Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
File:                     ZpmXJxYiITikWjnrC_qoFJaDQK4.mft (raw, json)
Hash identifier:          DYWySDQ2RcJIwaYGKWBXNo7hq4v96W3uu3mQAFrFkNI=
Subject key identifier:   67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Certificate issuer:       /CN=6699972716222138A45A39EB0BFAA814968340AE
Certificate serial:       062D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
Manifest number:          062D
Signing time:             Thu 03 Jul 2025 21:12:00 +0000
Manifest this update:     Thu 03 Jul 2025 21:12:00 +0000
Manifest next update:     Fri 04 Jul 2025 03:12:00 +0000
Files and hashes:         1: ZpmXJxYiITikWjnrC_qoFJaDQK4.crl (hash: ZIQPeAQ5s7qbTs69G8R9xNIhNDCwtXIN0j0mXOh2Rk0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE
        Validity
            Not Before: Jul  3 21:12:00 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=67114EE963B683F8CC94FE97BBEACE592E4020C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:4d:a1:bd:23:f1:5f:1f:47:b6:95:7b:04:
                    90:3c:3e:af:9e:a5:ab:24:d8:cb:8c:01:86:f3:c1:
                    27:ae:28:97:17:16:92:d2:ea:38:dd:11:28:19:d3:
                    a4:c2:43:b3:82:28:ad:ae:9f:0e:de:1d:81:9b:32:
                    04:87:a9:26:6f:5c:19:a8:fa:15:c7:a6:7a:3e:e9:
                    2d:c7:56:5f:e2:66:fa:a2:a3:ee:68:e2:f7:a9:7e:
                    af:3a:f3:b3:81:54:90:a4:30:64:5b:e5:23:61:4f:
                    45:cb:15:b3:e3:85:56:e8:ee:87:1a:9e:11:5f:a5:
                    8c:5f:0e:ab:9f:2d:a8:a1:57:3d:9f:99:fe:ef:53:
                    48:9d:58:bd:11:4f:7e:f1:d0:f8:3a:9b:e4:c6:ca:
                    0d:d7:d5:d3:46:10:de:0d:1b:2e:3f:3e:c2:57:f8:
                    5d:cc:56:b9:df:08:43:e0:f3:16:03:16:cf:8b:2b:
                    19:3e:ef:ef:24:59:dc:bc:79:2d:56:0d:fe:9d:03:
                    2e:47:2f:ea:37:5c:d2:39:df:95:7f:9e:13:63:93:
                    68:ff:64:78:c2:67:57:27:86:89:88:c2:eb:c7:55:
                    a2:72:78:a4:35:9c:a4:af:44:35:fd:e1:9e:b2:61:
                    ea:41:74:08:28:9b:62:62:2c:49:fa:14:20:dd:f7:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:11:4E:E9:63:B6:83:F8:CC:94:FE:97:BB:EA:CE:59:2E:40:20:C1
            X509v3 Authority Key Identifier:
                keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:79:60:25:20:8b:7b:60:ca:fc:f6:11:18:38:1c:09:4d:
         37:78:55:cd:e2:a2:de:b6:a0:67:5c:ed:61:b7:82:91:b0:bc:
         1f:ce:d6:d5:97:e0:c1:4f:8f:6e:57:fb:c9:9b:0c:2f:d4:9c:
         78:f2:23:2e:4f:b0:b1:90:3d:3d:61:5a:67:6d:24:33:72:73:
         c2:53:78:d6:b5:b5:b2:67:de:7d:b8:d7:0c:2f:4f:73:a3:9f:
         e5:03:37:5c:39:2c:57:6d:f0:cd:31:a9:fb:c5:3a:48:51:a1:
         92:3b:5c:fa:a4:b7:36:68:ed:c5:23:b2:b4:84:56:37:df:64:
         5d:1b:13:43:11:e5:fc:0d:8e:f6:dd:25:cb:35:3e:f7:23:e9:
         9f:5f:e5:0f:56:53:73:3a:fe:92:db:e4:18:dd:43:35:8a:b4:
         b6:99:11:da:76:18:d1:70:42:ef:14:df:91:31:ea:37:ee:38:
         70:de:31:05:21:0a:93:f1:5f:12:9b:b7:fd:54:72:00:45:c1:
         02:c2:a1:d2:60:f6:77:58:6c:15:1f:13:23:01:9e:93:d3:4c:
         5a:ef:19:b0:27:67:d1:8d:7d:90:02:cc:0a:f0:66:5b:fa:88:
         6a:92:af:2c:cd:55:5a:eb:11:19:32:08:ca:f9:cc:c9:9d:ae:
         32:47:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:12:35 2025 by rpki-client