Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
File: ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft (raw, json)
Hash identifier: mwE/RVFuYKNkiGOgWtG7T5l8X4cjCdBJeaHjFnAadC4=
Subject key identifier: 7C:CC:E5:F9:52:59:DA:47:95:EE:28:77:18:0C:7D:C6:40:70:B1:E4
Authority key identifier: 7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2
Certificate issuer: /CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2
Certificate serial: 07A9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
Manifest number: 07A9
Signing time: Mon 16 Jun 2025 18:13:28 +0000
Manifest this update: Mon 16 Jun 2025 18:13:28 +0000
Manifest next update: Tue 17 Jun 2025 00:13:28 +0000
Files and hashes: 1: ezbMMQZhv7l_8x7_1Ca0mpyESPI.crl (hash: MNYvsNnE3Ygbo8EUOGYdfVK9V/ocwGFa3RfLJ3pT9Gs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2
Validity
Not Before: Jun 16 18:13:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7CCCE5F95259DA4795EE2877180C7DC64070B1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:46:2b:c2:aa:92:4d:1e:f1:af:68:be:04:
b2:4b:e6:ce:d6:56:f8:ba:99:f7:4f:f6:ef:70:6c:
5d:93:65:1d:4a:38:0e:38:d8:7c:9c:2d:0c:87:97:
df:ca:7d:14:ac:a9:0c:82:aa:68:6a:61:c2:97:31:
14:63:b7:a2:44:c1:51:f1:c9:b8:06:c7:52:e6:d7:
3e:f6:5b:9b:05:05:34:3d:e0:23:ca:0e:0b:ce:ba:
52:96:0c:15:aa:79:d9:0b:c7:82:9c:f0:ba:56:17:
65:bf:13:74:ea:a6:0f:ff:3a:16:09:7c:64:cb:61:
60:b5:6c:26:87:c9:2f:61:06:78:28:0c:9d:13:1c:
17:bd:4b:d6:b3:8f:02:eb:8c:cc:4a:63:3d:e3:ff:
68:c8:1f:36:6d:47:0a:76:e7:17:49:7e:5c:6a:a7:
05:16:42:79:8a:bb:aa:ce:89:4e:ee:38:a2:d8:47:
92:08:4e:bb:c2:f0:84:3a:53:3d:6b:98:e7:13:bf:
cd:91:de:84:1a:d6:9f:38:41:ad:0d:f5:e1:31:f0:
fd:6e:58:1f:f3:e3:2b:c9:bb:f9:ae:9d:0a:2b:cd:
a7:0d:bf:48:91:f2:24:3c:de:33:55:60:2e:7f:f7:
00:1f:70:7b:b7:c9:a6:1b:d7:21:24:23:d7:d5:26:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:E5:F9:52:59:DA:47:95:EE:28:77:18:0C:7D:C6:40:70:B1:E4
X509v3 Authority Key Identifier:
keyid:7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:cc:c5:a2:ba:31:a4:09:03:97:63:e8:73:97:92:1b:95:
cb:19:70:6c:cf:12:c4:82:e5:f4:cb:c7:6a:d8:63:3f:3b:da:
56:65:32:3e:b3:43:65:b5:ca:13:bc:99:23:27:c7:7b:5d:2d:
c7:7c:41:36:ca:98:ce:76:44:d9:ed:a5:e4:ec:c3:07:cc:7b:
3c:49:34:05:bb:ed:ae:b0:d3:f6:23:9b:16:0e:5f:f6:3a:c9:
17:a7:91:0e:00:83:42:fb:63:e0:a7:b2:be:44:e9:dc:96:a4:
7c:ab:0f:01:54:93:0b:f8:65:ee:0c:d3:d1:5a:6a:db:d1:ee:
a7:d2:7f:6b:15:6a:f8:a4:ab:fd:46:56:b3:22:f7:8d:01:e0:
88:c3:20:ec:dd:14:ab:3f:69:28:10:e5:60:30:a5:b4:bf:13:
cb:44:65:b9:73:7c:3a:ca:be:4b:86:b8:2f:4d:d1:fa:a2:41:
8d:5d:1c:8b:60:e7:c4:73:e1:db:2f:f8:1b:1c:67:2a:6d:47:
6a:d0:f7:ec:96:59:9e:3c:bf:42:3c:80:3d:63:43:78:36:9b:
9e:c1:87:db:e9:fd:fa:82:49:ab:c1:de:c8:2f:69:f5:40:26:
e1:88:f9:e5:07:f7:4c:1f:87:8b:d9:bd:d8:ff:c7:eb:18:bc:
96:5c:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:51:11 2025 by rpki-client