Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
File: IzgaqYlJu4DtLCSso3qClDkUg3U.mft (raw, json)
Hash identifier: HeVEoAiFQz/CNlDysnIHbNfaS4nxeOTAkCRV6ChLjAI=
Subject key identifier: 18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A
Authority key identifier: 23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75
Certificate issuer: /CN=23381AA98949BB80ED2C24ACA37A829439148375
Certificate serial: 1AAE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
Manifest number: 1AAE
Signing time: Sat 17 May 2025 03:13:15 +0000
Manifest this update: Sat 17 May 2025 03:13:15 +0000
Manifest next update: Sat 17 May 2025 09:13:15 +0000
Files and hashes: 1: IzgaqYlJu4DtLCSso3qClDkUg3U.crl (hash: MU99ALgq8Bu7uNHuMSkf8ccB5WdqA2pS3uOitFn0N+g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6830 (0x1aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23381AA98949BB80ED2C24ACA37A829439148375
Validity
Not Before: May 17 03:13:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=18DE9AF8E754871B16DCD69D80E9DE9F1E2DCB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:58:67:73:18:3f:55:28:bc:94:55:e4:0b:
3b:bd:a6:c0:25:59:20:82:2d:1f:89:c4:e2:b7:c5:
82:3e:ce:61:ca:3f:ad:6b:fc:04:b7:2e:77:2b:97:
fd:2b:a9:81:5e:f8:bf:fb:78:bd:09:c8:3f:d5:e6:
80:57:9e:da:b4:2c:f6:44:ab:d9:f5:e9:c3:34:1b:
92:b1:ab:0e:1c:75:3f:02:a7:f6:d0:0e:18:55:be:
aa:49:43:98:e3:67:84:c1:81:40:0e:fd:36:c8:89:
b5:9a:66:1f:9b:88:ee:c8:ec:9e:25:5d:a3:5e:2e:
5a:f5:8c:cb:90:b0:8e:5e:1d:e8:fc:db:06:7b:e3:
75:44:94:13:7c:49:3f:d0:19:10:ee:14:0e:e5:0e:
a6:ce:ae:6d:35:a6:df:63:ec:c1:3f:5d:82:9e:f3:
0c:5f:eb:47:66:0b:7e:74:40:b9:28:c5:80:e3:c6:
aa:39:cc:23:78:d2:7e:11:b3:d3:ab:18:de:ea:a8:
a7:5b:ef:05:01:fa:1c:de:a3:e1:f6:33:2e:35:93:
30:05:ff:80:93:ab:26:ed:c7:84:53:23:29:66:20:
45:6a:17:52:49:f6:c0:2e:ee:3d:d3:a6:77:6e:2c:
ad:16:00:3f:76:35:c7:b2:d0:55:21:f9:17:19:72:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A
X509v3 Authority Key Identifier:
keyid:23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:e5:a7:73:02:06:20:de:8f:cd:52:ac:3f:a3:ae:e6:35:
4e:16:1f:a7:be:71:4a:51:09:19:81:7b:60:cd:41:8e:0f:56:
62:da:7b:97:f3:fe:3d:ca:4d:9c:31:b0:e2:69:ed:c1:ce:ed:
70:01:9b:6b:e9:1b:3e:8a:7c:a0:26:de:c0:4c:d8:f5:94:f5:
39:8d:ac:6c:a9:9e:3a:79:d4:c6:61:53:f3:d0:96:e0:87:e8:
d2:96:1b:55:ef:18:d8:c7:01:f7:6b:35:ff:c8:0a:7c:c9:dc:
e4:32:1e:8b:ea:32:bf:23:e9:de:4d:4f:3a:2d:31:bc:db:62:
4b:53:84:a0:c0:5f:ba:9d:9e:25:c7:d5:6f:73:a1:24:ad:91:
f3:34:21:b5:e2:ee:31:96:d6:cb:03:5e:10:99:24:2d:b7:aa:
2c:64:02:8b:07:c0:bd:30:39:26:4e:f9:f9:eb:92:14:0e:c1:
1c:c7:25:06:41:f0:a1:24:b4:ee:7e:88:c2:cd:6c:ae:bd:b4:
6c:80:15:f6:3b:7b:37:f0:0c:81:78:ce:27:d4:4c:40:27:8e:
ef:c0:90:0f:b7:33:e1:44:c8:55:87:5f:45:83:02:fc:b4:3e:
9d:22:b5:29:90:54:26:03:33:e3:0f:f9:5d:79:28:c8:12:33:
7d:3a:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:32:00 2025 by rpki-client