Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
File: 5QLeLGCGpmKEuAzbe1rAwSzD88I.mft (raw, json)
Hash identifier: dWFTchz4HPO4u6IExlxo1D19ygVwpH1MOnnW+d5TqM8=
Subject key identifier: A4:AF:19:62:66:06:60:15:FB:92:30:A5:EC:33:F6:89:49:09:A1:AB
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial: 05D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
Manifest number: 05CF
Signing time: Sat 17 May 2025 13:08:21 +0000
Manifest this update: Sat 17 May 2025 13:08:21 +0000
Manifest next update: Sat 17 May 2025 19:08:21 +0000
Files and hashes: 1: 5QLeLGCGpmKEuAzbe1rAwSzD88I.crl (hash: cfVFV7zUCTHdpiUj3C0QmAw8ezN3yzOU0E6OBZfS84I=)
2: IjOalNpdPDs3gxhI0D5OaH51sQA.roa (hash: vyd8V/94c2HTG/sEYhJnsIiS/a6VWjaXDmtaOkYIrcg=)
3: TDl0_AU5PTw-rw-TymScnt56-og.roa (hash: t0LG5e9nnJeC9jPCNRt178BO3tQQzn4jKli2mncZzyA=)
4: TlMIClXWOImmRKz7dKhP6P-hd8A.roa (hash: olSFdKVgUsINueki9JfGzPOe1bnDm1eGlkkPfK2zg7M=)
5: _DbEdZrniCPwVVOGbmzd38tW6tk.roa (hash: ly/8B2kL1WV/fbP+Bdiy+hZM/mhIZ8Lr1S6MG861aBc=)
6: bbrlTFMwX8s0uugJo4S2yUv0-BE.roa (hash: Wtc8zWUd1c1/p+G/OUdq5b34UwCT1Ib7c9O4ita+u2E=)
7: mjlxUf-q70ucdmzB-FFUuOB-n2Y.roa (hash: +xVlj7saJfes6vN+AXwbfHbekxwvr9doQiKILLCEgY4=)
8: zDyyxg5IOYc8_qOsqr4_R3Thuq0.roa (hash: TAazcAYgIIyVl5zEYN1mTlYrN5u7EWpIPrjVt3iJeHw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Validity
Not Before: May 17 13:08:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A4AF196266066015FB9230A5EC33F6894909A1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fa:f4:0a:f9:27:63:42:b2:9b:15:2d:b5:23:
8d:58:04:ca:e6:08:81:7d:99:da:4b:5f:63:da:7b:
f4:8d:d1:69:51:64:1a:ca:86:10:38:b2:1a:f0:b2:
76:75:9d:5f:36:3a:9e:6e:c0:fb:97:40:ce:86:c2:
6d:a3:06:1e:fa:67:13:a6:de:66:30:f3:d9:d1:27:
28:ec:09:d1:ef:b7:ba:0b:d7:6d:f7:3f:fc:2f:96:
b9:be:53:84:03:6e:0c:69:32:04:1a:3a:d8:75:89:
d2:d2:dd:8f:30:18:3e:98:32:84:fa:8d:35:92:e0:
fe:b6:f0:ef:2c:2c:9f:b2:60:96:d7:48:0d:d4:d0:
9b:36:6b:bc:4c:51:ec:70:2d:ea:1e:f4:66:74:0d:
43:00:2b:70:a8:96:a0:c0:5b:40:92:f1:66:29:13:
a2:3a:11:db:3a:93:5c:3e:12:14:db:41:cf:66:68:
e2:e0:85:17:84:86:63:42:1b:12:68:a1:2b:8a:f1:
d2:9d:42:94:4a:5e:70:82:6d:11:07:b5:87:fd:c5:
be:c4:a4:9a:dd:39:39:e3:91:52:9b:d1:36:dd:98:
64:8a:32:91:96:cc:00:75:73:e7:db:0c:1f:e1:f7:
df:4e:61:45:47:d8:bb:21:05:63:d7:23:d9:a2:50:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:19:62:66:06:60:15:FB:92:30:A5:EC:33:F6:89:49:09:A1:AB
X509v3 Authority Key Identifier:
keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:cf:a8:aa:04:6a:29:d1:88:ec:ec:08:61:94:d1:14:ad:
13:d3:a7:8a:ae:22:83:0d:5a:3b:8f:81:84:87:a6:c9:c0:a3:
9f:98:93:04:8a:49:87:34:2a:01:64:1b:15:da:ed:6d:62:ca:
39:0a:f7:ac:0a:c1:b9:ce:9d:88:89:e0:ca:71:96:90:33:b5:
86:a0:69:e4:26:a8:d2:6c:b1:52:b4:14:91:2c:cf:a0:ad:ef:
92:52:e4:9b:cd:25:54:3d:3b:01:0a:c6:e6:09:e4:38:8d:42:
9e:a9:db:0d:c4:ea:53:ce:9a:37:74:e9:83:7a:6f:40:31:50:
5d:a9:9f:54:42:4a:c4:ee:90:17:d2:ec:d4:d5:eb:c7:ed:6f:
08:22:b2:d0:a0:4e:6f:f3:9f:69:de:10:88:4b:2e:2c:40:95:
9d:e5:4b:25:76:17:2c:1c:ee:7e:68:f9:0a:d7:a9:7b:1e:27:
c7:13:eb:f1:a4:2e:c6:df:2c:71:7a:44:b9:fe:92:6e:8a:f3:
54:d9:23:ca:b4:07:83:dd:87:d3:a2:c8:e8:c3:60:cf:e4:cf:
cd:2c:60:e5:86:32:99:c7:2a:b4:01:0a:a2:30:fc:ca:4e:27:
ab:5d:1f:ef:c7:09:52:28:3a:e2:d6:11:3a:b1:d7:c2:39:d3:
ad:d5:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:39:54 2025 by rpki-client