Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
File: kXok3C9fwHVc6sn-HMXExV183fo.mft (raw, json)
Hash identifier: xOE4xIHkDVfP1TaU9A9VbIjpde6I5skMM2383D4qs4o=
Subject key identifier: 35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
Authority key identifier: 91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
Certificate issuer: /CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Certificate serial: 0715
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
Manifest number: 0715
Signing time: Sat 17 May 2025 13:11:51 +0000
Manifest this update: Sat 17 May 2025 13:11:51 +0000
Manifest next update: Sat 17 May 2025 19:11:51 +0000
Files and hashes: 1: kXok3C9fwHVc6sn-HMXExV183fo.crl (hash: hnFv6U/m951187sgMCL+oYtC5cpv1rtrTuOTtV23nrg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Validity
Not Before: May 17 13:11:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=356B69027463F8A7683B3960AD619D11CAB74444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:45:4c:b3:46:df:85:b4:aa:ff:bd:44:49:
ae:dc:9f:f2:13:71:46:0e:08:9b:42:64:81:38:a0:
3c:6c:13:19:02:51:5c:45:34:75:ca:8a:74:b0:f5:
ec:f9:8b:a6:7f:dd:78:c5:93:3d:5b:31:2c:d1:98:
22:f0:6e:7d:e6:42:15:97:11:7e:b3:da:11:e4:20:
c1:6e:64:fb:7a:05:49:2e:6a:20:56:05:a5:60:fd:
bd:ab:0d:d4:e2:9b:97:e7:f9:25:ea:f0:d5:18:3c:
5e:2e:e7:ed:f3:f8:ac:f2:0d:90:40:dc:31:12:a2:
e6:de:a0:e7:3b:55:1e:92:4d:17:37:df:53:18:21:
13:15:87:ab:bd:8d:c7:24:0a:f0:23:ee:c4:ea:03:
55:8a:6d:16:c3:13:86:61:e1:43:08:2f:8b:70:ff:
72:63:c7:a8:68:f4:a4:6f:09:7c:91:b6:9a:0a:b3:
b7:68:29:45:96:5d:17:8f:84:9f:19:05:78:d4:76:
0a:d8:9f:50:c9:5e:88:fc:e4:89:95:c1:33:b8:ec:
41:bf:55:53:b3:93:ce:b4:7b:b1:19:af:fa:d3:e7:
91:07:67:26:35:ce:74:70:27:ff:47:59:61:79:7e:
b6:8e:fb:c8:a1:9e:7d:5e:84:75:cd:cb:20:d5:98:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
X509v3 Authority Key Identifier:
keyid:91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:6a:b9:ca:c0:40:a6:27:1f:3b:19:3a:29:64:10:71:13:
41:a0:99:9d:9c:84:2a:97:e4:c6:aa:23:5d:d4:70:33:65:6d:
2c:cf:6e:4d:13:5b:a6:8c:67:d9:10:e6:03:b5:31:97:96:ef:
28:a0:ae:20:38:98:f4:88:c0:e9:95:54:f0:76:63:1f:b2:bf:
ff:15:b8:2f:22:13:4f:2b:85:b5:0f:3f:ba:e8:4d:88:8b:84:
95:08:36:48:63:a1:02:b8:80:f7:6d:d2:fa:c0:db:e5:33:27:
42:5d:f0:60:13:ef:3a:51:03:29:3e:2c:2c:31:39:97:6a:55:
c4:af:cd:20:60:06:b0:7a:c9:a7:6b:71:8d:af:a9:28:93:f4:
ce:ab:b0:9c:8c:af:93:4c:38:64:de:18:b8:97:00:2f:64:87:
83:f8:b2:37:8d:da:9d:71:46:f5:28:e3:c4:56:5f:10:6d:9a:
23:40:55:5c:6c:2c:2b:b0:af:dc:be:12:87:dd:64:12:f9:62:
41:8f:13:3c:35:88:81:ee:12:72:b7:24:80:69:09:eb:bc:0f:
3b:41:f4:7c:e2:a6:76:d2:89:02:2f:f3:dd:1c:e8:2e:0d:03:
81:8e:29:ea:41:e2:fa:d0:5e:11:31:a9:3e:f5:81:10:26:34:
05:3d:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:38:54 2025 by rpki-client