Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/645/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.mft
File: 0yS7P-XBWi4EKmMuWiNZ0EjwTEI.mft (raw, json)
Hash identifier: aB0OErwwVRHBf8k3qn0Scq53rn91qL4n0vlhH/Dhn4w=
Subject key identifier: EF:D8:DB:33:95:3B:C6:DC:71:7C:A6:7C:36:A6:4A:67:C3:6B:41:3B
Authority key identifier: D3:24:BB:3F:E5:C1:5A:2E:04:2A:63:2E:5A:23:59:D0:48:F0:4C:42
Certificate issuer: /CN=D324BB3FE5C15A2E042A632E5A2359D048F04C42
Certificate serial: 1E1D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.mft
Manifest number: 1E1D
Signing time: Sat 17 May 2025 22:39:38 +0000
Manifest this update: Sat 17 May 2025 22:39:38 +0000
Manifest next update: Sun 18 May 2025 04:39:38 +0000
Files and hashes: 1: 0yS7P-XBWi4EKmMuWiNZ0EjwTEI.crl (hash: eAJzTZvWN+uG+hXKjFMmIoB8WuPwRHYHDHI3G8xaJvM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7709 (0x1e1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D324BB3FE5C15A2E042A632E5A2359D048F04C42
Validity
Not Before: May 17 22:39:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EFD8DB33953BC6DC717CA67C36A64A67C36B413B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:0e:21:8b:b1:ce:87:e9:a7:e0:0d:cc:26:
f1:4a:9d:72:f5:5f:40:55:76:44:50:ef:18:3a:d7:
e8:33:70:6e:66:d7:a2:05:08:1e:ff:cc:84:d9:6b:
39:20:82:05:c0:24:24:81:33:20:09:20:01:1b:26:
b4:8e:5f:ef:34:78:cf:86:a9:9e:1b:c0:93:6a:32:
1d:77:fc:28:e3:5e:b9:d0:ed:f9:1a:9e:45:cd:08:
3b:db:ed:22:0f:00:34:5f:67:03:21:3b:82:b8:47:
7c:e7:77:03:2a:0e:ab:a1:05:d5:c6:53:1b:a3:ba:
1c:30:42:5c:89:b3:08:ad:0e:05:72:13:a8:02:f3:
04:aa:99:8a:61:1d:41:89:f1:60:98:15:92:9e:5d:
7c:6d:10:ab:82:48:33:03:a6:a6:01:a4:f5:82:2b:
47:ae:83:43:33:2e:55:c8:a5:e8:a6:84:c7:3d:0b:
29:1b:0b:28:c7:4e:e0:06:02:2b:8a:b3:57:be:b3:
3e:c3:a9:17:8e:23:a2:6e:b1:6f:5b:56:e6:75:0a:
ac:8f:9d:68:33:0f:91:6c:b0:7e:27:8f:ba:2d:b7:
b7:0c:58:18:19:81:b3:eb:9f:f2:74:9e:ae:d0:87:
c6:4c:bb:ab:5c:ac:6e:00:aa:ea:b5:a1:3d:ac:6a:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D8:DB:33:95:3B:C6:DC:71:7C:A6:7C:36:A6:4A:67:C3:6B:41:3B
X509v3 Authority Key Identifier:
keyid:D3:24:BB:3F:E5:C1:5A:2E:04:2A:63:2E:5A:23:59:D0:48:F0:4C:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:41:1e:a0:93:2a:78:49:47:ff:79:e6:82:07:7b:be:d8:
6c:44:a1:2f:95:1f:32:50:03:07:58:d6:0a:88:dd:88:ca:c1:
1d:f3:3d:77:a0:51:8b:3b:ec:ae:03:60:33:c3:95:6d:2d:fd:
3b:e4:a2:ac:75:39:bd:1b:59:9b:33:cb:0a:f0:1f:0a:27:9a:
28:87:5e:b3:5d:10:f6:80:94:37:dc:19:40:b9:c8:13:db:44:
46:f6:e8:41:85:a9:23:c1:2c:71:dc:1c:04:ae:43:99:60:f1:
c0:1d:cb:68:4d:91:4c:38:01:ad:8e:24:0a:f6:63:5b:f6:b2:
23:59:5f:df:5e:b6:31:ec:86:41:79:e7:46:e2:aa:72:c7:56:
1d:7f:2a:37:bc:0d:25:b6:cc:99:0d:a3:a9:e9:c4:03:21:45:
54:25:a4:b5:43:b2:16:1d:93:91:45:49:08:04:f7:fe:76:9e:
50:b1:99:60:04:2c:44:d0:e6:1f:21:f3:88:80:fa:4a:48:13:
51:e9:0e:36:30:52:81:0f:3f:c2:44:f4:d7:86:bd:aa:0f:44:
8b:93:55:bf:1b:b9:fa:bd:19:71:75:d0:3c:a6:8e:bf:ec:13:
cd:a5:0f:7f:58:fc:b5:84:5b:78:43:f9:b4:b3:26:c3:ce:52:
6b:a0:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:47:42 2025 by rpki-client