Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft
File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft (raw, json)
Hash identifier: 4cHq58XE2yjSQHA2pA5JOCcNZcaobl/oUfgsuAPlwdo=
Subject key identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6
Authority key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26
Certificate issuer: /CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26
Certificate serial: 05BD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft
Manifest number: 05BD
Signing time: Sat 26 Apr 2025 06:37:04 +0000
Manifest this update: Sat 26 Apr 2025 06:37:04 +0000
Manifest next update: Sat 26 Apr 2025 12:37:04 +0000
Files and hashes: 1: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl (hash: CVYAoOa8TcMR+9ds1R/U/PqWenFE2UDWT3CNNr7b214=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26
Validity
Not Before: Apr 26 06:37:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1F69946BDFFBCBE8EDE7A4D46B9143B895AB27A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:41:5e:8c:db:b0:01:a5:ed:6a:45:10:13:
b3:1c:be:e8:22:60:92:bf:21:07:3e:da:14:e1:05:
eb:85:b8:22:d8:0a:c7:80:5a:b1:3d:36:2d:78:db:
ac:82:c7:fc:20:d1:37:c2:46:e2:c7:0e:7b:ea:7f:
c8:c8:44:0c:f1:04:fb:6a:4d:c1:72:b6:58:a5:68:
0f:8f:99:2d:1b:9b:f8:e4:9b:61:b4:76:fb:36:07:
f5:58:65:8c:fd:1d:be:8b:9a:42:a9:c6:19:32:ef:
d6:7f:40:e3:1e:e8:ba:cd:f5:47:05:54:b0:9d:de:
9a:e9:93:1a:51:f1:b9:4f:34:f6:78:09:f4:f8:35:
32:41:52:75:fb:4d:43:e6:6f:10:27:bc:08:d4:0f:
f5:a5:ea:fd:7c:e0:ee:d7:76:fd:f7:76:38:44:b5:
d4:89:fb:e9:8d:f3:e8:27:2e:51:da:13:22:37:da:
e4:d5:1b:ec:4a:51:88:75:d2:ea:73:8d:32:dc:54:
a5:7c:81:39:e3:ae:04:d6:41:9a:0f:7b:92:c3:bf:
55:82:b7:ae:f3:91:0c:39:6a:67:db:c7:bb:c7:23:
19:e4:c1:c0:61:1c:35:15:ad:45:56:79:5f:28:9f:
bd:f4:0c:60:e1:54:f7:40:e8:4b:8c:0b:a3:cb:5a:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6
X509v3 Authority Key Identifier:
keyid:32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8c:55:ff:ea:27:c6:5a:85:30:5e:d8:5a:ad:a9:2c:bc:0d:
2a:97:96:97:a5:6e:6b:ac:12:aa:28:80:7f:d8:41:c9:af:c1:
b5:dc:fa:16:92:2f:8a:0e:04:f1:dd:a2:3f:57:46:1c:8e:92:
36:25:33:27:91:d9:54:c6:d1:4c:01:40:13:a1:ab:5c:4a:d5:
5d:5c:0c:fd:e2:14:ea:f7:cc:8c:23:55:9a:79:6f:6e:d5:c1:
76:ef:63:9c:d7:c2:b3:3d:0e:d6:ee:0a:4a:55:d9:f3:45:96:
73:c0:d5:dc:26:76:13:e7:f8:11:90:0d:0d:56:1f:b5:d8:fd:
a6:09:11:f2:f2:7c:b4:c0:e8:9e:85:03:49:11:e2:b4:37:ac:
78:7f:1d:6d:b9:fc:c8:b6:68:d9:4e:f9:be:bb:1e:0f:eb:70:
43:02:4a:a8:68:11:2e:3d:85:fd:44:ce:14:ca:90:74:d1:9d:
2a:ba:b2:fc:80:ab:ba:72:42:63:50:6b:d2:6d:a5:4f:0e:8e:
43:77:c1:fc:f6:fb:30:7e:d0:cd:69:d4:1b:94:39:a3:98:fa:
5a:4f:42:8a:79:2d:61:98:3c:f1:ff:e0:b6:73:e5:dd:00:98:
e4:32:56:34:73:dd:30:7e:09:b0:b3:94:84:68:69:a3:19:fb:
37:64:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:41:33 2025 by rpki-client