Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
File: jBp_tNDRawix7CtJn6KrIwEhaB8.mft (raw, json)
Hash identifier: ZxM+fVSccQkjhg1Ete9IWjTwRsrz0sNbTvzzCHlMz30=
Subject key identifier: 4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F
Authority key identifier: 8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F
Certificate issuer: /CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F
Certificate serial: 0196
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
Manifest number: 0196
Signing time: Sat 21 Jun 2025 20:13:01 +0000
Manifest this update: Sat 21 Jun 2025 20:13:01 +0000
Manifest next update: Sun 22 Jun 2025 02:13:01 +0000
Files and hashes: 1: jBp_tNDRawix7CtJn6KrIwEhaB8.crl (hash: fV9ev6uPYuhASdyqh51ixKSPjYW6t+LKZy67h47duf8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F
Validity
Not Before: Jun 21 20:13:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4E93D5B4B60FDE24CD4D953117CB16205463E80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:0f:64:73:4b:fc:42:4f:a8:3c:99:e7:36:
45:72:c0:9f:a3:34:dd:df:d7:45:b4:ed:a9:8b:ed:
8e:89:d7:6f:37:c6:42:9c:bd:90:e2:03:ee:67:3d:
60:c8:e2:45:18:0a:97:a8:50:cf:d9:b0:ee:b7:20:
09:19:b5:4d:45:dd:18:df:b2:18:d4:07:8d:aa:18:
db:ed:aa:37:a9:92:82:b7:2a:8e:15:b6:13:43:80:
2e:15:0f:df:39:f3:20:f1:cd:a7:de:a1:32:e0:54:
d4:37:26:9f:e8:68:ca:3e:af:fe:34:16:4d:fe:9a:
07:14:57:6d:4a:d8:8a:73:11:51:0a:61:cb:a4:1e:
b5:c9:66:6c:80:8f:5f:f4:44:bb:9e:bb:9c:54:80:
05:c1:a1:be:b4:e5:1b:ae:7c:2b:bf:57:ad:98:a4:
65:be:bc:0e:61:3d:44:1c:68:f5:d5:cb:17:d2:02:
1a:66:35:d1:19:b7:a5:76:e6:78:28:7d:a3:83:31:
52:79:a3:8c:69:7d:d3:83:2d:af:90:b3:67:ed:1b:
13:79:b8:63:19:9b:66:36:dd:46:54:5d:8b:43:e4:
0a:ad:ef:e4:46:47:f0:b3:91:6a:e3:b8:3b:40:96:
5f:50:bd:19:0c:4d:5c:40:a0:c2:7c:53:6f:97:23:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:93:D5:B4:B6:0F:DE:24:CD:4D:95:31:17:CB:16:20:54:63:E8:0F
X509v3 Authority Key Identifier:
keyid:8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:9f:ba:9d:f7:2c:af:a9:a0:55:8c:50:57:4c:4c:38:1f:
87:5b:38:8d:30:27:ee:4a:20:c7:f2:e9:5d:9b:69:a6:32:18:
c9:ae:eb:d4:05:bf:03:e1:7c:a9:32:dc:12:4e:b9:3e:a1:38:
e9:f9:11:07:4d:4e:7c:4e:3d:17:a1:30:e5:f8:fb:0a:f2:ed:
1d:a3:b1:55:30:54:80:9f:f6:33:fd:3a:0a:45:d1:b8:3d:ef:
91:40:97:e7:c6:c7:3e:66:71:96:f8:8b:3e:97:6e:51:af:70:
0f:bd:28:51:31:0c:a2:16:ff:6e:15:cc:ff:db:01:d8:83:7e:
21:c1:fd:95:34:2e:0c:9f:84:ee:ed:f3:21:c6:1d:0c:2e:81:
56:65:7f:4c:33:e9:22:f1:fe:9e:08:5b:05:f2:cb:ae:1e:1d:
8f:12:b8:3f:2b:f6:13:89:c8:02:0c:ca:b6:09:4b:da:a7:61:
07:b2:d4:fc:b1:6d:80:20:65:4a:88:6f:c4:3a:c1:dc:bb:d0:
c9:60:4f:91:a8:f0:84:18:c7:eb:d4:bc:e0:8e:8b:9b:20:6c:
39:33:54:cf:4b:6d:e5:b7:08:1a:9e:12:97:ce:b9:a1:85:63:
b4:39:7d:f4:64:cc:fd:3a:4a:5d:c8:24:5e:3f:6f:91:26:2f:
c9:c7:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:29:56 2025 by rpki-client