOpMuSOf5T61oEuoovsj1LQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/A_XQOpMuSOf5T61oEuoovsj1LQI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:07:0b:07:2c:4b:38:1d:47:6a:0f:bc:53:d3:3b:c5:55:24:
30:ba:69:da:05:c2:e7:6a:63:22:1c:88:2f:11:d6:f1:a1:35:
98:59:1d:74:e7:ea:9f:8f:18:4b:c8:e6:0d:38:71:76:9a:3c:
46:3a:ed:66:81:90:2f:9b:27:f9:65:a8:c2:b6:bf:9b:72:9b:
71:38:a7:6f:36:9e:3c:5d:0c:0a:7a:d4:dd:f7:6f:69:16:15:
e7:7f:74:19:a6:b9:fc:62:bc:75:83:51:ec:4a:e0:c5:7d:7a:
63:cd:89:6f:b3:b1:42:4d:b3:d2:f6:37:0c:b7:45:d9:f4:ab:
15:4c:e9:82:81:ee:bf:a0:c4:78:b2:54:fb:30:80:c8:40:52:
33:cf:37:2f:eb:2f:33:47:ea:fd:7b:f4:bb:c4:e2:59:60:0a:
4c:55:38:5c:e1:ee:b6:98:47:5d:8b:96:c5:6b:7c:e4:17:c1:
13:57:1b:21:72:ab:27:98:05:a2:be:32:79:2c:1d:dd:63:38:
1c:43:a9:5e:6b:e6:33:c0:8e:2d:ad:8a:be:8f:e3:a8:52:cd:
82:22:de:cc:f0:18:ec:81:f6:ce:e1:a1:fa:e1:03:0d:30:ae:
0a:23:3b:5b:e5:88:70:d4:9a:47:b0:4f:9c:1c:9e:1d:7d:c5:
2b:d5:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:38:52 2025 by rpki-client