Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft
File: GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft (raw, json)
Hash identifier: FV4nj1uB19MIl5DPFBn7VStzMGpqzfwICu+KoA/v3PM=
Subject key identifier: EE:83:F8:CB:C1:FF:8A:1A:AA:97:BE:05:8C:10:0D:8C:C5:DA:F6:58
Authority key identifier: 1A:F9:02:AD:66:21:18:81:EA:04:0C:5F:F7:20:3D:9B:CC:87:FF:C5
Certificate issuer: /CN=1AF902AD66211881EA040C5FF7203D9BCC87FFC5
Certificate serial: 5072
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GvkCrWYhGIHqBAxf9yA9m8yH_8U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft
Manifest number: 5072
Signing time: Tue 03 Jun 2025 20:08:57 +0000
Manifest this update: Tue 03 Jun 2025 20:08:57 +0000
Manifest next update: Wed 04 Jun 2025 02:08:57 +0000
Files and hashes: 1: GvkCrWYhGIHqBAxf9yA9m8yH_8U.crl (hash: F6VJb6lmU4g5cts2nwUwAnoz6HONOcJTJPWJ3O8PCak=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20594 (0x5072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AF902AD66211881EA040C5FF7203D9BCC87FFC5
Validity
Not Before: Jun 3 20:08:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EE83F8CBC1FF8A1AAA97BE058C100D8CC5DAF658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:ae:bf:8d:92:9a:81:0c:82:6e:94:28:0f:
37:d4:ac:27:d2:32:4a:81:1a:6f:c5:2c:3e:17:1a:
1c:86:02:1c:06:bc:7f:20:09:a4:30:80:cd:17:43:
b8:77:b1:b5:f0:34:41:95:e6:06:da:ca:62:4c:e3:
61:5f:41:e3:d3:6e:59:cc:89:7d:f1:3e:73:8c:c3:
82:1a:25:9f:9f:f6:27:f4:1d:9a:31:58:e1:d8:4a:
aa:57:b1:1b:16:b5:cc:19:47:8c:8b:b7:84:63:14:
96:b0:c3:ad:b2:40:50:12:0f:1e:b2:6c:16:09:20:
6e:00:cc:54:48:77:72:a3:61:c3:ca:67:be:8c:16:
c8:72:e2:78:91:f5:41:08:5a:1b:67:d0:91:05:94:
ba:07:e0:b0:7d:92:bd:c8:5d:3c:81:cd:95:d3:e7:
dd:12:1c:d7:9a:2a:80:f5:62:4b:71:3d:95:ae:01:
2e:89:e1:c3:d8:5f:61:80:5b:1c:27:75:fc:eb:27:
77:77:27:f5:a4:79:1a:82:90:f3:a2:16:bc:e9:88:
00:5d:99:63:86:a0:fe:45:3b:a0:56:39:40:90:fc:
a8:6e:e2:25:61:05:fb:4c:a8:fd:5f:ae:a6:4d:8f:
79:64:f7:85:67:f6:15:3b:2e:d4:63:a9:d5:5a:6f:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:F8:CB:C1:FF:8A:1A:AA:97:BE:05:8C:10:0D:8C:C5:DA:F6:58
X509v3 Authority Key Identifier:
keyid:1A:F9:02:AD:66:21:18:81:EA:04:0C:5F:F7:20:3D:9B:CC:87:FF:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GvkCrWYhGIHqBAxf9yA9m8yH_8U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/GvkCrWYhGIHqBAxf9yA9m8yH_8U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:e4:97:a1:1b:40:14:c9:1f:b7:eb:09:ac:bc:04:48:67:
a8:9d:84:a6:8b:c9:2f:6d:2e:80:88:c7:44:9a:63:d8:20:fb:
33:9d:a8:6f:56:57:80:2b:db:b9:ae:29:2d:1f:3f:f7:92:44:
44:3e:c1:76:83:a4:29:ba:75:6f:aa:bb:86:ce:29:bc:ed:cc:
7a:54:64:79:9c:9d:6f:9c:b0:4f:bb:9d:7a:47:3b:2f:02:23:
93:dd:69:9f:27:91:59:d2:09:31:ae:a8:f8:ca:e8:13:fc:31:
8c:94:9b:dc:59:c8:0a:87:0c:f9:fa:5d:a3:6e:43:22:41:7d:
5d:24:6c:d6:64:9c:e3:81:88:77:47:74:5f:51:53:42:86:60:
19:7e:52:77:11:6d:99:d0:fd:3a:f9:d4:9e:ce:22:26:7c:cd:
c9:37:f3:52:74:28:c1:24:40:2d:ac:4c:2a:1e:05:f7:87:a3:
c1:7a:3e:ba:10:e9:c2:3d:13:8b:30:b4:70:c2:5d:6c:78:31:
dd:fd:ae:db:05:ce:8a:65:e1:de:28:14:60:11:47:13:94:a1:
0d:bb:16:92:c8:6f:38:e7:6e:ff:ef:00:5b:a2:66:5f:28:d2:
64:36:9a:e9:ec:5a:25:a3:33:46:59:69:33:13:02:b4:13:24:
f9:e2:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:10:34 2025 by rpki-client