Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft
File:                     pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft (raw, json)
Hash identifier:          J0zln/DPFpReUpX2oxZfyvhgCxrm4xv98pP2oI3j2/M=
Subject key identifier:   62:DC:CB:76:16:BF:89:EC:BF:12:6E:8C:E6:13:88:BA:90:99:20:C3
Authority key identifier: A5:60:15:AF:58:82:A4:5E:A9:1D:BE:06:9B:8F:80:DD:CD:B3:B7:AD
Certificate issuer:       /CN=A56015AF5882A45EA91DBE069B8F80DDCDB3B7AD
Certificate serial:       1FF1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pWAVr1iCpF6pHb4Gm4-A3c2zt60.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft
Manifest number:          1FF1
Signing time:             Sat 23 Aug 2025 14:02:46 +0000
Manifest this update:     Sat 23 Aug 2025 14:02:46 +0000
Manifest next update:     Sat 23 Aug 2025 20:02:46 +0000
Files and hashes:         1: pWAVr1iCpF6pHb4Gm4-A3c2zt60.crl (hash: UNocsB2afRELUot59chsvejy59FKWUJG8+HbfRvcdNM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8177 (0x1ff1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56015AF5882A45EA91DBE069B8F80DDCDB3B7AD
        Validity
            Not Before: Aug 23 14:02:46 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=62DCCB7616BF89ECBF126E8CE61388BA909920C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f2:d2:8c:c6:4e:44:c8:48:d9:c0:ea:cc:53:
                    de:4d:c1:66:52:01:a8:e7:c8:ea:b6:e4:4e:c3:a1:
                    c0:28:31:9a:9f:bc:b1:ff:50:7e:3f:18:13:8a:cf:
                    0a:a3:39:da:23:45:5d:57:7d:d9:c4:7d:ad:35:ac:
                    d5:88:1b:d2:a8:96:95:5b:08:d2:da:4d:fe:7e:cd:
                    4d:35:c5:46:34:77:d3:94:0c:31:2e:45:8e:cf:b4:
                    d8:30:1c:6b:18:04:fa:ff:b9:e8:d1:ac:2e:ea:92:
                    87:09:df:74:8d:c9:98:40:a8:43:d1:47:ce:75:48:
                    d9:a8:ed:fa:7d:59:04:84:09:61:f5:59:81:d8:f2:
                    15:61:f8:39:c3:9a:5d:5f:d0:dd:0c:15:ce:e0:1c:
                    c2:bf:75:59:27:33:28:da:5a:c3:9d:49:fa:4c:0a:
                    a1:92:b4:db:c9:eb:17:da:4b:06:3c:5d:7c:69:d7:
                    d4:b7:67:13:44:f7:da:dc:7a:dd:3b:45:c1:ed:e6:
                    dd:4d:ca:c3:43:d0:ac:b4:17:b3:1b:89:1a:44:a9:
                    0c:27:1a:0f:89:2b:80:ab:64:ac:ff:fa:93:b1:7c:
                    3a:44:04:fe:3c:eb:1e:69:c0:46:07:03:dd:26:0d:
                    ef:c8:67:e8:f9:fe:69:20:b3:59:8c:8e:3a:dc:cb:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DC:CB:76:16:BF:89:EC:BF:12:6E:8C:E6:13:88:BA:90:99:20:C3
            X509v3 Authority Key Identifier:
                keyid:A5:60:15:AF:58:82:A4:5E:A9:1D:BE:06:9B:8F:80:DD:CD:B3:B7:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pWAVr1iCpF6pHb4Gm4-A3c2zt60.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:34:40:07:61:20:f6:1c:78:69:ff:b0:5c:eb:62:6e:8c:09:
         94:6a:b3:71:c6:59:d2:c0:5d:b3:bc:f5:b5:d6:5e:8c:2f:17:
         fa:e1:5c:e7:7a:8a:0a:64:91:94:48:34:89:5d:89:ea:5c:04:
         57:6e:9c:13:c5:af:5a:fe:5a:0c:18:ff:c9:c7:28:7b:ca:2a:
         68:30:50:44:2c:5b:7b:dc:58:e6:89:41:12:d5:a3:40:ed:81:
         9a:aa:37:ef:c2:4a:92:fa:97:f3:ab:e9:50:6a:6e:d6:f5:11:
         a7:98:49:bf:21:13:08:05:06:72:9d:ee:be:93:c8:46:41:94:
         5c:44:2d:06:f6:0e:0a:a0:d0:67:34:e6:1c:84:79:fc:27:f1:
         48:11:21:66:f5:48:a7:4d:92:49:c5:2d:10:d9:9f:65:f6:7c:
         79:23:41:14:f1:80:2f:d5:d1:0b:83:b5:90:94:cc:22:20:a4:
         b9:af:a4:47:a9:dc:fd:06:e6:1a:2e:7b:ac:46:93:09:e7:57:
         40:1c:4f:a4:32:7f:77:cd:45:d5:b9:64:67:e2:9e:2b:30:e2:
         e5:0e:51:69:02:80:31:4d:95:cf:62:5f:24:55:7d:4f:5e:da:
         e2:35:9c:84:0c:44:46:7d:85:dc:ab:ad:83:f4:07:85:84:cd:
         8f:2a:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:42:15 2025 by rpki-client