Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json)
Hash identifier: meNfrldjt1zn32sz7svwFXV41ePpe4Av1YY9XHL0NRI=
Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E
Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71
Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471
Certificate serial: 0D71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
Manifest number: 0D71
Signing time: Sat 17 May 2025 16:38:51 +0000
Manifest this update: Sat 17 May 2025 16:38:51 +0000
Manifest next update: Sat 17 May 2025 22:38:51 +0000
Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: 1HF/826PAuZBtI3mW6BjC+EHJjbVBNA/PDMja/6NxFE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3441 (0xd71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246B8D869C83018945DF9F99009342903D076471
Validity
Not Before: May 17 16:38:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d:
c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4:
9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85:
0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad:
62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca:
db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3:
9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45:
d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e:
1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30:
93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3:
da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a:
5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e:
0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54:
c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7:
c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9:
ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39:
a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E
X509v3 Authority Key Identifier:
keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c4:14:0a:54:c5:58:23:b9:52:9e:fd:38:30:3b:b4:97:b1:
0d:e0:1f:50:5c:77:4e:ee:d3:a7:04:4e:8e:99:85:09:a9:ed:
a9:4b:af:82:09:12:d9:c1:97:56:b7:5d:1c:5a:c1:a0:d9:49:
ff:89:dc:f7:86:e7:d3:15:29:f7:f2:3c:6f:96:b3:02:23:83:
9f:4d:92:df:10:70:db:56:c5:94:6a:34:88:e7:96:b1:bf:65:
74:5f:38:ed:be:f6:29:e4:84:e9:f8:20:05:9a:06:b8:2e:50:
76:b5:4a:ec:3f:03:07:bd:10:f6:d7:8b:35:80:45:71:86:1a:
02:8d:71:a4:64:72:d3:43:b5:bf:a3:65:c4:3e:6a:63:73:11:
33:7b:10:6b:b1:98:34:d5:44:ce:ca:ef:a4:3e:9e:09:72:c9:
5f:af:14:f4:66:9d:00:8f:a0:06:3e:bc:45:03:df:d6:e1:da:
d9:f7:c0:69:26:b6:db:1a:d6:af:3c:b0:cd:f5:8b:0f:d1:eb:
87:37:84:f6:57:28:ac:d1:1c:08:f1:8a:f0:be:ee:3c:76:49:
05:05:2f:e9:23:8b:19:7a:14:92:3b:b4:df:10:ca:ed:29:9b:
01:eb:e0:96:93:15:3f:b6:6e:ca:70:de:5d:e5:62:c4:1d:f1:
23:8b:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:45:29 2025 by rpki-client