Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3280/XKE6BySDCbt_94ACW5r5LaxechE.mft
File: XKE6BySDCbt_94ACW5r5LaxechE.mft (raw, json)
Hash identifier: 4HA/OucFXD6swO2cCd8Xgx7RZodgv0NLLaqLb0j/ZxE=
Subject key identifier: B6:F5:2C:4C:15:D5:F9:20:0A:AD:E3:4C:C9:72:71:9C:BC:AA:AB:EC
Authority key identifier: 5C:A1:3A:07:24:83:09:BB:7F:F7:80:02:5B:9A:F9:2D:AC:5E:72:11
Certificate issuer: /CN=5CA13A07248309BB7FF780025B9AF92DAC5E7211
Certificate serial: 06C8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XKE6BySDCbt_94ACW5r5LaxechE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/XKE6BySDCbt_94ACW5r5LaxechE.mft
Manifest number: 06C8
Signing time: Sat 26 Apr 2025 06:38:23 +0000
Manifest this update: Sat 26 Apr 2025 06:38:23 +0000
Manifest next update: Sat 26 Apr 2025 12:38:23 +0000
Files and hashes: 1: XKE6BySDCbt_94ACW5r5LaxechE.crl (hash: 6x/lJaqF24WmNJ0cAWxv/tv55v7mlDdRgVi74VOR8RA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CA13A07248309BB7FF780025B9AF92DAC5E7211
Validity
Not Before: Apr 26 06:38:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B6F52C4C15D5F9200AADE34CC972719CBCAAABEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:ba:85:3b:0d:05:1c:67:0e:38:ea:b7:26:
4b:51:a1:57:e4:ea:60:1b:05:3a:9b:45:6f:4c:61:
db:29:ee:c9:fe:ce:7d:85:db:6b:3e:7b:60:48:f5:
87:61:ed:72:1c:fd:5a:4d:9a:53:1c:13:98:47:ef:
16:46:01:9a:79:1d:58:fa:97:54:e0:b9:36:37:f3:
53:9f:72:c0:f6:67:44:82:f0:35:f7:31:ba:25:a6:
99:2d:1f:ff:c6:06:4b:35:bd:82:a0:74:e0:95:cf:
e1:50:71:da:65:3d:47:e7:6a:1b:d4:5b:ca:c3:cd:
34:46:10:e0:8c:b3:55:8b:70:9e:9a:cb:71:f7:7a:
65:92:c6:1c:1a:35:2d:bb:ee:cf:eb:4b:57:3e:c6:
c7:7d:b2:6e:89:a5:ed:54:25:5e:6a:b9:2f:39:33:
a3:a5:e2:90:f4:fa:69:5d:c2:ee:b2:74:8c:14:35:
cd:17:5b:d0:71:ac:7b:0b:58:ae:d6:b3:45:ac:eb:
b6:5b:68:b5:41:3a:d8:97:32:e5:10:8d:1b:a8:26:
f5:64:7f:5e:87:27:40:d1:8e:0e:4c:60:8a:8d:3f:
db:6c:c7:79:87:53:5f:9c:ed:b6:c7:76:1c:a6:40:
b7:02:bc:c5:6d:39:3c:13:a0:0b:97:c8:b7:c6:33:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F5:2C:4C:15:D5:F9:20:0A:AD:E3:4C:C9:72:71:9C:BC:AA:AB:EC
X509v3 Authority Key Identifier:
keyid:5C:A1:3A:07:24:83:09:BB:7F:F7:80:02:5B:9A:F9:2D:AC:5E:72:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/XKE6BySDCbt_94ACW5r5LaxechE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XKE6BySDCbt_94ACW5r5LaxechE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/XKE6BySDCbt_94ACW5r5LaxechE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c7:d4:4c:3c:bf:29:3c:e9:1f:41:f8:bd:d8:11:9c:23:56:
68:cd:01:87:1a:cb:5c:65:84:85:da:43:0f:4d:3a:15:84:6b:
ba:19:18:80:b5:a8:11:03:c5:5b:4b:c1:ef:80:c1:fc:20:a7:
c7:33:96:52:c8:53:66:54:dc:2a:c0:a7:d0:fd:2a:85:a1:3d:
89:98:93:6d:16:8f:7e:47:d0:f3:19:4a:27:2d:85:fa:42:b2:
71:2f:e5:3e:cf:3c:80:e0:06:2c:88:24:d5:7c:80:49:5c:23:
a9:34:86:ea:f1:8c:dd:6c:72:98:de:54:79:d4:b2:81:42:d9:
fd:cb:6e:3c:79:cf:5e:9d:1b:52:b8:92:55:a5:d1:cc:87:22:
ad:2b:4a:15:4d:61:8a:6e:e9:4e:bb:58:22:5e:30:63:39:f6:
c5:3f:05:25:bb:4b:70:e6:26:85:08:20:64:77:e4:ec:0e:fd:
3f:a8:62:dd:f9:42:b4:93:12:6a:df:d0:d6:f2:25:5f:42:74:
01:f8:97:9b:9b:c5:d9:82:5d:f6:04:de:32:24:07:f2:ba:ac:
8a:e4:f2:96:de:8f:4a:30:47:65:53:7c:40:b9:31:a0:89:2e:
a2:a0:ed:5f:0c:69:3a:fe:4f:a2:8c:3b:70:10:c0:eb:83:19:
33:28:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:39:38 2025 by rpki-client