Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft
File: WBE1OPP_XM76JqEG222MbLwCoZ8.mft (raw, json)
Hash identifier: qXDZgG2ok/RnjCpGqPDalJE+2yCg1fIpONxqQ57Lzbc=
Subject key identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06
Authority key identifier: 58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F
Certificate issuer: /CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F
Certificate serial: 084A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft
Manifest number: 084A
Signing time: Sun 24 Aug 2025 02:03:45 +0000
Manifest this update: Sun 24 Aug 2025 02:03:45 +0000
Manifest next update: Sun 24 Aug 2025 08:03:45 +0000
Files and hashes: 1: WBE1OPP_XM76JqEG222MbLwCoZ8.crl (hash: vt4NbgZMtDJ+vBdGkafUDbznQ5sA5pcj5lMYoi/Wmf8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F
Validity
Not Before: Aug 24 02:03:45 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=22397420AA3CFFCFBCE8B2FD94D32408B1688B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:d9:3e:3e:32:2a:ec:41:f4:fc:57:14:a9:
88:cc:43:6a:cd:85:32:04:bd:91:0d:88:7a:fc:79:
3f:50:4c:68:e9:49:ea:36:50:53:5a:ee:96:31:ee:
6e:3a:ac:2c:e2:98:7c:11:16:1e:bc:b5:b3:82:38:
b3:04:99:4b:b7:a5:8f:3c:bc:d2:c9:43:53:62:1b:
89:d1:ff:5f:0f:65:5d:35:fc:88:d7:86:d4:41:08:
ec:f0:4f:06:d6:f4:1c:bf:51:4a:e9:08:66:50:c7:
bd:2d:c3:50:44:de:3b:9d:fd:33:00:ec:7f:42:2e:
ec:a1:00:d3:ec:43:d6:2c:8a:90:10:62:87:77:cf:
6b:b6:56:77:7f:76:11:f7:25:72:d5:70:d7:32:bc:
c9:35:e5:30:94:38:c1:2b:63:a4:56:eb:14:89:03:
88:d5:d7:1a:ef:cc:ab:97:8c:95:7b:06:ff:1a:ba:
d5:46:48:f9:50:98:33:db:cd:eb:76:e0:7f:9c:e3:
dd:4c:1b:18:32:cb:21:0d:f3:03:09:97:ef:31:f0:
6c:10:3b:46:73:7f:c5:1c:54:9c:97:d0:36:f3:99:
89:60:98:c5:ed:a5:61:56:d3:ce:dd:38:f2:6f:56:
20:5a:6b:95:7a:9b:fd:86:4f:81:a4:27:33:40:13:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06
X509v3 Authority Key Identifier:
keyid:58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b5:4a:1f:ec:69:c4:d8:49:2f:29:71:a2:00:5b:14:25:41:
b4:31:b4:2b:e4:9f:db:1b:bf:56:1d:23:9f:d1:44:e6:6e:db:
e2:ef:2b:04:57:f7:77:3c:22:eb:83:d2:ba:8a:ac:eb:4e:63:
5b:c9:60:bb:89:d0:a9:f2:dd:5d:e4:98:f9:e2:4d:d9:a9:a5:
d5:bf:50:a4:14:f0:f1:03:e7:6b:a4:95:49:7e:94:61:9e:dc:
db:09:dc:74:1e:96:a3:96:be:69:c8:0a:b4:6d:24:a1:d0:a3:
3c:8f:67:1e:cf:07:a0:7e:9b:0c:1d:c9:d0:6a:86:82:65:2e:
07:a9:44:47:cb:9c:cc:0b:63:7e:96:2a:9c:9c:74:8b:ec:e3:
97:97:30:b4:72:73:3c:99:e1:a2:82:71:16:8a:65:3a:09:36:
04:ac:97:e9:38:9b:43:5c:37:9d:d1:ca:4d:18:23:8a:36:8a:
00:b1:61:f4:38:27:35:16:87:0d:fb:bc:60:95:db:6c:14:80:
6e:5a:7a:1a:aa:29:38:f0:dc:13:93:a8:6d:b2:38:37:20:c8:
bb:f6:98:dd:ad:25:68:98:67:b1:6a:92:3a:1f:a0:03:d9:92:
15:e6:36:9c:f3:fa:89:46:77:c6:b2:7c:c2:f0:77:27:cb:ab:
1b:3c:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:27:02 2025 by rpki-client