Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft
File: A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft (raw, json)
Hash identifier: 9VgviXaqhT+W27NntJAQXlOic0x1TjmHxiTAREfCL9M=
Subject key identifier: 82:13:BD:BD:88:7F:C1:4E:24:BD:C6:2D:DA:10:0A:70:BF:98:BD:AB
Authority key identifier: 03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7
Certificate issuer: /CN=03CB843817F182543A13C9F565D7D119D90199B7
Certificate serial: 15D3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft
Manifest number: 15D3
Signing time: Sat 17 May 2025 13:08:09 +0000
Manifest this update: Sat 17 May 2025 13:08:09 +0000
Manifest next update: Sat 17 May 2025 19:08:09 +0000
Files and hashes: 1: A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl (hash: 2wdXc6uyQYj3RUVypWz+ZwxJJnFvy3w5nni7c9LFQb8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5587 (0x15d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03CB843817F182543A13C9F565D7D119D90199B7
Validity
Not Before: May 17 13:08:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8213BDBD887FC14E24BDC62DDA100A70BF98BDAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:f4:da:bf:a7:1c:05:3c:ab:f4:a7:e5:3b:
45:c4:c0:89:e7:9a:f6:43:90:9e:ab:36:ce:67:a5:
4f:5e:ba:5f:cf:b6:74:b8:94:80:cd:4c:b4:b5:e3:
52:fa:5d:1a:b2:12:3b:48:74:a5:52:cf:50:55:fa:
cb:ec:52:13:cc:62:c1:3e:30:38:b1:5d:97:de:70:
fa:be:38:f8:40:4f:27:6f:8c:c7:93:cf:be:5c:7f:
2a:06:f1:ca:63:3a:0b:d7:0e:37:18:47:c7:bc:c4:
29:a5:c8:df:e3:e0:80:df:d3:51:a3:23:46:86:3b:
3c:e8:c9:69:fb:8f:ba:1c:5f:fa:ae:23:d7:93:6a:
b3:c6:fe:4f:ae:d5:6e:e4:f1:41:32:e0:20:6d:43:
62:ee:16:2d:a0:65:78:d2:45:01:68:42:d3:66:ca:
17:58:4e:d2:82:5c:5b:06:0f:b2:50:e7:d6:c0:4e:
bf:6e:1a:6d:ef:38:15:03:d2:23:59:34:f4:fa:11:
4f:3b:2b:02:2e:36:08:14:65:af:3c:cc:3d:04:b2:
32:d1:24:c8:ca:24:10:2a:94:62:b6:db:8b:b3:4b:
c3:19:dc:06:4b:ad:2d:5d:2d:83:38:7c:34:07:1c:
bc:b9:8f:23:52:b4:f1:8f:04:53:25:19:6f:88:39:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:BD:BD:88:7F:C1:4E:24:BD:C6:2D:DA:10:0A:70:BF:98:BD:AB
X509v3 Authority Key Identifier:
keyid:03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:83:7e:1a:a6:87:57:ce:b3:4a:99:3e:13:76:3f:ee:1e:81:
7d:cd:ad:2f:f3:2b:10:1d:93:10:b7:4b:7a:bc:40:c2:91:e5:
4c:93:2a:2e:05:e9:e6:f7:a8:53:95:25:7b:59:8e:48:24:14:
9e:0b:34:d6:54:4a:1f:a6:b2:fb:e6:6f:e8:39:9c:d8:bf:37:
65:8d:f5:81:9d:49:e5:5c:ca:e8:c2:51:dc:92:29:82:89:ac:
eb:b0:f4:3d:1e:b8:86:c5:e4:50:63:ad:78:9a:f3:0c:10:12:
1c:ed:5d:33:d9:46:e4:53:f3:19:4d:f3:b0:1e:a0:31:41:ae:
ed:f2:23:12:e5:2c:18:ab:71:a0:c6:a5:3a:f3:37:17:e7:16:
c1:40:8d:8d:a2:e8:d1:17:a4:c9:9d:38:60:e9:20:ce:d2:e3:
e5:43:9b:10:c1:8c:15:cd:49:4f:aa:82:ac:ad:b1:3c:65:a3:
21:7a:a2:d9:eb:00:4b:f2:cc:09:71:03:6e:85:ef:07:e3:96:
c5:a3:a3:c6:6b:4d:8a:6b:bf:a9:c2:7f:06:b1:1d:58:1a:01:
82:c0:e0:7a:18:76:7b:54:f9:5d:da:7f:5c:d8:b7:cc:51:77:
64:3e:46:18:52:52:43:96:0e:b3:83:fd:33:5e:c6:76:c1:43:
b3:da:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:38:46 2025 by rpki-client