Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft
File:                     wrEFUbAKIe7r4enJQLSZntFcIfM.mft (raw, json)
Hash identifier:          EPAttuxjhmyBsxWkIv0a3aVoce8vIXgG/zr5U6p98QQ=
Subject key identifier:   74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A
Authority key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3
Certificate issuer:       /CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3
Certificate serial:       2666
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft
Manifest number:          2666
Signing time:             Sat 17 May 2025 16:37:37 +0000
Manifest this update:     Sat 17 May 2025 16:37:37 +0000
Manifest next update:     Sat 17 May 2025 22:37:37 +0000
Files and hashes:         1: wrEFUbAKIe7r4enJQLSZntFcIfM.crl (hash: 1w6l+NoTHXBMo/wFq1M4G5NBDGuZyv/k7k9kdXuhtwo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9830 (0x2666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3
        Validity
            Not Before: May 17 16:37:37 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=74C6E5BCFCAD2046F375D2A8B10240F7DCCAF44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:25:a7:70:ec:92:88:a7:f5:83:b7:60:f5:
                    e2:e1:8b:dd:20:b0:fe:13:2f:66:4c:3f:65:f2:25:
                    16:b7:98:d6:07:9b:6b:03:e9:67:0b:53:cd:0a:ad:
                    05:36:29:bb:39:d9:82:6a:0f:c1:8d:61:7f:30:d8:
                    8a:b1:f0:1b:ec:ff:a0:6c:ff:61:d9:12:50:fa:e0:
                    af:0d:32:88:e1:23:85:86:f8:66:29:00:0b:2f:b5:
                    9d:aa:d1:17:7e:3f:81:df:47:9c:29:0e:3e:ab:5e:
                    50:d6:a3:36:c1:16:16:4b:f8:d3:b4:5a:0a:21:20:
                    1a:60:e8:56:8f:04:64:8d:e8:59:28:2c:f6:54:d5:
                    0a:56:b8:dd:23:ec:c1:2b:8f:5f:8f:24:6b:4a:74:
                    3e:65:09:c7:d0:95:5b:db:07:15:57:d0:52:a1:4c:
                    69:a9:02:42:e1:95:a4:0c:a1:1e:ec:b6:92:71:7f:
                    73:83:ed:80:07:33:10:9c:8d:93:ce:f3:e4:e1:ac:
                    45:5c:ed:80:70:4e:ca:0b:bd:97:ad:28:93:d6:68:
                    bc:2e:85:38:2f:57:89:58:88:9d:5e:ec:79:fe:32:
                    3c:79:a9:62:aa:b6:9d:1e:1f:27:db:5f:fe:b5:54:
                    e0:b9:1c:bf:58:20:d3:87:d7:eb:9e:5f:8b:f0:c2:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A
            X509v3 Authority Key Identifier:
                keyid:C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:63:42:6a:21:b9:9a:87:ce:d5:9b:b5:22:77:99:c5:1f:
         8d:60:bf:32:0c:91:7a:31:d7:dc:53:e7:3f:ce:e1:a5:4b:65:
         b1:4f:91:5a:1a:39:d0:34:50:63:14:9d:d4:55:71:94:ef:a2:
         55:f8:51:fa:1f:ca:94:3a:32:e2:18:00:b5:15:1a:f5:a2:96:
         ac:cf:d1:a6:84:27:32:f2:68:dc:e0:c0:33:d8:c5:8d:f7:b3:
         ae:c6:6d:d5:74:be:3e:41:49:ee:52:52:3d:fd:b5:a8:d7:97:
         89:45:48:39:6b:15:dd:c2:4c:f3:f0:65:cb:d8:1a:ac:4f:61:
         47:32:14:c5:db:10:db:f4:38:81:71:d5:c3:39:c6:82:ea:f7:
         a4:52:16:45:66:1c:ca:7d:1d:20:e3:06:c5:02:ad:43:cd:9c:
         b0:aa:b0:6e:eb:64:77:50:e5:ed:64:59:85:e0:83:12:25:3c:
         11:24:d9:0a:e2:a4:9d:be:a4:cd:ba:19:81:c7:3d:72:44:80:
         f5:d7:da:81:d9:c3:3b:ec:dc:a2:dd:9e:3e:37:9a:08:ea:00:
         d9:27:a8:b6:8c:0f:5d:a2:37:14:75:2d:cf:bb:e5:6d:ac:ea:
         90:aa:0b:67:f9:ad:b3:54:c3:46:20:a0:1a:01:bc:a4:95:b2:
         b6:a2:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:39:18 2025 by rpki-client