Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft
File: 5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft (raw, json)
Hash identifier: OvqvTDUatPvBT/c7JrLtssvUa4WEH8VFmuQb4VM+co4=
Subject key identifier: B7:5D:6E:41:5F:7C:7D:DC:47:F7:AE:83:C6:D8:6A:75:20:7B:C4:97
Authority key identifier: E5:AF:BB:E9:C0:51:A6:3F:1B:6D:5D:21:9F:43:9B:41:5E:D8:B3:92
Certificate issuer: /CN=E5AFBBE9C051A63F1B6D5D219F439B415ED8B392
Certificate serial: 04A0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5a-76cBRpj8bbV0hn0ObQV7Ys5I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft
Manifest number: 04A0
Signing time: Sat 26 Apr 2025 06:37:27 +0000
Manifest this update: Sat 26 Apr 2025 06:37:27 +0000
Manifest next update: Sat 26 Apr 2025 12:37:27 +0000
Files and hashes: 1: 5a-76cBRpj8bbV0hn0ObQV7Ys5I.crl (hash: raOLxYFwWRoR8eD7taqaBLxfy7MGitGdNI0HqGdOtU4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AFBBE9C051A63F1B6D5D219F439B415ED8B392
Validity
Not Before: Apr 26 06:37:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B75D6E415F7C7DDC47F7AE83C6D86A75207BC497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:53:b5:f0:1d:33:23:93:d8:34:7d:a5:7c:
1d:03:6f:33:04:8c:20:82:fb:44:b5:4a:23:58:d9:
30:75:ee:23:42:80:40:ef:0d:15:18:4f:f9:3a:9e:
05:66:a6:45:33:c0:06:e2:ca:d9:0d:43:1f:d8:37:
d7:6b:9c:b6:18:81:85:b8:a5:3a:23:5a:fe:2f:c9:
76:02:70:1e:44:54:4e:c4:22:18:88:94:a9:6d:6d:
61:7a:5e:39:cf:85:3c:6c:bb:00:5a:8d:65:f1:7e:
3d:64:ae:b3:9a:12:79:35:02:7d:89:22:f0:de:42:
aa:dc:d3:67:d9:48:ec:8c:4c:4c:f7:ea:c4:0e:a6:
39:5a:6b:1e:31:70:ba:17:c3:35:01:64:87:85:ea:
a7:79:af:59:92:4a:31:d8:07:46:bb:d9:e5:ee:94:
8d:74:68:ad:f0:c2:46:bc:c4:94:0e:e9:a1:a7:56:
ff:31:a1:52:13:e0:e9:76:62:7a:a4:da:ca:f4:2b:
17:f3:74:24:99:aa:43:1c:bb:6d:07:e4:9b:0b:c3:
d6:93:ed:95:29:9a:b9:b8:36:de:ee:87:4e:ce:62:
31:26:08:72:0b:2a:89:51:73:6d:2d:b0:d3:14:48:
d5:41:cf:63:66:73:2d:82:11:b2:40:42:26:a6:fc:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:6E:41:5F:7C:7D:DC:47:F7:AE:83:C6:D8:6A:75:20:7B:C4:97
X509v3 Authority Key Identifier:
keyid:E5:AF:BB:E9:C0:51:A6:3F:1B:6D:5D:21:9F:43:9B:41:5E:D8:B3:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5a-76cBRpj8bbV0hn0ObQV7Ys5I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3315/5a-76cBRpj8bbV0hn0ObQV7Ys5I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:46:7c:0a:58:0b:0f:e4:78:b6:ae:25:e0:b8:bb:88:c1:ad:
79:8d:86:a9:a2:b1:a6:55:7d:b2:cc:7f:09:ce:64:28:af:06:
b2:49:34:5b:30:81:6f:38:1c:5b:1b:51:56:27:98:e9:61:98:
02:8f:df:15:9a:79:1d:8e:6d:fd:a7:81:b4:61:2f:39:0a:ae:
b7:e9:d7:8a:54:c8:f1:bc:5f:a1:36:f6:df:f7:12:1d:8a:41:
3c:47:25:0b:8a:9d:24:fa:92:1c:11:e2:b8:3b:07:42:c6:d2:
ac:b3:8d:b8:88:72:ef:35:00:64:77:86:92:16:e9:70:bd:c4:
71:bc:cd:ec:0e:83:ee:52:36:01:13:d5:b9:fb:8e:c8:f9:41:
e3:79:d8:bd:03:bd:68:5c:f0:8a:74:f4:4d:f6:88:f4:9e:e2:
9e:5d:cc:a3:f6:ad:11:b7:4b:ab:11:c3:a5:6a:0f:4d:f8:51:
75:2e:58:c5:ae:34:9d:cb:5c:d7:23:48:a9:1d:6e:89:31:52:
3b:15:71:fe:fe:13:0c:5f:99:2f:fd:7f:c6:f6:50:e3:cf:0b:
c8:dd:4b:91:7e:af:17:3c:5e:fe:e4:6d:3a:a7:b9:a9:70:24:
2b:7a:7a:ec:a3:0e:d1:4e:13:99:1c:b4:16:78:b9:93:44:eb:
2f:8d:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:37 2025 by rpki-client