Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft
File:                     pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft (raw, json)
Hash identifier:          Kf7F3rAp8GZgokiVmkKRUdZKtHuPapq68qRW3w9DbVA=
Subject key identifier:   62:DC:CB:76:16:BF:89:EC:BF:12:6E:8C:E6:13:88:BA:90:99:20:C3
Authority key identifier: A5:60:15:AF:58:82:A4:5E:A9:1D:BE:06:9B:8F:80:DD:CD:B3:B7:AD
Certificate issuer:       /CN=A56015AF5882A45EA91DBE069B8F80DDCDB3B7AD
Certificate serial:       1DA5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pWAVr1iCpF6pHb4Gm4-A3c2zt60.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft
Manifest number:          1DA5
Signing time:             Sat 26 Apr 2025 06:37:34 +0000
Manifest this update:     Sat 26 Apr 2025 06:37:34 +0000
Manifest next update:     Sat 26 Apr 2025 12:37:34 +0000
Files and hashes:         1: pWAVr1iCpF6pHb4Gm4-A3c2zt60.crl (hash: N2BDdeATWl9/gC+aQKy5gaZw1jiFswy+mEuH4KQJWQs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7589 (0x1da5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56015AF5882A45EA91DBE069B8F80DDCDB3B7AD
        Validity
            Not Before: Apr 26 06:37:34 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=62DCCB7616BF89ECBF126E8CE61388BA909920C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f2:d2:8c:c6:4e:44:c8:48:d9:c0:ea:cc:53:
                    de:4d:c1:66:52:01:a8:e7:c8:ea:b6:e4:4e:c3:a1:
                    c0:28:31:9a:9f:bc:b1:ff:50:7e:3f:18:13:8a:cf:
                    0a:a3:39:da:23:45:5d:57:7d:d9:c4:7d:ad:35:ac:
                    d5:88:1b:d2:a8:96:95:5b:08:d2:da:4d:fe:7e:cd:
                    4d:35:c5:46:34:77:d3:94:0c:31:2e:45:8e:cf:b4:
                    d8:30:1c:6b:18:04:fa:ff:b9:e8:d1:ac:2e:ea:92:
                    87:09:df:74:8d:c9:98:40:a8:43:d1:47:ce:75:48:
                    d9:a8:ed:fa:7d:59:04:84:09:61:f5:59:81:d8:f2:
                    15:61:f8:39:c3:9a:5d:5f:d0:dd:0c:15:ce:e0:1c:
                    c2:bf:75:59:27:33:28:da:5a:c3:9d:49:fa:4c:0a:
                    a1:92:b4:db:c9:eb:17:da:4b:06:3c:5d:7c:69:d7:
                    d4:b7:67:13:44:f7:da:dc:7a:dd:3b:45:c1:ed:e6:
                    dd:4d:ca:c3:43:d0:ac:b4:17:b3:1b:89:1a:44:a9:
                    0c:27:1a:0f:89:2b:80:ab:64:ac:ff:fa:93:b1:7c:
                    3a:44:04:fe:3c:eb:1e:69:c0:46:07:03:dd:26:0d:
                    ef:c8:67:e8:f9:fe:69:20:b3:59:8c:8e:3a:dc:cb:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DC:CB:76:16:BF:89:EC:BF:12:6E:8C:E6:13:88:BA:90:99:20:C3
            X509v3 Authority Key Identifier:
                keyid:A5:60:15:AF:58:82:A4:5E:A9:1D:BE:06:9B:8F:80:DD:CD:B3:B7:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pWAVr1iCpF6pHb4Gm4-A3c2zt60.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/pWAVr1iCpF6pHb4Gm4-A3c2zt60.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:2b:32:5f:d6:2f:50:52:ef:4a:1d:dd:fd:42:e3:cb:0e:
         f4:de:0f:ff:21:a6:65:76:86:d3:05:4d:9d:e8:91:16:78:ba:
         cd:05:c5:e2:87:dd:ae:f0:4d:38:2b:14:af:c3:04:f0:15:14:
         b5:f4:0b:00:e6:46:48:68:34:b8:65:e1:74:31:72:b5:a3:b5:
         dc:d6:ec:6f:f2:42:f1:77:2c:7e:58:a1:31:6c:1c:0c:8e:7d:
         1a:0e:7b:1b:ef:21:a1:c4:c0:45:95:b2:85:74:72:fa:5d:a8:
         d2:f4:27:46:9c:ec:a7:a5:87:08:97:e5:6d:b8:24:60:a6:ec:
         cd:2b:2c:c9:d9:6d:33:8c:bf:49:8d:a4:66:37:ce:e1:ce:5a:
         7c:92:10:47:84:c9:7f:0d:36:87:49:09:21:5e:5a:3c:48:7d:
         f5:04:8c:8b:0a:dd:6d:a7:86:15:32:52:46:06:a4:47:a9:42:
         25:5a:24:9e:71:41:41:9b:50:9e:c1:06:19:50:35:e0:0d:4e:
         97:ca:fc:fb:f9:18:a0:9f:5d:d8:55:60:ca:de:14:eb:28:8b:
         59:16:e6:bd:de:1c:43:8e:57:dc:70:d4:a3:44:8e:78:cc:97:
         16:d4:06:5c:87:99:c6:f1:48:33:61:78:0d:d4:3b:8e:93:8a:
         40:87:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:34 2025 by rpki-client