Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
File:                     YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft (raw, json)
Hash identifier:          XBz6lel5Rv0tfugiX9nS9l65bRkZZiJrkIJRmUOTUMI=
Subject key identifier:   38:4F:8B:57:F3:79:2E:F1:89:B3:64:DA:F5:EE:B9:E9:6F:11:34:A2
Authority key identifier: 61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF
Certificate issuer:       /CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF
Certificate serial:       0566
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
Manifest number:          0566
Signing time:             Mon 14 Apr 2025 17:37:14 +0000
Manifest this update:     Mon 14 Apr 2025 17:37:14 +0000
Manifest next update:     Mon 14 Apr 2025 23:37:14 +0000
Files and hashes:         1: YUdo14zf1NPTMMvhK6DxuTJ6rM8.crl (hash: EWASqnULSfUnl1ICmB9vZIPfyGMrxMevMXJPVXPzqBY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF
        Validity
            Not Before: Apr 14 17:37:14 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=384F8B57F3792EF189B364DAF5EEB9E96F1134A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:a9:c8:bf:c8:78:3b:7d:72:48:78:c7:b6:
                    6c:ee:be:74:85:cd:33:19:8c:69:40:3f:d5:5e:c5:
                    09:58:80:55:2b:55:72:aa:1f:3d:99:3a:27:1c:9f:
                    cd:bb:2b:50:6b:e4:ad:c4:c3:fb:79:f3:97:5f:43:
                    4b:d0:ce:e1:40:a1:ea:2e:25:76:16:85:3b:2f:64:
                    e7:9e:52:55:03:d6:0c:2d:71:98:91:67:bc:2b:50:
                    1e:f0:d3:f5:5e:dd:ce:f5:2f:20:34:5d:b2:4d:66:
                    eb:db:54:d0:9c:ca:99:d8:dd:2f:72:bb:0f:cc:16:
                    8e:bb:3c:33:7f:ff:99:82:d2:86:a5:55:ee:ff:08:
                    f2:91:f3:fb:08:91:60:de:ae:6e:bd:3d:91:dd:01:
                    ac:d5:fd:dc:b3:2c:04:b1:d5:e2:64:1e:e3:13:72:
                    89:4a:ef:3a:51:08:37:8e:8b:19:d9:3f:99:e8:aa:
                    1d:a2:1d:93:84:c9:46:b2:51:e6:5c:13:d9:9e:e8:
                    51:18:90:c8:a8:fa:96:57:84:e4:40:5b:88:2c:9b:
                    84:4d:85:31:44:73:32:94:5f:94:90:87:28:1c:4a:
                    2d:10:a2:be:9c:32:5e:47:08:1a:05:9b:ea:5f:ac:
                    49:b9:19:c0:7a:c9:e9:62:e4:14:e8:4a:ad:7b:aa:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:8B:57:F3:79:2E:F1:89:B3:64:DA:F5:EE:B9:E9:6F:11:34:A2
            X509v3 Authority Key Identifier:
                keyid:61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:dc:ac:e9:26:2f:25:ab:bd:d3:74:cf:2a:d4:b2:22:d0:
         7f:dc:f9:0c:e8:86:09:ff:7d:7a:f3:35:58:73:76:02:d3:29:
         c6:3f:85:f5:1a:26:a6:ba:e5:2b:53:96:7c:c3:94:a5:1e:0f:
         f3:aa:43:c8:55:8b:bc:e4:0d:df:08:30:4f:f5:80:c2:b3:84:
         3d:02:2f:2e:b6:1b:e7:68:49:ab:42:24:60:fc:b5:55:16:ac:
         0c:31:ec:20:45:24:d1:25:af:f0:c8:6c:e5:1c:1a:1f:54:39:
         31:11:78:bf:59:4f:15:8e:60:49:07:55:4f:41:53:2a:18:2c:
         16:80:e3:6f:f9:c2:14:ba:94:39:01:54:b5:04:54:2e:e7:6b:
         e9:24:14:3f:30:fa:d8:36:70:92:bc:42:27:9e:20:c1:95:b3:
         94:71:23:eb:5a:0d:5b:5c:ed:4f:72:61:74:25:7f:21:4c:11:
         06:af:4c:ab:8d:cd:22:7d:5c:a4:dd:08:bf:4b:9d:8e:4e:30:
         f7:40:19:d5:15:06:cf:40:e1:d8:1e:21:f8:89:e2:1b:87:36:
         15:19:85:ae:44:ee:32:99:ff:7c:f9:e7:d9:5e:1b:8b:1b:82:
         3d:a8:d1:b2:7e:13:0d:df:96:f7:f7:8a:56:0a:62:fd:66:67:
         a0:8a:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:17:35 2025 by rpki-client