Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1537/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.mft
File:                     ZIZUqZsZFM6iqwhA_TyfZpQkIzc.mft (raw, json)
Hash identifier:          An2SE8QEJfXhE6iCuibzeQDl5Wlc4d/KzyJJnzrGUgQ=
Subject key identifier:   29:61:48:75:31:2F:AC:EF:AF:80:7D:2F:42:15:97:18:E0:DC:9B:F4
Authority key identifier: 64:86:54:A9:9B:19:14:CE:A2:AB:08:40:FD:3C:9F:66:94:24:23:37
Certificate issuer:       /CN=648654A99B1914CEA2AB0840FD3C9F6694242337
Certificate serial:       0489
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.mft
Manifest number:          0489
Signing time:             Thu 26 May 2022 18:59:42 +0000
Manifest this update:     Thu 26 May 2022 18:59:41 +0000
Manifest next update:     Fri 27 May 2022 00:59:41 +0000
Files and hashes:         1: ZIZUqZsZFM6iqwhA_TyfZpQkIzc.crl (hash: 9ETi8Li1FaeXjN7+FWdnnkFZX60ht08fKgcbqJntYP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648654A99B1914CEA2AB0840FD3C9F6694242337
        Validity
            Not Before: May 26 18:59:41 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=29614875312FACEFAF807D2F42159718E0DC9BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:98:54:4b:7c:32:41:40:e3:56:89:6e:17:
                    5f:94:99:60:88:59:f5:90:62:e8:60:86:f9:44:d8:
                    cf:a7:7a:a1:91:96:38:af:76:78:7d:8d:4d:00:e6:
                    83:51:76:52:39:cf:83:57:dd:03:f7:8f:3b:fb:ee:
                    b9:cc:83:19:51:8f:33:aa:49:fd:ac:f3:88:8c:e7:
                    2a:c4:47:39:36:12:98:54:2e:f8:ae:40:a5:48:17:
                    7a:79:0d:3a:45:ff:68:91:45:f1:57:ff:69:ff:f1:
                    82:0e:13:06:04:d5:c6:ab:b9:65:93:9d:76:ae:9f:
                    8c:ea:6a:26:d4:67:d4:2d:e2:98:0a:db:03:94:c3:
                    c6:11:33:1e:81:be:1c:b2:f1:db:18:9c:98:56:37:
                    7e:18:39:e0:4d:02:fc:84:1e:62:b3:d4:1b:6f:dd:
                    c9:3b:8d:0a:c5:91:a4:7a:84:1f:d2:75:2c:2a:85:
                    53:76:4a:1e:66:f2:e0:54:15:fc:c5:fa:c0:ee:f7:
                    10:30:55:d2:77:28:61:1a:b5:65:6e:7f:1b:bb:58:
                    fe:53:44:a6:d9:62:e8:d0:96:cc:53:e5:e8:c0:54:
                    c9:f2:1f:83:5c:e0:b2:bd:83:36:b2:4b:91:ef:8c:
                    56:be:e3:79:55:a2:93:81:a9:d6:a2:62:45:ad:ac:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:61:48:75:31:2F:AC:EF:AF:80:7D:2F:42:15:97:18:E0:DC:9B:F4
            X509v3 Authority Key Identifier:
                keyid:64:86:54:A9:9B:19:14:CE:A2:AB:08:40:FD:3C:9F:66:94:24:23:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:74:15:59:96:3f:26:7a:6d:24:88:38:f7:5c:99:c5:47:81:
         f3:c2:7a:54:d2:a4:4e:14:e1:78:9e:b8:8b:58:44:a9:38:a2:
         ce:d8:88:f6:b6:6b:98:0a:dd:32:e7:74:4a:3c:04:ad:37:27:
         7e:4c:d5:a2:eb:d5:44:54:33:51:4c:80:f4:32:d0:18:f7:4d:
         f9:24:f5:8c:1b:dd:11:20:11:0e:8e:82:32:be:2a:57:cc:33:
         7f:a9:b4:ed:0f:f5:21:e2:24:10:53:b4:59:d4:88:4c:78:f8:
         5f:50:38:6a:1f:3a:f5:e5:7a:ff:89:af:0c:2d:11:f7:2a:9e:
         2a:9e:0a:1e:af:18:43:e9:b2:70:ea:a1:86:f1:ae:7d:07:44:
         6c:46:53:cd:54:60:d3:ec:f6:2d:8f:c4:a7:ba:de:9b:ed:d8:
         8a:e6:67:d2:15:d6:37:cf:20:f8:c5:3e:ac:04:76:81:44:2b:
         9d:b7:ba:02:d9:f2:43:4f:ae:b3:eb:27:5e:1c:8c:7d:be:e8:
         18:c8:08:97:94:5b:f3:8c:cc:1f:6f:31:45:0f:17:6d:a1:e6:
         28:89:24:9e:41:2b:4b:0e:b2:86:36:97:f0:4c:84:ae:7a:0d:
         97:48:e7:c7:42:e3:29:c1:24:b7:67:86:14:89:92:49:05:36:
         6c:94:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----