Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
File:                     J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft (raw, json)
Hash identifier:          ND+Vg5HJGtjkBNrV0+WYSfblEo5lSeWpX2s9eOoSv+M=
Subject key identifier:   7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
Authority key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55
Certificate issuer:       /CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
Certificate serial:       180A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
Manifest number:          180A
Signing time:             Sat 17 May 2025 17:38:11 +0000
Manifest this update:     Sat 17 May 2025 17:38:11 +0000
Manifest next update:     Sat 17 May 2025 23:38:11 +0000
Files and hashes:         1: J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl (hash: hu6mi2/XhIJTNjVeQX1KZkFeRdonP4n3kenjtS6JdMc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6154 (0x180a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
        Validity
            Not Before: May 17 17:38:11 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=7C4EC60D45C634A44F28CF2593604B9F0D738034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:da:f3:3d:08:08:c8:93:a8:23:8f:30:1f:
                    9c:9a:c2:d7:4c:9f:66:f5:91:39:61:51:b0:a4:ac:
                    d5:d9:d9:93:de:c6:01:c6:64:60:c8:6f:c3:b3:2f:
                    10:98:36:9e:b4:24:8e:8f:f9:a2:bb:e8:dd:d3:32:
                    ad:a9:a2:f5:58:b8:be:6a:42:34:a4:9c:d6:8d:95:
                    28:4a:04:d3:ff:29:98:37:d0:2a:80:18:f6:74:26:
                    77:59:66:32:57:b5:ea:c6:44:c0:6e:c4:8b:4a:b9:
                    fc:9c:d3:46:96:d3:aa:69:03:aa:4a:e5:69:2b:a3:
                    d6:63:6c:f8:4f:10:a7:96:9d:e9:0f:7a:dd:a2:d0:
                    ce:00:39:a5:ae:26:0d:a3:0a:12:1b:bc:15:1a:82:
                    7e:66:57:41:3d:64:3a:6a:33:89:59:2f:87:e5:50:
                    17:08:85:a3:db:dd:11:05:42:bb:e9:55:60:cd:de:
                    d9:d0:ba:76:bb:5d:38:6e:1a:33:c4:c3:6b:d5:cb:
                    14:e3:83:4f:ce:be:e9:5a:2b:29:7c:34:56:85:89:
                    43:a5:d6:9c:6b:74:ba:b2:0f:32:0b:5c:de:66:27:
                    fa:5c:58:50:64:a2:2b:f2:6c:9f:6f:78:dc:a2:ad:
                    51:84:d0:94:42:47:1f:54:38:ac:31:2d:28:c0:13:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:C6:0D:45:C6:34:A4:4F:28:CF:25:93:60:4B:9F:0D:73:80:34
            X509v3 Authority Key Identifier:
                keyid:27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:33:a3:7b:0e:e3:e8:ee:44:2b:b5:e4:6e:9f:29:39:82:
         9e:8b:a0:66:b7:3e:1d:0c:45:9f:eb:cf:47:40:9b:ef:c3:de:
         9a:30:a4:6e:7c:84:99:58:e3:c8:95:6a:8b:54:18:c8:68:e3:
         41:27:bd:59:49:5f:43:d3:e6:85:49:10:e2:b1:47:e7:b4:0d:
         8f:9e:26:b5:36:7f:b8:54:2b:28:3c:9e:87:ac:90:ee:fa:ee:
         62:7b:93:8d:b4:52:7f:ac:8a:85:8f:99:30:ed:89:df:38:0c:
         91:bb:dc:91:dc:6c:b4:15:f1:0c:50:d2:32:fa:2a:b1:e4:5e:
         1b:27:43:f7:77:82:b5:a7:05:f5:a8:9d:f3:c2:a5:91:88:48:
         62:04:5d:de:28:bf:70:b7:83:66:8d:8d:98:e3:fc:d3:4b:aa:
         fc:4b:62:c0:e8:4d:8b:77:cd:fd:a0:05:b0:c5:00:03:11:60:
         49:4b:d9:55:69:bd:fc:0f:e8:63:b9:df:6c:f0:bc:5b:3b:0c:
         60:5c:f3:57:98:b8:ba:de:2f:32:ef:69:8e:d6:3a:a4:43:f7:
         31:16:73:28:a0:b9:0d:b9:42:28:f5:45:49:14:3c:a8:69:8d:
         bc:1b:a9:56:5c:4d:d8:8d:9d:f8:58:3d:eb:5b:09:04:bc:b9:
         1e:0c:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:44:28 2025 by rpki-client