Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
File: cpzUo3V_UkXEbNX7sK1MjtG73Us.mft (raw, json)
Hash identifier: PkqiIgnUybV7/rar4wJQK8cpD76rRjZN13K7Sv03tXM=
Subject key identifier: B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5
Authority key identifier: 72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B
Certificate issuer: /CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B
Certificate serial: 1494
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
Manifest number: 1494
Signing time: Sat 26 Apr 2025 08:36:23 +0000
Manifest this update: Sat 26 Apr 2025 08:36:23 +0000
Manifest next update: Sat 26 Apr 2025 14:36:23 +0000
Files and hashes: 1: cpzUo3V_UkXEbNX7sK1MjtG73Us.crl (hash: PffDm2yrGSHhrf5hNqnQshzmVnsr0O0oZbDzazKAiSA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5268 (0x1494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729CD4A3757F5245C46CD5FBB0AD4C8ED1BBDD4B
Validity
Not Before: Apr 26 08:36:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B2C580BE6C0A90D2887CAE55DD0C71A81BE1C6A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:4b:a7:ea:0e:54:b0:74:1f:43:82:e2:d6:
23:41:e9:9f:b0:d1:09:31:5e:92:73:75:78:c5:27:
d9:92:38:ab:4f:90:68:4b:94:8f:5c:5f:75:81:3c:
2e:2e:01:00:c1:3c:a9:99:d4:b3:5f:8a:f5:23:1d:
9c:47:a5:d0:d5:6c:25:77:b8:c5:6b:87:fd:83:f8:
d2:98:a7:3d:04:bf:8b:f6:2d:d1:2b:34:51:eb:8d:
8a:7e:12:88:e3:2a:99:08:13:30:a9:ca:d8:2e:30:
cf:8d:fc:22:7a:a9:c1:21:af:03:b0:e1:5d:ee:74:
41:74:c3:ae:80:ae:8a:71:2c:a1:f9:f4:ee:5e:78:
87:3b:67:26:77:ee:60:78:32:e4:10:b7:bc:6e:bc:
86:dd:5b:61:74:e8:78:cc:a4:0c:7e:99:6a:cc:b5:
36:70:ab:48:4f:11:38:a2:a4:16:dd:c9:f6:aa:29:
e6:07:e4:b9:f6:68:56:b6:b8:c8:a9:0d:55:0d:b7:
68:0a:07:92:06:23:51:f7:2a:c0:30:b7:78:57:75:
10:0d:96:65:44:60:af:e9:ac:42:3a:37:6f:da:1f:
4d:ea:d6:e8:41:ee:7d:e3:63:7e:9a:58:81:5f:9a:
dc:31:35:d1:20:de:3e:b3:88:01:fe:e0:7d:0b:0c:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:80:BE:6C:0A:90:D2:88:7C:AE:55:DD:0C:71:A8:1B:E1:C6:A5
X509v3 Authority Key Identifier:
keyid:72:9C:D4:A3:75:7F:52:45:C4:6C:D5:FB:B0:AD:4C:8E:D1:BB:DD:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cpzUo3V_UkXEbNX7sK1MjtG73Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/cpzUo3V_UkXEbNX7sK1MjtG73Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:92:dd:b0:5c:21:8d:81:24:c3:d2:a5:7f:8f:3b:4b:51:b3:
40:db:cc:b3:ee:c4:cb:6c:36:33:53:82:d9:3b:a0:74:25:30:
d2:78:03:2f:40:d2:60:b9:f9:59:c9:ff:69:ad:a6:f7:38:cc:
20:70:5b:5e:23:4f:92:41:15:3c:e7:21:08:d1:b0:f8:77:ba:
a0:a8:96:f9:76:7a:66:6b:56:eb:4b:c8:42:5d:c5:e1:d2:b9:
f4:82:7d:24:b3:56:f8:cd:54:2a:76:44:44:f9:12:43:7f:4c:
20:5a:9f:6f:ce:9e:52:49:46:e1:cb:f4:10:66:6e:15:1d:ac:
7c:e6:66:55:d8:4f:49:d2:4d:bf:99:5d:e9:2d:ba:59:b6:4b:
73:61:d4:80:5b:b6:e0:da:37:fc:b1:9e:e7:10:8e:25:ab:f3:
a2:82:73:fd:f6:3f:16:fc:86:eb:31:e3:9a:7b:68:67:25:9f:
ac:82:16:96:fc:05:93:0e:61:cf:a5:9d:a3:82:54:18:6c:6f:
94:5c:ea:06:65:87:10:c4:44:a0:f2:29:d2:67:b5:49:cc:f4:
fa:cf:0b:4b:3b:8c:d6:18:08:e8:cc:1d:66:ca:75:3c:17:f3:
38:c4:b9:e8:e1:da:3e:a3:b7:61:af:d8:9c:34:ad:1f:eb:fe:
70:5c:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:56 2025 by rpki-client