Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft
File: yWewb7xL_3HCRTp9vkkVFDS7jW8.mft (raw, json)
Hash identifier: 7hUSSTSwTAC9u3moqNQRl4hs0SgveN/sxTu51Uou6nY=
Subject key identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E
Authority key identifier: C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F
Certificate issuer: /CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F
Certificate serial: 0C8D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft
Manifest number: 0C8D
Signing time: Sat 17 May 2025 22:38:14 +0000
Manifest this update: Sat 17 May 2025 22:38:14 +0000
Manifest next update: Sun 18 May 2025 04:38:14 +0000
Files and hashes: 1: yWewb7xL_3HCRTp9vkkVFDS7jW8.crl (hash: wKqNRhWIlaYgQrI9Ap18ZOfhpKYsKNQGMOXuXmvjR9M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F
Validity
Not Before: May 17 22:38:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=894F37F63950F05EB10F706A509A4894914F608E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:42:42:64:e9:69:8a:58:4a:14:ac:ad:1b:
aa:3d:86:55:37:d2:e9:45:06:57:01:57:fb:eb:4e:
9a:93:2c:5f:5b:25:14:d1:ff:f4:6a:47:47:90:7c:
a6:43:28:ff:82:5f:9b:b2:1d:d6:69:8e:ac:76:02:
fc:d0:5a:6e:ee:6a:7f:6f:98:82:54:57:f7:de:97:
9f:7b:a4:6d:ec:0c:81:78:ca:eb:52:95:cd:51:cf:
82:a7:a8:00:74:51:2f:32:34:da:42:85:bb:5e:b6:
c6:37:a0:a8:ef:ea:02:a7:06:5c:06:b4:a8:d8:f1:
9e:d9:b2:98:35:55:a1:b5:06:1d:5f:80:ab:d5:9a:
b9:f2:49:55:98:c5:e6:83:fa:ba:78:5b:8a:e0:68:
fa:df:41:0c:49:6f:0e:57:0e:a2:10:40:27:9d:4f:
06:eb:84:0c:95:3f:73:20:c2:bb:ea:6c:0a:51:4e:
35:30:3e:e0:11:e9:12:84:cd:88:b3:29:97:e9:67:
70:62:d6:0d:ab:a6:e3:5c:de:86:55:89:c5:ff:82:
db:5e:b0:7b:fa:86:57:eb:94:1d:56:09:66:ae:29:
b9:e6:27:94:4d:5e:d4:2f:5f:fb:4b:f7:ac:bc:9f:
95:6d:c6:64:68:7a:83:fb:0d:d6:6a:fd:b0:fe:cd:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E
X509v3 Authority Key Identifier:
keyid:C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:30:30:a7:a2:06:d6:cd:69:56:06:fc:c2:43:17:00:48:3d:
34:e3:d9:79:13:ec:68:8b:d7:d7:c0:f8:d4:a2:c1:b2:04:21:
19:f2:7c:98:a5:fd:ce:fa:a6:9e:0a:0b:73:31:a3:55:10:67:
4b:b0:c5:1b:cf:c9:bb:8b:24:d4:dc:30:f1:b5:8c:0f:7b:d9:
b1:35:e3:20:89:5b:06:b7:2f:a0:2c:26:1a:03:27:3f:ac:45:
ec:cb:bf:ff:aa:2c:72:46:e0:33:23:0b:fa:fd:a2:8a:6a:7f:
f6:bc:7e:2e:fd:30:cc:ae:67:31:07:45:87:67:7b:82:9d:87:
e4:e3:4c:cd:a7:d1:cf:81:2d:5c:46:cf:2e:c2:e0:f5:8c:23:
6b:b3:67:c8:d5:20:dd:16:95:d7:cb:30:d4:f6:94:e1:dd:b7:
21:bd:2b:87:07:a7:bb:21:da:6a:de:61:8a:0c:23:a2:ca:4a:
1d:60:36:4e:12:46:22:a3:7a:d9:5e:b2:d6:1a:7f:3c:7d:09:
f5:dd:da:9d:7c:2a:b0:65:95:7a:a3:b7:4b:b2:0f:21:d8:91:
b6:89:31:a7:d3:cc:b9:28:50:f0:8b:78:44:8f:2c:4b:a3:7e:
0e:ec:e8:40:69:c6:cb:2a:c3:5f:9b:9e:db:93:5a:ad:c8:79:
eb:c2:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:44:24 2025 by rpki-client