Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/tC6f9Ew4_gQPyBsYwGah1284pUM.mft
File:                     tC6f9Ew4_gQPyBsYwGah1284pUM.mft (raw, json)
Hash identifier:          W07Lm9Xfzz5Tm/gfkCvFbIRuFYzFUMPDRqnNcpCvv18=
Subject key identifier:   A1:CF:BD:2B:7B:03:91:A3:7E:B6:F4:0F:FF:85:F0:83:0D:17:DD:14
Authority key identifier: B4:2E:9F:F4:4C:38:FE:04:0F:C8:1B:18:C0:66:A1:D7:6F:38:A5:43
Certificate issuer:       /CN=B42E9FF44C38FE040FC81B18C066A1D76F38A543
Certificate serial:       0748
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tC6f9Ew4_gQPyBsYwGah1284pUM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/tC6f9Ew4_gQPyBsYwGah1284pUM.mft
Manifest number:          0746
Signing time:             Thu 26 May 2022 19:55:15 +0000
Manifest this update:     Thu 26 May 2022 19:55:15 +0000
Manifest next update:     Fri 27 May 2022 01:55:15 +0000
Files and hashes:         1: FqpiYFY6vUdZYkppRf5qzab5S4k.roa (hash: YXhPqNSyCUZt1XGlt9urnC4LMAKW/zL8nVcpQ3j9Dyo=)
                          2: G_v9hsWsNcjFaV54FL66EUqiqvc.roa (hash: 22OzS0F0+dDNzA+eMlDxG7D9tr2iXg8MISbnXF1VX/k=)
                          3: tC6f9Ew4_gQPyBsYwGah1284pUM.crl (hash: yOq/+avepxnNeEqMKFihm0PzaWUvVNpYu9NJ/gOB3og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B42E9FF44C38FE040FC81B18C066A1D76F38A543
        Validity
            Not Before: May 26 19:55:15 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=A1CFBD2B7B0391A37EB6F40FFF85F0830D17DD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:a5:7a:b4:2f:5e:22:48:f3:d9:d3:3f:de:
                    65:e3:6f:a4:9e:be:c0:ce:a5:1d:91:c2:2f:ea:1d:
                    66:1c:2d:e2:5a:96:ad:d5:8d:0a:02:73:ac:7e:d7:
                    1a:55:aa:55:ed:0f:ca:73:5e:c9:21:25:6d:a5:3c:
                    d1:9e:7d:20:5a:04:1b:d7:a5:1e:90:fc:1f:08:c8:
                    62:b2:e5:a5:46:6c:47:5a:a6:96:46:7b:86:80:16:
                    ab:f6:45:81:9d:4a:52:07:c6:5f:68:78:d0:b6:fb:
                    ba:39:e3:39:24:71:b3:d1:c6:9d:5d:41:12:aa:e7:
                    78:84:d1:b9:bc:63:46:9d:23:33:20:0f:94:41:de:
                    17:6c:a7:28:2d:b1:9d:54:30:5a:89:96:cb:36:26:
                    d2:82:d3:f8:28:de:0b:95:85:0b:bf:b1:bd:90:40:
                    04:52:9b:f7:c4:b4:90:cb:65:24:7b:46:fc:62:77:
                    5f:e8:fe:98:78:81:3e:85:79:19:6e:64:15:48:44:
                    7e:86:ad:38:69:9f:8f:03:e5:e1:29:92:9f:6a:07:
                    bf:8c:70:04:bd:e5:aa:d8:00:8d:52:3d:c2:32:73:
                    46:7e:3b:0f:67:54:bb:58:64:b1:14:0a:ee:33:c2:
                    ba:e5:2e:60:5f:8f:88:28:47:f8:2e:1e:39:c2:f8:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CF:BD:2B:7B:03:91:A3:7E:B6:F4:0F:FF:85:F0:83:0D:17:DD:14
            X509v3 Authority Key Identifier:
                keyid:B4:2E:9F:F4:4C:38:FE:04:0F:C8:1B:18:C0:66:A1:D7:6F:38:A5:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/tC6f9Ew4_gQPyBsYwGah1284pUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tC6f9Ew4_gQPyBsYwGah1284pUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/tC6f9Ew4_gQPyBsYwGah1284pUM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:04:94:ba:44:78:e6:b3:8c:44:a3:21:45:5f:c8:49:5f:ac:
         99:97:10:f4:b2:32:7a:78:b6:7c:d3:b6:77:6b:35:28:b2:c3:
         75:4a:d0:93:59:91:e2:d4:46:3e:a6:26:0c:24:5f:ee:24:bd:
         a3:e4:ed:b7:10:10:33:7e:0e:6d:c5:be:fb:dc:c1:f2:b0:89:
         44:71:89:cd:b4:4e:90:b3:4c:c2:34:85:6b:1c:ab:94:50:d4:
         68:7a:89:9f:da:95:71:0d:9a:91:11:d3:13:a9:95:f9:2f:36:
         00:89:53:37:1e:91:b8:aa:45:cc:03:74:f5:22:b7:64:95:a8:
         8f:ab:46:25:f9:1f:45:50:18:1d:55:94:a6:1a:f2:5c:55:08:
         db:7a:88:f9:64:cf:99:79:e1:ec:7a:b0:8c:1b:db:2e:50:56:
         9f:38:c4:95:e5:15:85:4a:90:e5:24:f2:71:d2:6a:0a:2a:e6:
         a9:fb:fd:41:24:6e:3f:48:37:7f:a5:18:4e:05:d7:39:7e:43:
         65:bd:7d:05:94:0e:2b:3e:09:4e:94:e9:58:79:6f:be:70:69:
         0e:45:9b:a0:4b:9e:4f:bd:d6:71:90:bc:df:d0:7a:8f:fd:5d:
         18:b1:a9:fb:41:53:33:2e:0d:4b:2f:d4:00:08:4f:44:bb:f2:
         47:44:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----