Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft
File: pOPO1GYcOU6TnS2AjPrHXSV_lig.mft (raw, json)
Hash identifier: xSjBIqxF8NvftJBS6FDEOYqZctCOwZ2+NHTzb6gkmDs=
Subject key identifier: 7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD
Authority key identifier: A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28
Certificate issuer: /CN=A4E3CED4661C394E939D2D808CFAC75D257F9628
Certificate serial: 71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft
Manifest number: 71
Signing time: Fri 16 May 2025 17:08:04 +0000
Manifest this update: Fri 16 May 2025 17:08:04 +0000
Manifest next update: Fri 16 May 2025 23:08:04 +0000
Files and hashes: 1: pOPO1GYcOU6TnS2AjPrHXSV_lig.crl (hash: w8UF6AsE2Mt5xseF+QWhgc022Edr2hLAc23cS1wGXvs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4E3CED4661C394E939D2D808CFAC75D257F9628
Validity
Not Before: May 16 17:08:04 2025 GMT
Not After : Apr 24 06:35:20 2026 GMT
Subject: CN=7EE1CD3384A280B1F0F81B1162544ADC426AC1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:8a:23:5b:39:78:21:8e:43:dd:f5:74:fc:
1e:60:dc:45:e2:91:99:5e:7c:92:74:24:54:a5:48:
35:5f:c5:be:a6:70:11:be:53:de:cd:f5:6c:ea:bf:
45:60:59:ec:7b:f7:72:56:61:96:97:5d:e9:2d:f2:
5f:1f:5f:6d:4a:da:9d:83:fe:bd:61:16:52:4d:c7:
66:7a:77:7b:da:89:af:e0:2e:7d:60:8f:b6:71:22:
25:98:5e:ec:64:55:f4:ee:38:59:85:34:eb:96:1f:
54:d7:2d:fd:02:16:22:df:d1:b6:82:d1:f5:a6:70:
78:b4:36:f3:8a:10:76:68:78:57:88:4a:ec:63:0e:
c4:b7:a1:24:c6:cd:10:11:ad:9c:30:78:95:4d:0b:
54:6b:c7:f1:ba:0a:ff:a9:88:23:45:81:32:5a:5f:
d2:ff:a7:e1:7a:30:05:7b:54:84:b5:7d:0d:5d:94:
69:0e:7d:be:61:ef:15:ec:8e:79:0f:da:12:f0:d7:
46:f3:4a:0d:88:53:b5:d9:3d:3c:53:85:eb:f3:74:
0c:12:94:40:d3:0f:13:ae:62:b4:f8:55:35:98:3d:
cf:fa:b2:ad:23:d0:41:6d:e5:45:cb:00:74:29:e4:
b8:e3:af:d0:b1:af:63:7f:e5:43:9f:d7:3d:c4:dc:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E1:CD:33:84:A2:80:B1:F0:F8:1B:11:62:54:4A:DC:42:6A:C1:AD
X509v3 Authority Key Identifier:
keyid:A4:E3:CE:D4:66:1C:39:4E:93:9D:2D:80:8C:FA:C7:5D:25:7F:96:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOPO1GYcOU6TnS2AjPrHXSV_lig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3368/pOPO1GYcOU6TnS2AjPrHXSV_lig.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4b:50:c8:ee:7b:b2:59:48:06:e6:82:c0:0e:e6:e6:c8:02:
9c:c3:b1:ea:4a:81:78:e6:4d:39:ab:17:52:b8:8d:60:db:30:
c4:bb:3b:ab:dc:1a:94:97:c1:d1:41:f5:41:15:e7:2c:6c:11:
a6:79:fa:43:dc:e9:ac:b4:3f:51:e2:4e:dc:92:d2:81:42:55:
29:a0:86:2f:1e:b9:21:12:82:0c:79:40:1a:dc:a9:47:ab:21:
62:d6:d6:b8:45:01:5f:97:7d:a8:ea:f5:5a:99:2a:a1:3e:06:
32:bc:0c:4e:76:ac:cb:5f:26:26:5e:16:4d:9b:20:6a:b6:d1:
95:fb:65:5d:29:ff:a9:22:9e:37:7f:01:33:16:b6:c2:fd:bf:
da:c4:be:29:aa:e0:0a:c7:46:50:37:b2:1f:46:d8:03:5c:82:
58:85:bf:26:4e:66:3d:b6:68:b3:a7:2f:86:5d:0e:65:a2:90:
94:83:21:18:a4:1c:e8:6f:98:8c:d0:d1:4c:57:93:57:b6:60:
dd:76:e0:48:0b:17:95:49:df:06:32:41:82:88:6a:dc:6e:02:
77:91:b2:d4:38:a1:9b:c7:19:39:80:e9:2b:4a:17:79:b9:dd:
c3:be:00:ce:39:72:a5:b6:7c:a6:09:5f:67:64:91:7d:9c:01:
83:fd:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:45:43 2025 by rpki-client