Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
File:                     sTLT4KDPHu-UWlZnFbFefhSl_uM.mft (raw, json)
Hash identifier:          FfY38t0/YcGtyzo9iYhXCg6FxYm10Hz23X+R9FDio5o=
Subject key identifier:   81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
Authority key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Certificate issuer:       /CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Certificate serial:       596D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
Manifest number:          596D
Signing time:             Sat 27 Sep 2025 01:35:30 +0000
Manifest this update:     Sat 27 Sep 2025 01:35:30 +0000
Manifest next update:     Sat 27 Sep 2025 07:35:30 +0000
Files and hashes:         1: sTLT4KDPHu-UWlZnFbFefhSl_uM.crl (hash: 6vPPpRGfG5es1wT/yj1DwH4FmIz9ASmDAiTUUkw7vGU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22893 (0x596d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
        Validity
            Not Before: Sep 27 01:35:30 2025 GMT
            Not After : Sep 27 02:44:05 2025 GMT
        Subject: CN=817749B78CB664C2729778AD52619FA85B0D4A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:3f:d0:5c:58:c7:63:5f:e8:41:7c:4b:80:
                    fd:3c:22:b2:05:64:94:a6:6e:a6:e5:52:ff:13:b0:
                    77:35:5b:f7:41:33:60:c3:2c:00:d1:fa:04:ee:79:
                    49:31:f3:f6:27:ae:e2:8b:a0:51:51:e6:e0:06:1e:
                    77:09:2c:85:19:8d:36:c6:0d:8b:a6:f7:74:6c:fb:
                    61:ba:13:41:54:cd:27:f2:75:6f:77:ae:e3:85:97:
                    40:d8:ae:dd:f1:fc:b9:f1:99:41:08:1f:a8:d6:1b:
                    37:8b:e7:d2:8e:78:5e:f6:10:cc:8e:e4:48:47:c3:
                    cc:9a:09:9d:80:ee:ce:db:e3:ad:ac:30:b2:7f:ea:
                    03:d7:cd:ab:27:c4:92:15:f0:05:f1:a3:c9:2c:ec:
                    a1:5f:bd:a8:22:fb:9b:8a:6d:73:15:84:5a:b7:79:
                    0d:94:5c:86:8d:4f:df:67:8b:e5:dc:5c:f1:52:d5:
                    4a:07:46:4c:04:17:a9:82:54:3e:f0:ca:0a:2c:f1:
                    4b:91:38:f7:30:55:b4:4e:20:98:64:9f:8f:87:f4:
                    cf:f4:74:c8:2b:11:e2:e3:df:80:fe:c1:98:20:56:
                    77:ac:b4:26:8a:90:13:4b:49:55:4c:97:40:77:3a:
                    93:6a:13:a7:95:f9:73:6f:c2:75:f5:d5:11:fa:dc:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:49:B7:8C:B6:64:C2:72:97:78:AD:52:61:9F:A8:5B:0D:4A:8D
            X509v3 Authority Key Identifier:
                keyid:B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:52:f9:0a:b4:aa:55:1f:71:7f:0d:c0:00:0e:74:37:c5:
         99:5b:2b:47:61:f3:02:d9:6b:6d:bc:2d:41:01:01:08:7b:a0:
         f6:ee:2e:69:28:41:64:10:84:8e:6f:b5:c7:0b:0f:41:97:1f:
         d9:03:13:95:6d:79:10:87:2f:26:5b:b5:82:dc:70:32:3d:2b:
         a8:72:f0:ab:6d:58:95:5b:08:e1:07:17:52:55:66:e4:2d:c4:
         c3:39:fa:62:45:15:c1:ba:8e:1f:05:41:8d:85:d2:c4:35:18:
         5b:4a:b3:b5:de:96:81:47:54:85:36:4d:af:f0:8c:3a:58:65:
         a4:18:21:11:fe:ee:20:af:ea:05:63:e2:1a:68:e7:66:12:0f:
         71:55:62:86:1f:80:fb:c6:d1:fa:91:68:83:da:9d:e2:ee:58:
         96:a7:59:fd:9b:d8:5a:00:34:fc:32:12:0d:99:e3:42:ef:f2:
         84:31:05:4b:33:03:3a:09:c3:a5:92:61:d9:2c:9d:54:91:74:
         94:d4:9f:89:59:76:d6:45:31:0f:48:0a:53:9f:0f:f8:f6:f4:
         ec:37:73:39:58:e9:0e:ba:ed:29:0f:c7:ba:6c:ee:2b:00:0f:
         e5:cd:b8:b2:ce:9a:30:e7:de:2a:bf:d2:c6:80:9e:1c:75:61:
         3e:63:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:10 2025 by rpki-client