Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/135/878TaiVMVoD0R7jDQMizZT-Nf0M.mft
File:                     878TaiVMVoD0R7jDQMizZT-Nf0M.mft (raw, json)
Hash identifier:          RVybFatINg+4ZVzMPyU+OUYI1S42CPPH1BFNrtg87xI=
Subject key identifier:   80:CA:05:39:FA:3D:6A:A0:8A:7A:C5:10:57:96:66:2D:4E:60:4D:2E
Authority key identifier: F3:BF:13:6A:25:4C:56:80:F4:47:B8:C3:40:C8:B3:65:3F:8D:7F:43
Certificate issuer:       /CN=F3BF136A254C5680F447B8C340C8B3653F8D7F43
Certificate serial:       1F33
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/878TaiVMVoD0R7jDQMizZT-Nf0M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/878TaiVMVoD0R7jDQMizZT-Nf0M.mft
Manifest number:          1F33
Signing time:             Thu 26 May 2022 19:56:57 +0000
Manifest this update:     Thu 26 May 2022 19:56:57 +0000
Manifest next update:     Fri 27 May 2022 01:56:57 +0000
Files and hashes:         1: 878TaiVMVoD0R7jDQMizZT-Nf0M.crl (hash: +8+++9OES5VuZn9z6/TtCPeDhgrGg+/rPMf9ohXsLOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7987 (0x1f33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3BF136A254C5680F447B8C340C8B3653F8D7F43
        Validity
            Not Before: May 26 19:56:57 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=80CA0539FA3D6AA08A7AC5105796662D4E604D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:0a:be:11:80:86:2a:ec:03:04:f9:b7:5d:
                    f8:d2:75:57:15:a8:32:f7:87:37:55:17:b4:ea:6f:
                    ef:ef:ca:60:18:e1:fb:39:c7:cc:98:6e:65:da:5c:
                    3e:30:b5:ed:e7:9a:91:eb:4b:5f:e4:41:e0:5f:ce:
                    54:9a:86:13:b6:47:4a:fe:d8:cf:40:03:9f:6e:48:
                    d6:f4:25:37:c6:30:dc:05:c1:77:0a:77:01:f5:4f:
                    36:1d:a1:3b:04:b6:a1:b6:91:1f:83:06:a1:06:db:
                    6b:11:c2:27:74:19:1a:0b:ac:b7:63:b5:d9:49:08:
                    64:f8:b7:3b:60:e0:b4:f5:4d:d0:7f:90:66:8b:ff:
                    7e:69:3b:6a:90:4f:52:c7:db:16:bb:d0:02:df:91:
                    ad:03:45:e8:38:e4:49:71:c1:91:07:e2:7d:be:51:
                    4b:4b:a1:a3:31:58:15:0b:f0:62:0c:54:7a:7a:29:
                    34:c1:b1:ce:13:8f:32:67:18:5b:12:cb:3e:f9:aa:
                    67:90:01:54:3f:f3:09:2d:1b:aa:78:49:9b:2d:c4:
                    3a:99:05:7d:ee:91:a5:d9:59:db:57:1a:47:39:1f:
                    19:21:81:8d:25:9d:8a:99:7c:bb:3a:b3:8d:c2:38:
                    e6:03:38:d4:f3:33:ce:74:17:b8:c8:0d:b0:5a:66:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CA:05:39:FA:3D:6A:A0:8A:7A:C5:10:57:96:66:2D:4E:60:4D:2E
            X509v3 Authority Key Identifier:
                keyid:F3:BF:13:6A:25:4C:56:80:F4:47:B8:C3:40:C8:B3:65:3F:8D:7F:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/878TaiVMVoD0R7jDQMizZT-Nf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/878TaiVMVoD0R7jDQMizZT-Nf0M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/878TaiVMVoD0R7jDQMizZT-Nf0M.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:cd:9f:27:f2:62:54:03:f3:ea:73:5a:00:42:56:f6:22:9e:
         61:2e:53:a6:8f:ee:b5:79:9d:a7:32:c2:27:a3:73:0c:56:58:
         5e:7b:28:64:b1:15:63:ee:cf:32:01:fa:39:6c:af:c1:94:c1:
         79:c2:f0:98:f8:ba:2e:e3:96:5a:cb:e9:f8:09:57:69:d3:73:
         e0:18:18:33:cb:3f:b9:2e:17:55:f9:33:96:9e:57:82:cb:80:
         84:b5:ab:9c:60:e2:fa:a3:5c:ea:40:cb:7a:cf:fc:d2:18:0a:
         4d:68:61:b0:25:57:24:27:6e:c4:26:bc:f7:2c:69:07:ab:07:
         6d:79:05:1a:bb:ba:36:60:22:78:8c:0b:80:f5:cb:aa:97:94:
         ed:5c:85:7b:68:ca:9f:cf:0b:7f:0b:05:e0:61:48:bf:ea:a9:
         ba:be:c5:7a:0d:44:ca:e6:fc:6b:84:12:9b:d2:a1:a4:1f:87:
         ba:28:3c:e4:61:e6:7d:2f:67:25:a3:4e:d5:81:b1:b3:6c:5d:
         c0:79:06:da:1c:8b:b0:ca:c7:21:6d:11:bd:66:08:c4:5d:f4:
         5a:03:85:f1:43:86:f9:e0:da:c8:b4:cc:53:19:e4:eb:99:e1:
         f5:dc:87:99:2a:0b:e2:c0:6a:68:b8:00:6b:8f:d3:31:28:dd:
         b7:84:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----