Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
File:                     VyVNn31j60IRhMWNAuBBlwWaag4.mft (raw, json)
Hash identifier:          B4rQSqzGDWvIsHs7hrtAOLVPeqaudTHaPaLgd2PYwyo=
Subject key identifier:   8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
Authority key identifier: 57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E
Certificate issuer:       /CN=57254D9F7D63EB421184C58D02E04197059A6A0E
Certificate serial:       0861
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
Manifest number:          0861
Signing time:             Sat 17 May 2025 22:43:13 +0000
Manifest this update:     Sat 17 May 2025 22:43:13 +0000
Manifest next update:     Sun 18 May 2025 04:43:13 +0000
Files and hashes:         1: VyVNn31j60IRhMWNAuBBlwWaag4.crl (hash: 4lo4SyzE3lzc7jyWP2vT2ZSA2ntTx3eTUKc9iEb1wTE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57254D9F7D63EB421184C58D02E04197059A6A0E
        Validity
            Not Before: May 17 22:43:13 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=8C0973127E8D45EBCEC8F7DEB61FDBF61CD5E2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:a3:56:2e:72:20:0b:b8:87:bc:20:2a:f8:
                    e5:6a:81:f5:dc:d9:16:77:cd:f1:1d:03:a8:a6:59:
                    1f:7c:4c:0c:9e:1e:dc:9b:47:ef:a3:69:b4:8e:16:
                    2a:db:ab:2f:da:c9:f5:3a:8a:a9:43:f8:d7:59:76:
                    5d:0b:e5:83:af:e0:08:04:9a:51:ff:2e:78:64:cc:
                    12:f4:7f:f7:d8:01:11:8b:51:87:8a:5c:ca:a9:41:
                    5c:f2:36:ce:07:4a:2d:88:1d:64:d6:53:6d:0f:4d:
                    fb:70:e9:17:c4:e9:b6:ac:39:77:b0:64:45:53:66:
                    25:19:f8:c5:35:83:2c:7b:4b:83:ea:98:74:03:a0:
                    a9:cf:08:ba:47:6d:17:fa:56:a8:eb:f8:fd:2d:e6:
                    cf:18:49:fa:7f:2e:1b:74:23:74:37:44:a7:61:77:
                    55:91:7a:1c:41:f1:df:61:c1:1d:47:9f:21:18:6f:
                    ca:77:44:06:8f:0e:89:d2:67:12:e8:d0:b2:b2:62:
                    8f:49:21:65:cc:64:3f:8c:1f:79:f0:6f:8b:dd:94:
                    63:e2:d9:04:bc:42:fb:5a:38:c6:dd:33:00:b9:30:
                    07:15:70:5f:4a:0a:a8:d9:a6:dc:a5:98:5e:32:d1:
                    45:3a:96:e9:2e:d0:63:af:66:ca:3e:83:d0:53:86:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:73:12:7E:8D:45:EB:CE:C8:F7:DE:B6:1F:DB:F6:1C:D5:E2:AB
            X509v3 Authority Key Identifier:
                keyid:57:25:4D:9F:7D:63:EB:42:11:84:C5:8D:02:E0:41:97:05:9A:6A:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VyVNn31j60IRhMWNAuBBlwWaag4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/VyVNn31j60IRhMWNAuBBlwWaag4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:85:2a:34:d5:de:25:37:0f:2b:dd:ad:ce:08:84:de:69:76:
         a9:cb:b0:7f:ae:41:bf:c0:9e:0c:95:5a:63:aa:a5:6b:0f:35:
         9b:21:d7:77:06:b4:bb:61:08:0e:8b:9e:eb:67:c2:1f:75:b5:
         a6:1b:95:b2:06:71:de:28:93:54:fc:31:11:47:3e:7b:12:38:
         ff:78:17:5e:66:b7:a2:bb:f4:8a:06:3f:8c:b5:b3:37:83:a3:
         e5:74:0a:d0:86:24:b0:85:f8:d6:9d:76:6f:82:24:66:68:c7:
         e6:c3:5d:bd:e4:ac:6b:e0:7b:c2:0b:40:8a:88:39:86:97:a8:
         4e:4f:cb:8a:6f:f4:53:7c:26:b6:0a:8c:6a:1e:db:a9:ca:50:
         cc:1d:c6:30:5b:9c:05:3c:af:95:93:a5:8f:7f:11:50:82:55:
         4f:91:90:07:2a:d1:fe:f1:c8:b6:cb:d5:58:8d:e1:56:3b:e4:
         44:c2:64:b3:b0:c1:86:28:12:f8:05:4b:cd:2f:fb:76:d5:43:
         a1:e5:57:88:28:5a:fd:f2:b2:42:bc:b3:8c:62:5b:ba:d7:da:
         07:59:90:5c:ce:e6:c7:bf:37:fc:02:04:43:23:6d:6e:41:d3:
         e3:73:19:1d:51:96:d5:eb:b0:b1:e9:df:b5:00:b2:7a:50:8d:
         de:f5:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:52:12 2025 by rpki-client