Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
File: 5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft (raw, json)
Hash identifier: 2d0mTsbQMD9nZFScQ4C4cySv41CTe804zcMVQSLVvAQ=
Subject key identifier: C8:78:A0:D0:50:B9:93:35:16:51:7E:A5:08:7E:BA:12:24:41:2D:63
Authority key identifier: E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95
Certificate issuer: /CN=E5EDC564FE8B02F2CF870093BBFDDC327D6D9395
Certificate serial: 1D8C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
Manifest number: 1D8C
Signing time: Sat 17 May 2025 22:38:35 +0000
Manifest this update: Sat 17 May 2025 22:38:35 +0000
Manifest next update: Sun 18 May 2025 04:38:35 +0000
Files and hashes: 1: 5e3FZP6LAvLPhwCTu_3cMn1tk5U.crl (hash: iL8tbQbcS5JXR8J4gpE9YaU8CuljRnUkn9JscMiYjjs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7564 (0x1d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5EDC564FE8B02F2CF870093BBFDDC327D6D9395
Validity
Not Before: May 17 22:38:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C878A0D050B9933516517EA5087EBA1224412D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:3f:58:00:f8:4d:85:6d:6f:ef:7d:5b:80:
b1:14:d9:33:7e:2a:3c:4a:40:6e:b4:29:f8:90:f2:
8b:d4:49:d1:9a:0b:ed:d7:e0:8c:bb:a3:7e:30:ec:
1e:a5:d9:89:32:0c:63:44:c5:a8:e8:d3:b2:e5:9f:
5e:f4:23:d9:7c:e7:09:8b:38:36:aa:9a:07:e0:00:
42:15:39:f5:36:a3:2e:3a:3c:aa:5c:07:6b:79:a7:
b5:02:02:1e:a8:ab:1d:ea:5d:f9:db:8c:7c:0f:1b:
3f:3c:75:b1:37:2a:86:58:68:50:c2:95:1f:02:05:
79:3c:06:55:8f:42:c2:d8:f4:fc:d2:79:20:3c:c9:
1b:d5:2f:41:96:af:7e:2b:b5:e9:2a:12:35:79:e5:
44:c8:05:0f:4d:c8:65:32:fd:30:0d:49:b0:e9:84:
8d:5c:e1:22:84:7d:29:62:c0:fb:d4:88:65:d5:65:
1c:66:1c:6f:4c:07:1a:2c:0e:44:f8:63:9d:c7:08:
8b:83:d7:af:b2:c0:b3:47:79:fe:0f:f5:da:cc:8b:
7f:a5:59:6f:ef:65:2f:f5:30:63:ee:b6:73:46:5a:
df:4b:07:20:4f:55:2a:c7:8d:d1:49:c0:58:42:e6:
15:86:b6:04:aa:b0:9f:54:69:3f:1b:61:86:83:18:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:78:A0:D0:50:B9:93:35:16:51:7E:A5:08:7E:BA:12:24:41:2D:63
X509v3 Authority Key Identifier:
keyid:E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:50:97:5e:b6:f4:2a:e1:16:3f:00:27:26:ba:ba:a8:f6:38:
b6:1b:87:48:93:1e:aa:47:c6:f4:7b:ec:a9:44:55:f9:c0:aa:
ff:95:a4:9d:42:3d:c5:54:eb:dc:64:13:04:01:06:09:9e:d6:
80:dd:05:71:37:cb:5c:14:dd:80:0a:6e:13:68:a9:53:10:36:
4d:9d:7b:e9:9b:39:63:42:28:c0:af:f5:06:0f:e7:8e:e2:80:
1d:32:53:7a:69:a5:c9:06:da:cd:b6:8c:02:e8:6e:ac:32:eb:
6e:38:6c:26:f2:4d:62:6f:70:17:0a:18:70:bb:c8:8a:54:c8:
2c:d1:65:48:6a:46:c3:10:c9:36:fe:8f:a7:a3:88:c0:18:9f:
c7:ad:eb:50:1e:e6:a1:a3:db:ea:bc:6a:fd:78:30:a1:0b:80:
2e:60:45:22:c1:75:99:6d:f7:db:cc:33:87:8b:a9:20:bc:4a:
24:ec:27:40:8d:b7:98:82:b9:79:ad:dc:0d:fe:59:ed:2d:f8:
b8:19:16:05:b3:b2:44:dd:90:40:de:71:71:ed:b6:3c:b6:86:
61:90:fc:51:88:e5:ab:0e:aa:75:40:47:80:16:59:fd:76:3a:
1d:70:8b:5d:68:94:f4:e7:a7:fc:b8:b2:95:b3:6d:8f:0f:11:
02:c0:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:06 2025 by rpki-client