Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft
File:                     92yeQzYd6kRgd61wKQVzgK__MmY.mft (raw, json)
Hash identifier:          BXvbxVa4OmTrTrAgk6uVkiwWcwLPfWqgecnl5Ztj2cE=
Subject key identifier:   E7:CE:F6:EE:2E:91:F5:73:77:55:51:B6:94:18:1D:CE:25:C2:B0:26
Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Certificate issuer:       /CN=F76C9E43361DEA446077AD7029057380AFFF3266
Certificate serial:       240B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft
Manifest number:          2400
Signing time:             Sat 23 Aug 2025 16:02:57 +0000
Manifest this update:     Sat 23 Aug 2025 16:02:57 +0000
Manifest next update:     Sat 23 Aug 2025 22:02:57 +0000
Files and hashes:         1: 92yeQzYd6kRgd61wKQVzgK__MmY.crl (hash: Inn4p7psuvTJQRsBkM4YOLEhaOge18wdpGQIzuxDNJs=)
                          2: aZsA4iO7gpPOOh8295OT-MVlcm0.roa (hash: gwCVTafrFZnZ6uvG2s49ZAXRU2/ePHdurmF/kpj96Jg=)
                          3: tj40UFStx2OOkB-4otchu_fx58Q.roa (hash: 1UAt6V6uerdK9jG24ghyHM+Eh904uhYQAg5VsBvnzJs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9227 (0x240b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266
        Validity
            Not Before: Aug 23 16:02:57 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=E7CEF6EE2E91F573775551B694181DCE25C2B026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:24:d4:ad:ba:ce:16:1f:94:2d:dc:a5:8d:
                    a4:30:f7:72:f4:05:98:6c:71:9c:7c:26:2b:7b:24:
                    9c:49:26:3e:7d:56:05:7a:71:89:df:7e:be:50:9a:
                    b6:f5:9b:dc:96:b7:1f:e0:e3:0c:03:f3:eb:ed:01:
                    8e:3f:f1:a6:3f:e3:65:39:8a:ad:fc:66:3f:b6:9d:
                    7a:e5:1b:f1:69:b6:c8:89:0b:bf:6f:36:c9:c1:bd:
                    75:f6:3c:ee:3b:70:39:f6:f9:a5:85:40:79:c1:03:
                    8a:52:2b:3e:26:f7:a5:f9:b4:4d:7d:64:c7:86:e7:
                    8d:6c:0a:c0:64:25:bb:38:09:db:ce:47:3a:bc:d4:
                    df:c4:a6:ec:ca:f3:01:d9:58:e1:76:fe:83:30:22:
                    12:23:af:48:98:a7:85:38:28:68:6e:35:6a:64:69:
                    7a:7f:9b:64:c7:b7:90:d9:d1:6e:0a:30:2f:60:f4:
                    25:be:fd:97:f4:d4:65:4f:09:54:63:f8:71:3a:70:
                    42:9a:43:90:5c:3d:3e:2a:02:29:68:e0:85:4d:42:
                    39:29:b0:55:ef:32:3a:44:1f:cf:13:c3:b4:07:1d:
                    70:7c:b5:3e:76:fd:be:cb:cf:59:a6:3b:1c:70:47:
                    38:86:f2:fd:83:6f:1a:36:52:bc:e1:6f:ea:98:88:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:F6:EE:2E:91:F5:73:77:55:51:B6:94:18:1D:CE:25:C2:B0:26
            X509v3 Authority Key Identifier:
                keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:27:9e:57:7b:ad:47:e4:70:6d:31:1c:de:45:6d:50:fe:0a:
         ec:d0:5e:7c:d9:63:e3:91:3d:00:d5:c4:6d:0d:c5:0b:5c:b7:
         f0:ff:eb:c4:8f:ee:4b:a8:5e:e6:d7:a2:e9:1c:03:a1:d9:38:
         60:53:c5:5a:4e:9c:c7:dc:46:02:eb:75:bc:59:7c:63:6f:5f:
         0c:02:4f:76:a3:8d:f3:c5:24:66:78:8d:38:79:0e:7d:aa:b3:
         c3:93:0f:53:6a:62:4a:a3:78:5f:b8:e5:40:e7:36:43:c0:d8:
         1f:ff:f0:f0:7f:53:f4:50:9d:b1:fb:d2:40:2a:21:42:10:24:
         34:87:0a:29:ad:4b:74:43:01:b7:a0:f4:b3:1d:7f:19:b5:85:
         c8:49:2e:34:a4:3c:f3:48:7e:61:79:8b:ea:d2:30:ef:ad:6c:
         b9:19:88:c9:a1:f7:08:9b:25:d7:29:b4:a0:79:df:8e:1a:86:
         fb:91:e3:5a:76:76:ff:63:b6:f5:d2:0e:87:5a:d5:bd:99:42:
         f0:03:33:c5:6c:f9:c7:b4:01:6a:13:b2:65:5c:d6:90:f3:43:
         01:1a:02:ee:22:e9:2e:ae:89:1e:9b:a2:c2:8e:90:70:9d:93:
         80:8a:55:c6:6e:92:81:b2:e2:c6:78:27:87:06:dc:29:53:a4:
         01:ff:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:16 2025 by rpki-client