Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
File: wd4p357Li9rL--H924bfKWtpCOs.mft (raw, json)
Hash identifier: CJMJf17lgRdYWbS1ViH7DbV4ehrQXUzyDrR4/yvjZPc=
Subject key identifier: D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Certificate serial: 30EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
Manifest number: 30E0
Signing time: Sun 18 May 2025 03:38:34 +0000
Manifest this update: Sun 18 May 2025 03:38:34 +0000
Manifest next update: Sun 18 May 2025 09:38:34 +0000
Files and hashes: 1: 5ZhYonZWF6UpfWYWQVUXPqifwQI.roa (hash: bmZ6Rph2bMW9NufuEE/7yqvrLx3PWEO6FMdcW1JmeyE=)
2: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (hash: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M=)
3: wd4p357Li9rL--H924bfKWtpCOs.crl (hash: 5rXpdklo+EcDHtlm0+kvSvXna7S4YlXxZiAnXcf/GHI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12527 (0x30ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Validity
Not Before: May 18 03:38:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D50904F288CA106FC94061AABDF81FBD35239B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:ec:55:7c:6b:01:58:d8:57:d8:e3:34:70:
09:65:59:ad:b7:bd:fd:33:c7:21:f7:53:05:f8:4e:
52:4a:85:1a:f7:7c:06:db:55:c2:b2:d7:09:55:d5:
39:a2:2c:2b:2a:70:29:13:35:99:ca:d8:bf:59:d5:
ba:e4:24:48:6f:73:98:44:3d:ac:6d:3d:47:75:d1:
11:fe:8c:e6:01:4e:52:b5:8c:fc:79:d7:c5:75:ea:
a8:23:6d:91:87:e8:5a:aa:95:9f:13:91:de:25:77:
45:9d:9f:19:20:36:3a:5e:7a:0a:03:f0:94:29:e2:
0c:19:09:23:ce:6a:08:74:e5:b9:67:ab:9b:67:31:
f1:24:9a:5f:12:81:5e:0c:a0:6d:c6:14:4e:b0:e5:
ff:a4:f9:9d:27:47:16:d5:ea:ae:27:e8:1b:e7:71:
74:d6:9f:99:11:62:d8:7a:ba:3b:5a:2b:73:37:33:
02:6c:58:11:7d:95:13:20:95:ec:0a:68:b1:fb:4a:
9f:ce:25:9d:6c:f2:00:c5:e9:d7:9b:a2:62:84:ee:
47:26:88:dc:5d:1e:e6:27:7c:91:0b:08:59:7b:0a:
32:f3:c9:59:12:57:8c:b4:c9:e9:82:a5:6e:b4:96:
5c:ad:99:7e:74:e5:91:9d:f5:cd:37:28:11:7d:41:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
X509v3 Authority Key Identifier:
keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:f3:08:f0:a4:3b:a7:25:1e:ee:4e:0e:12:c9:95:64:53:
21:6e:fb:1d:82:0b:ef:e5:cf:45:f8:0b:fe:16:69:e7:91:c6:
86:51:71:b2:70:c3:36:d4:88:3c:ad:88:9d:89:2b:e0:6c:6d:
95:b7:7e:be:3f:3b:6c:2f:fd:05:8f:70:51:d8:c4:e4:80:09:
6d:ee:b7:88:53:c4:e9:f5:d9:3f:13:d7:11:f4:e6:4e:68:61:
10:af:25:9c:5b:da:0f:3e:77:2a:fe:60:07:19:b3:e9:cb:40:
93:1b:40:19:35:75:76:c6:b0:57:7a:b7:c3:9a:ab:db:6c:bc:
ef:b4:2a:39:89:64:15:03:aa:14:fd:c1:ca:db:12:83:3a:e2:
73:13:ad:7e:09:3e:4f:55:e3:63:fa:06:ba:e5:e4:73:b7:77:
fa:24:3f:b5:64:db:b1:56:dd:f0:d3:b0:99:bf:d0:2c:d4:d4:
53:31:94:85:a5:ca:ec:60:e3:70:99:7a:d5:ea:37:16:38:3b:
40:ab:4e:d5:15:fd:77:f9:a7:31:57:d1:d3:93:58:17:01:99:
92:78:b5:45:4f:a0:97:7b:97:ce:c5:63:85:8f:23:b2:51:5e:
29:84:79:24:0c:dc:a5:c3:6d:d9:78:09:d3:54:38:1a:db:78:
52:88:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:52:41 2025 by rpki-client