Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft
File: Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft (raw, json)
Hash identifier: 98V6Vgn419ZzsTIeESYxbzTVduOh604s5dvsj4FSmN0=
Subject key identifier: D9:EA:B2:9E:5E:E2:75:2F:EB:9C:87:5E:81:25:C2:99:EC:73:C7:AE
Authority key identifier: 0E:6C:E6:FE:8E:18:1B:6C:E3:6D:C6:4D:E8:D4:EE:15:F8:18:9F:17
Certificate issuer: /CN=0E6CE6FE8E181B6CE36DC64DE8D4EE15F8189F17
Certificate serial: 19F1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft
Manifest number: 19F1
Signing time: Fri 16 May 2025 17:10:18 +0000
Manifest this update: Fri 16 May 2025 17:10:18 +0000
Manifest next update: Fri 16 May 2025 23:10:18 +0000
Files and hashes: 1: Dmzm_o4YG2zjbcZN6NTuFfgYnxc.crl (hash: Lx0EWj8s4HrBUTHni5shSoJt4Bu9/4sJgoSGIv1Vg9E=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6641 (0x19f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E6CE6FE8E181B6CE36DC64DE8D4EE15F8189F17
Validity
Not Before: May 16 17:10:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D9EAB29E5EE2752FEB9C875E8125C299EC73C7AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:cb:ac:0f:16:6a:fd:c7:c3:92:85:e8:4f:
07:76:60:76:35:e7:da:67:60:78:d7:4c:dd:61:3d:
76:26:a8:e2:da:4e:e5:66:6a:7d:0f:27:85:f9:69:
0d:ce:03:42:2e:2a:f1:d7:89:51:5e:6a:95:10:93:
b8:1d:c8:2b:cd:f7:c4:44:43:2e:8e:65:90:22:22:
24:95:5f:b8:74:89:ea:c1:c9:8d:65:b1:6f:be:5c:
02:50:72:54:ab:84:57:68:d6:2f:5e:62:cd:f8:38:
1b:c8:55:28:20:8e:31:15:57:73:f7:86:17:e9:5c:
47:1d:82:da:3c:2c:04:1a:19:7c:7f:e0:d9:0d:30:
29:6e:1b:34:29:44:70:25:05:7e:49:1d:56:4f:8d:
02:20:2c:74:11:53:57:0d:73:91:17:ab:a8:71:4a:
47:9e:da:64:d2:3d:87:78:86:2b:b2:ae:2c:e8:7c:
ad:2f:af:60:5c:cd:f5:09:a8:a1:a0:23:07:e5:57:
a9:8d:cb:70:b3:91:52:3b:fb:61:bd:6c:09:cd:b1:
96:5f:0b:26:13:5b:7c:f2:4d:b9:0e:83:1b:4c:9e:
d4:2e:4d:67:3c:e9:25:43:65:d6:4e:08:f2:85:9f:
ed:51:98:de:b6:09:bd:08:7e:33:28:7f:a5:97:e1:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:B2:9E:5E:E2:75:2F:EB:9C:87:5E:81:25:C2:99:EC:73:C7:AE
X509v3 Authority Key Identifier:
keyid:0E:6C:E6:FE:8E:18:1B:6C:E3:6D:C6:4D:E8:D4:EE:15:F8:18:9F:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/Dmzm_o4YG2zjbcZN6NTuFfgYnxc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:fa:33:9e:4a:7e:5c:ae:5f:36:03:65:3b:22:8e:33:33:ee:
ed:7f:f3:59:04:29:71:0a:67:0d:46:d0:af:00:a1:9e:13:d9:
0c:b5:ed:3f:6a:3e:6a:24:df:b2:3d:09:eb:63:97:9e:e1:df:
b2:c9:eb:6a:52:90:a2:40:07:80:ed:91:b1:2c:44:1e:32:70:
b4:2c:c0:7d:cb:30:b6:e6:04:fc:4c:0a:d8:ed:a6:c6:ca:3b:
62:8a:6c:f4:50:3d:5e:b1:48:dd:ab:46:12:9c:ce:fd:3c:fb:
84:c6:b5:39:61:60:b5:e8:ba:b7:09:e4:f8:16:97:ce:0b:90:
94:5b:b3:77:90:50:86:13:21:7f:f0:ff:a6:70:c7:e2:86:7a:
38:b7:e8:eb:27:65:a6:17:73:f2:d8:d2:e9:09:63:a1:d8:08:
98:04:00:9e:f3:3f:66:6b:d4:22:9d:06:fd:55:8c:08:c0:d1:
17:4c:9a:3c:6e:2c:73:40:04:b2:d4:c6:0a:d5:79:26:ad:0c:
c4:71:a9:a5:6a:52:07:42:af:8e:1b:f1:d5:72:30:a2:86:f9:
11:fb:08:e8:09:17:22:93:f4:71:9b:dd:01:16:c4:9c:29:b6:
01:1a:44:9f:fc:37:ff:f2:86:58:23:ba:59:7a:cc:89:99:11:
35:9d:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:32:04 2025 by rpki-client