Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft
File: KnUvQ6QxoheyTTXOiiVkyVhFESE.mft (raw, json)
Hash identifier: W6Yrqh/ZcrXWEHfiryOKLMRYNVe+C/jC84He7x7UWxI=
Subject key identifier: CE:4F:CC:CC:7F:C4:06:44:6F:9B:C0:34:DA:0C:68:06:60:F5:E5:8B
Authority key identifier: 2A:75:2F:43:A4:31:A2:17:B2:4D:35:CE:8A:25:64:C9:58:45:11:21
Certificate issuer: /CN=2A752F43A431A217B24D35CE8A2564C958451121
Certificate serial: 14EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnUvQ6QxoheyTTXOiiVkyVhFESE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft
Manifest number: 14EE
Signing time: Sat 17 May 2025 08:09:17 +0000
Manifest this update: Sat 17 May 2025 08:09:17 +0000
Manifest next update: Sat 17 May 2025 14:09:17 +0000
Files and hashes: 1: KnUvQ6QxoheyTTXOiiVkyVhFESE.crl (hash: HKFERwz32h3x29Xk8mPmAJ9nuVGBb5wQEq+unA3d5cA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5358 (0x14ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A752F43A431A217B24D35CE8A2564C958451121
Validity
Not Before: May 17 08:09:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CE4FCCCC7FC406446F9BC034DA0C680660F5E58B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:2d:b6:33:50:4d:fe:37:bc:70:77:b3:3b:
5c:c4:d9:4b:6f:6b:50:47:d3:96:39:23:fd:62:a7:
bc:f0:80:44:25:f9:77:a8:a9:81:dd:32:24:3a:d0:
a3:8b:19:9f:05:ab:0c:41:ef:10:dc:2c:ba:a5:d8:
87:4f:ba:2f:f7:c7:40:85:12:02:0c:4e:89:24:f7:
11:b2:b9:d2:0d:2c:87:0b:ff:54:65:c9:ec:23:fb:
80:d8:aa:15:af:7f:8e:ed:f6:f6:a0:c0:83:a4:16:
41:93:41:cc:4b:32:cf:0f:1d:81:3f:27:b8:42:8f:
e4:73:c9:5b:da:c2:77:96:1a:c0:65:45:b6:54:45:
32:7d:ac:88:a7:bf:03:68:12:6d:2a:7b:96:02:21:
f8:93:dd:e1:97:78:4d:c4:90:ec:ab:53:6b:53:6b:
17:1b:c3:50:6c:88:60:90:cb:99:46:65:f5:71:8d:
61:c9:f6:23:7c:b1:5e:bd:12:73:b5:63:5c:f2:f6:
06:a5:86:e0:38:60:46:7f:ac:47:2f:75:a1:64:7e:
e2:4e:23:18:a8:19:59:65:88:7a:e8:08:a3:ea:2b:
84:71:32:08:51:28:b2:1e:44:83:86:3a:c4:30:8f:
5c:c1:f6:25:5b:61:6d:a7:d4:4b:16:1d:9a:25:bb:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:CC:CC:7F:C4:06:44:6F:9B:C0:34:DA:0C:68:06:60:F5:E5:8B
X509v3 Authority Key Identifier:
keyid:2A:75:2F:43:A4:31:A2:17:B2:4D:35:CE:8A:25:64:C9:58:45:11:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnUvQ6QxoheyTTXOiiVkyVhFESE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:13:0a:6f:79:f5:b7:30:54:d7:19:b1:a7:f3:27:05:a7:9e:
a4:3a:5f:a1:b3:03:e6:c7:8a:f1:a7:6d:31:b4:3a:ef:d1:c2:
41:a2:e9:dc:9d:25:20:2e:7c:86:38:dd:ed:a4:6f:0b:03:1d:
14:2c:cc:da:3d:a5:3d:65:d2:6a:ca:8a:e4:b5:a9:d2:d5:51:
e2:60:ef:b7:0e:83:c2:8f:c8:04:21:35:da:2c:29:7a:a9:a8:
6b:c9:83:ad:d6:fb:de:a1:79:5f:75:3c:08:19:89:85:ba:7a:
27:ad:64:df:ac:73:cf:1f:f7:ec:fa:e2:07:14:20:d8:3d:1b:
e2:52:7b:3f:e9:96:d9:de:86:62:d0:97:65:2a:e3:a2:68:96:
86:cc:2d:bd:df:76:7b:ff:22:56:45:33:3c:3d:0d:51:b2:d4:
93:23:52:05:ca:f8:0f:6b:b2:18:32:3c:c6:72:f9:96:00:41:
2e:eb:29:7b:30:91:33:7b:3d:c1:5a:54:e9:97:63:3b:5f:dd:
7f:77:59:37:4c:05:4b:04:9b:30:ef:05:19:d2:df:72:64:17:
ef:13:5c:c3:ae:d4:42:47:1c:c9:29:1e:71:c7:25:c4:d9:e4:
7e:90:78:aa:dc:41:f2:f2:c7:7a:ab:95:f5:14:a5:fe:b5:93:
6a:98:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:17:31 2025 by rpki-client