Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
File: hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft (raw, json)
Hash identifier: LLztgB3guU/kqTqB1IQk2EOWwXbBCm7E5P4SEJjnAhs=
Subject key identifier: 4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79
Authority key identifier: 85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54
Certificate issuer: /CN=857F208698A249A0596079DE4F3DAE5FA7B96754
Certificate serial: 0956
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
Manifest number: 0956
Signing time: Sat 17 May 2025 17:39:55 +0000
Manifest this update: Sat 17 May 2025 17:39:55 +0000
Manifest next update: Sat 17 May 2025 23:39:55 +0000
Files and hashes: 1: hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl (hash: Uzp+MxLUtYAr1WVE5Roa1r2s9gK4svIDtAXubm0Rcc4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857F208698A249A0596079DE4F3DAE5FA7B96754
Validity
Not Before: May 17 17:39:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4D2836422DA4F14F8E8A7E1DDAA17BD2F2CF6279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:61:84:f2:15:6d:fb:f5:6d:1c:83:13:14:
46:d6:5f:2d:2e:43:72:41:d8:d1:e4:3a:ce:59:76:
0a:bb:77:95:38:9e:b5:ec:4f:d6:b2:17:78:c6:29:
03:5e:6c:85:17:f3:8b:5f:28:e8:8e:51:c4:f0:24:
56:16:e3:f0:03:d2:e8:f5:da:aa:0e:a7:c6:fa:6c:
1f:66:60:7e:72:9c:6e:44:95:00:10:e6:e0:38:90:
c1:f1:47:a3:33:63:bc:d6:85:92:5f:02:7c:e6:8c:
1e:4c:20:54:a3:77:ed:ca:8e:31:e3:8f:1d:62:14:
12:91:24:f2:28:30:a2:e1:70:54:ca:81:f1:3f:07:
4c:1f:e6:18:c0:df:9b:04:d7:61:63:f6:4a:b7:9a:
41:ea:38:f4:4f:65:75:92:26:97:0a:9f:39:4b:b1:
95:98:ce:a0:0a:48:2b:4c:52:26:91:22:1a:45:58:
5e:40:5e:ba:b9:52:80:58:9e:4a:7c:db:1a:dc:85:
d0:1e:e9:9a:08:d5:9d:47:48:46:ed:dc:e3:80:d8:
49:67:c5:9f:10:1b:db:6e:18:69:4b:72:06:ee:f1:
1f:8b:1e:2a:c7:60:e5:2b:90:f3:49:eb:f7:43:1e:
d3:c1:59:81:1a:51:f6:a6:24:17:3f:1f:33:94:28:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:28:36:42:2D:A4:F1:4F:8E:8A:7E:1D:DA:A1:7B:D2:F2:CF:62:79
X509v3 Authority Key Identifier:
keyid:85:7F:20:86:98:A2:49:A0:59:60:79:DE:4F:3D:AE:5F:A7:B9:67:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/hX8ghpiiSaBZYHneTz2uX6e5Z1Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:92:93:78:45:d4:1b:26:0f:ec:8d:19:11:b4:70:1c:da:
b1:a4:95:73:bb:66:ed:74:63:f3:d4:5b:df:2f:05:ce:2a:18:
97:07:c1:d8:68:e2:56:a7:9c:70:57:24:2d:77:e8:60:91:ed:
1c:38:5e:e0:c7:75:a6:0b:64:a1:c7:8f:a9:21:eb:d0:fb:c0:
16:09:04:c7:9e:7e:1f:12:d2:75:a0:c5:50:65:9b:e1:70:3f:
ad:cd:f3:34:3b:ca:f2:7f:97:b9:d3:5e:3f:0a:00:f3:9a:1f:
a9:62:f6:ab:53:9c:5a:8f:e5:37:fb:cf:31:e1:23:2f:98:f9:
35:85:40:35:fb:b1:c4:d4:c1:4f:87:08:b7:ff:9d:04:95:5e:
03:14:71:9d:5d:6a:80:f7:52:1d:1e:47:d8:02:a1:36:27:c8:
e1:b7:36:8a:dd:27:2a:bc:17:9c:0b:16:35:a4:47:7a:bd:d9:
53:b0:07:d9:fa:35:de:14:32:5b:2f:b4:4f:7f:e5:6f:ee:64:
9c:91:2f:c0:23:54:a2:2d:35:6a:d6:f6:c5:74:2d:33:8b:00:
d0:b8:fd:e8:c0:f0:b6:b3:f2:5c:a6:d7:c5:7a:70:13:f5:e1:
a1:35:95:7b:62:4b:9b:4f:e4:96:0f:8d:94:71:32:80:4a:99:
18:01:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:59:42 2025 by rpki-client