Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
File: YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft (raw, json)
Hash identifier: tVgKEckxP/kDxKZNkZXB1a5A7E7XTeNhs4L7UffCfF0=
Subject key identifier: 38:4F:8B:57:F3:79:2E:F1:89:B3:64:DA:F5:EE:B9:E9:6F:11:34:A2
Authority key identifier: 61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF
Certificate issuer: /CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF
Certificate serial: 059F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
Manifest number: 059F
Signing time: Sat 26 Apr 2025 06:37:48 +0000
Manifest this update: Sat 26 Apr 2025 06:37:48 +0000
Manifest next update: Sat 26 Apr 2025 12:37:48 +0000
Files and hashes: 1: YUdo14zf1NPTMMvhK6DxuTJ6rM8.crl (hash: 2uIExrSdRpdpuEl0HZBaVAXQMGeyKHFU24OGUUsfHe4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF
Validity
Not Before: Apr 26 06:37:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=384F8B57F3792EF189B364DAF5EEB9E96F1134A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:a9:c8:bf:c8:78:3b:7d:72:48:78:c7:b6:
6c:ee:be:74:85:cd:33:19:8c:69:40:3f:d5:5e:c5:
09:58:80:55:2b:55:72:aa:1f:3d:99:3a:27:1c:9f:
cd:bb:2b:50:6b:e4:ad:c4:c3:fb:79:f3:97:5f:43:
4b:d0:ce:e1:40:a1:ea:2e:25:76:16:85:3b:2f:64:
e7:9e:52:55:03:d6:0c:2d:71:98:91:67:bc:2b:50:
1e:f0:d3:f5:5e:dd:ce:f5:2f:20:34:5d:b2:4d:66:
eb:db:54:d0:9c:ca:99:d8:dd:2f:72:bb:0f:cc:16:
8e:bb:3c:33:7f:ff:99:82:d2:86:a5:55:ee:ff:08:
f2:91:f3:fb:08:91:60:de:ae:6e:bd:3d:91:dd:01:
ac:d5:fd:dc:b3:2c:04:b1:d5:e2:64:1e:e3:13:72:
89:4a:ef:3a:51:08:37:8e:8b:19:d9:3f:99:e8:aa:
1d:a2:1d:93:84:c9:46:b2:51:e6:5c:13:d9:9e:e8:
51:18:90:c8:a8:fa:96:57:84:e4:40:5b:88:2c:9b:
84:4d:85:31:44:73:32:94:5f:94:90:87:28:1c:4a:
2d:10:a2:be:9c:32:5e:47:08:1a:05:9b:ea:5f:ac:
49:b9:19:c0:7a:c9:e9:62:e4:14:e8:4a:ad:7b:aa:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:8B:57:F3:79:2E:F1:89:B3:64:DA:F5:EE:B9:E9:6F:11:34:A2
X509v3 Authority Key Identifier:
keyid:61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d8:47:0e:a1:32:b2:0a:dd:de:c6:00:22:5a:2b:d6:49:bb:
5c:29:72:ba:97:b5:77:d7:b5:56:f7:7f:34:0d:da:94:4e:d6:
ef:64:56:3c:44:50:a4:33:bd:23:02:d0:4f:4a:d1:61:50:49:
a0:a5:ac:ba:0d:98:42:9b:14:bd:a5:39:ed:e1:52:1d:a1:5e:
0b:c4:fa:1f:88:20:9e:ef:fb:97:12:4a:c5:03:4e:c5:e8:f2:
51:12:7a:94:84:8f:4d:dc:6f:86:11:41:11:ab:7a:cd:de:2a:
5c:a8:ca:c5:f5:6f:b0:97:b5:d1:83:af:79:a8:4f:3a:94:51:
44:45:3e:22:a5:fa:71:7d:25:5a:af:35:06:07:bb:94:45:a8:
62:f6:8c:9f:44:7f:89:3d:31:d7:a8:0d:4b:41:90:04:e5:88:
7f:d9:f6:8c:c4:d1:38:6e:74:73:56:b8:eb:3f:3b:2c:2d:ba:
27:21:b8:0c:66:64:1f:e9:de:49:11:f7:d9:6d:72:6e:32:ac:
20:83:3a:f9:f3:d2:32:5a:30:b6:37:5e:22:61:c7:42:48:a3:
94:f6:c9:a4:fb:c6:d9:fe:37:8f:dc:df:a5:93:9b:9b:11:b4:
52:37:b8:6a:01:75:01:c5:07:2e:b6:62:4b:49:f0:99:37:7c:
56:a8:b7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:42:27 2025 by rpki-client