Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
File: jj4CcULGM9VlmEGN9t68Ab3YAIw.mft (raw, json)
Hash identifier: TIDJeSa3PqkcPItoHxVmlgb3bWJqGcGIOjx0q6B+05s=
Subject key identifier: CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 148E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
Manifest number: 1486
Signing time: Sat 26 Apr 2025 06:38:01 +0000
Manifest this update: Sat 26 Apr 2025 06:38:01 +0000
Manifest next update: Sat 26 Apr 2025 12:38:01 +0000
Files and hashes: 1: 4mivCFMBAf7EEBKKxRo0rub4T64.roa (hash: jz9z1yXxrP3c49QtbOgAGOSwj2Y8ZkTwUpXiF59bJtI=)
2: jj4CcULGM9VlmEGN9t68Ab3YAIw.crl (hash: emErVpN+M1gNfhsQxf3WmgFaz4KeDOnnoqacPSIobQQ=)
3: kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa (hash: XHI0J5/o5O5ceg1Z+ckCn+FaTtcIPko4W8gNfs++aKE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5262 (0x148e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: Apr 26 06:38:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CD0DA4347661962168388026EA8966599564316C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:1c:56:12:f8:80:bf:f0:c2:fd:a7:4d:2d:
16:9e:1d:4d:9e:3e:08:a2:38:57:36:91:63:3d:f1:
e4:5b:44:e8:9e:e7:a7:79:48:59:02:ec:34:53:6b:
ac:59:7f:70:4b:62:43:fa:08:97:27:12:4f:31:13:
e9:1a:eb:49:15:35:eb:7f:75:7c:2e:98:23:ed:f4:
7c:15:ec:81:50:d2:bb:63:2b:70:f6:af:ce:34:eb:
88:fe:46:f2:d3:9f:fa:3c:f2:96:6b:31:26:5a:f4:
c3:7f:19:06:92:95:ae:2c:ac:5e:eb:77:b4:c8:1b:
26:15:84:ec:8e:f0:a9:48:25:5f:d9:46:3a:16:42:
8d:5f:aa:ef:04:6f:2d:5b:7d:68:ea:0f:44:48:d5:
d1:db:ff:ce:07:3f:7b:65:09:55:7b:b2:2f:b0:be:
55:97:02:ef:2e:a3:8b:f0:01:87:57:38:a8:24:bf:
b9:5f:65:23:4a:7d:56:3b:b2:3d:71:04:31:d5:74:
dd:c0:b1:12:81:8f:82:50:8d:5f:3e:50:d6:f6:18:
b4:66:f1:27:d9:90:62:79:c2:c1:0b:d5:d9:7c:20:
12:0c:b6:5b:ce:6f:6c:8a:c9:0e:c4:db:18:65:53:
d6:17:a0:aa:da:28:8e:d2:25:62:50:bd:0e:51:20:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:A4:34:76:61:96:21:68:38:80:26:EA:89:66:59:95:64:31:6C
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:70:53:d7:1f:fb:5f:5f:bd:ab:e9:7a:51:52:74:09:c7:16:
87:28:ac:ca:4e:f9:69:b4:4b:1a:76:3e:e6:d2:cc:e1:4e:8a:
d0:31:2e:db:e0:e3:89:57:df:ab:88:42:fd:ff:fc:d3:c3:f0:
6a:20:cf:a3:f5:c1:62:c1:fc:41:c0:9c:f9:74:cd:f3:38:ea:
aa:11:c8:a3:52:e2:74:51:34:dc:64:9f:db:ec:ba:8a:55:ae:
ac:30:f3:07:6b:0c:e4:2f:da:08:c1:37:59:26:b0:27:90:ce:
51:e1:23:37:a9:7f:b8:2c:b5:8f:e7:1c:76:ca:71:81:b3:2b:
2b:20:a1:04:79:13:5b:39:80:85:70:aa:63:7f:66:8a:bb:26:
3f:14:f1:93:53:5c:c0:2f:a7:74:d8:04:72:64:d6:71:0e:5c:
be:ed:6b:c9:d5:15:2c:c7:0e:6d:03:de:80:03:b8:78:6e:a9:
e5:13:3b:83:da:fb:2c:51:b8:ac:be:e3:54:b0:5b:95:23:fe:
12:4c:85:32:50:23:d4:b6:5c:6e:c5:5d:dd:97:bf:39:6e:53:
49:23:7b:ff:c1:03:5b:92:89:ac:fe:b3:b1:29:c6:2e:48:8e:
1c:9f:d8:98:5e:4c:ab:78:c4:e5:f9:68:e1:ec:e5:71:0a:90:
ba:93:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:40:31 2025 by rpki-client