Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft
File: xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft (raw, json)
Hash identifier: TXRyJHPwzDovZWCav6iSBLu/4D/D/kkSuYK7y/11TUQ=
Subject key identifier: 9F:9F:D7:7C:42:8A:22:10:D4:59:6D:86:9B:62:A5:3F:EA:4E:5B:36
Authority key identifier: C6:72:8F:33:8C:FF:81:21:5A:8A:84:51:30:FF:53:8C:51:78:C7:46
Certificate issuer: /CN=C6728F338CFF81215A8A845130FF538C5178C746
Certificate serial: E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xnKPM4z_gSFaioRRMP9TjFF4x0Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft
Manifest number: E0
Signing time: Fri 21 Feb 2025 03:27:51 +0000
Manifest this update: Fri 21 Feb 2025 03:27:51 +0000
Manifest next update: Fri 21 Feb 2025 09:27:51 +0000
Files and hashes: 1: xnKPM4z_gSFaioRRMP9TjFF4x0Y.crl (hash: 7P+TBx6b+eFV0K0QyPDAgP3BgC37sHvnnicMXJmTeNs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6728F338CFF81215A8A845130FF538C5178C746
Validity
Not Before: Feb 21 03:27:51 2025 GMT
Not After : Jan 7 03:20:43 2026 GMT
Subject: CN=9F9FD77C428A2210D4596D869B62A53FEA4E5B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:db:33:d6:35:7f:68:1e:7f:57:9d:12:42:
4e:97:69:b3:31:72:51:da:99:ca:52:f1:c6:ef:5f:
39:2c:28:a8:d3:45:36:29:d3:b4:c7:eb:3c:e5:b5:
af:72:59:8c:0f:9c:05:d4:3c:2f:6f:d4:03:85:67:
5b:fc:a6:54:2c:c1:a1:35:7f:aa:8c:4d:79:da:f3:
cc:13:e9:78:bb:47:66:1c:ca:29:74:d1:e6:cc:6e:
29:94:c1:d9:ec:6f:b5:15:98:83:00:5c:24:0d:c8:
21:22:cf:e0:ae:16:6e:77:be:88:f2:48:49:f1:e1:
ba:b8:ef:e0:db:8d:5e:a7:7d:a4:5a:22:12:95:c4:
47:8a:6b:83:cc:4c:03:33:8a:48:4c:1b:ab:e5:aa:
21:17:d3:28:33:c9:0a:eb:00:4f:82:0a:8b:e2:6c:
a6:7c:61:95:3b:ef:01:07:41:01:bf:12:1d:f9:b6:
33:3f:6e:88:0b:4d:d2:91:74:38:a8:27:b7:f4:f4:
2d:8f:0a:eb:70:67:81:f0:d7:5a:75:e1:d6:66:c2:
f3:84:9e:04:6b:dd:5a:a1:2b:9b:0e:6f:62:1e:15:
cd:93:a0:d5:34:99:35:fa:0f:28:62:ac:46:4e:48:
56:3c:db:07:d0:6b:01:64:65:41:07:2e:7a:d5:8c:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:D7:7C:42:8A:22:10:D4:59:6D:86:9B:62:A5:3F:EA:4E:5B:36
X509v3 Authority Key Identifier:
keyid:C6:72:8F:33:8C:FF:81:21:5A:8A:84:51:30:FF:53:8C:51:78:C7:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xnKPM4z_gSFaioRRMP9TjFF4x0Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3349/xnKPM4z_gSFaioRRMP9TjFF4x0Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:51:9c:a7:2e:96:6d:b2:02:9c:c0:62:09:cd:ee:50:8b:38:
0a:b0:82:bb:9d:8b:6b:1a:77:90:e6:c6:85:9b:fc:a3:97:97:
d4:82:86:10:32:47:23:97:44:c7:19:7d:84:00:ea:8b:d4:e5:
74:02:ba:b5:4f:60:a6:ed:8e:d0:a5:e0:7d:75:8e:38:dc:ee:
01:f2:09:4c:34:52:c0:0f:3e:17:28:0b:3f:f8:dc:82:74:64:
2d:76:a2:7b:9a:8b:0d:de:97:0c:8c:79:cb:65:d2:f4:10:57:
89:b4:bb:45:c9:1c:c4:7d:17:d9:5b:5d:e3:d7:dd:92:62:67:
ca:79:48:65:70:d5:ab:a1:1f:71:3f:b5:a8:05:bc:dd:20:60:
0d:3f:7c:42:ed:ce:a1:83:41:ba:2a:7e:0b:f1:9b:d9:92:f2:
fb:49:4d:7d:de:27:7b:9b:5f:4f:44:4b:4e:e0:7d:0e:36:12:
11:00:4e:ba:31:ed:c1:6f:0a:a2:ec:45:ee:4a:90:18:cc:2b:
77:45:89:53:36:e5:48:07:1d:b8:fa:eb:ff:86:50:1f:d4:83:
43:34:e1:26:94:98:32:af:e0:cb:b5:62:21:74:20:ce:b4:16:
9e:89:ec:6d:54:bb:5c:2c:1d:8d:a1:4e:4b:e7:b8:f7:4c:86:
e2:0f:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 09:57:30 2025 by rpki-client