Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
File: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft (raw, json)
Hash identifier: j2rxj5tfIwE/fKZWhtFe7RBmZ3H+LJmR7G9xxap3ZRQ=
Subject key identifier: 20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Certificate issuer: /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial: 1D60
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
Manifest number: 1D5B
Signing time: Fri 11 Apr 2025 07:11:16 +0000
Manifest this update: Fri 11 Apr 2025 07:11:16 +0000
Manifest next update: Fri 11 Apr 2025 13:11:16 +0000
Files and hashes: 1: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl (hash: 0cMuK+Q8RgRoNA+reQTm61UZU6Xan2OBELaLuZdvws8=)
2: bu1io0YGUyVGXJmlBFXCkqNhHzU.roa (hash: yjvnS6F+0OxhpQIQ3KjhJ2RFbPyMa6dRGhAGQNbL7Y4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7520 (0x1d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Validity
Not Before: Apr 11 07:11:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2078E015442FC65DBF7411835879235714E226A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:8e:cb:cb:20:1c:31:43:d5:f5:45:64:c6:
5e:b6:58:91:f9:8c:ba:6a:21:5f:21:5e:da:59:33:
2e:09:1f:ab:cf:a2:2f:d2:7b:ea:f1:5b:8d:e5:c5:
c2:9e:bb:2b:6b:2b:56:54:cf:97:a6:95:ae:4e:0a:
25:45:6c:01:80:e4:09:cd:12:e7:b5:1b:d2:3f:3f:
78:08:d6:5d:62:54:b2:e9:7c:42:b8:2b:20:f5:10:
64:49:87:10:22:09:f8:5c:5c:fc:92:4d:71:0e:25:
19:dc:dc:78:58:35:36:74:12:13:bc:12:89:14:81:
0e:23:8e:b6:be:1e:15:2b:b1:36:77:d1:34:34:9a:
c9:22:e8:34:e6:fd:ec:f5:9d:d0:9d:89:e9:7a:28:
db:fa:21:54:9e:4e:eb:b1:db:7c:b2:27:b6:2b:3f:
36:0c:d8:c1:d6:b3:c4:39:fc:45:34:c9:18:75:1d:
16:2c:8d:d1:f8:da:a4:be:73:78:42:fa:6a:fa:b5:
49:8f:1c:9e:a1:39:85:67:61:a6:7e:9f:33:ba:e1:
26:a0:78:ed:bb:d1:49:eb:80:cf:a9:87:1c:15:f7:
be:8d:7d:c6:46:1f:82:4a:99:8c:c5:5a:bf:97:df:
09:f9:ba:1c:d3:4d:a8:36:9d:a9:85:c3:89:73:ca:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
X509v3 Authority Key Identifier:
keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a6:29:5f:a6:2d:66:44:00:a3:3a:04:60:fc:7b:0e:d0:de:
1f:ef:b8:61:80:aa:2c:03:a4:94:0e:0b:58:43:6b:1e:6f:58:
c9:81:a3:47:cd:af:ff:c3:6a:d1:f0:83:dc:87:85:e0:63:c3:
43:8b:ff:24:e1:9a:d2:3f:72:cf:a8:82:b5:7b:23:9c:22:29:
a4:34:ce:6a:69:4b:4c:d9:06:d9:de:f0:a5:bd:68:6d:68:29:
11:1c:f0:91:2c:ab:44:1b:2e:13:5e:17:61:26:46:2e:60:0a:
f9:20:30:37:7c:c5:6e:92:f5:c1:a2:63:a2:e5:69:b1:20:7c:
de:80:4a:1b:19:24:b9:90:63:9d:d2:d4:68:45:ca:8a:d1:2e:
fb:60:a5:86:d6:b8:82:bd:de:49:3f:a9:ec:e0:52:0f:b6:5e:
46:71:70:30:c9:d8:90:a3:95:13:ea:43:d8:52:f0:a6:72:48:
a3:e4:68:77:f5:3c:a3:60:9d:0d:cb:80:4d:b2:62:43:fc:38:
6a:c8:46:60:9b:af:f0:a6:59:51:fe:59:07:54:05:68:2a:ee:
b4:1b:13:f4:4c:90:15:9f:84:ec:b3:a8:01:9c:68:2b:90:41:
52:30:f1:76:ac:5f:4c:1b:81:f3:64:da:b4:7b:36:1f:01:e7:
a0:c4:ca:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:28 2025 by rpki-client