Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft
File:                     gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft (raw, json)
Hash identifier:          VMoNTo6eKRtfmwicSH8wnBQiSspt/30h4TATG2aByeU=
Subject key identifier:   D2:77:13:4F:DA:51:59:E8:5B:FC:4E:E9:F3:F1:4A:03:F6:9A:7C:46
Authority key identifier: 81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Certificate issuer:       /CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Certificate serial:       075E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft
Manifest number:          0758
Signing time:             Thu 26 May 2022 19:27:07 +0000
Manifest this update:     Thu 26 May 2022 19:27:07 +0000
Manifest next update:     Fri 27 May 2022 01:27:07 +0000
Files and hashes:         1: 8a8Y8qqggNRxFQnOIQzJoUWE9Bw.roa (hash: xkzvh/hn6wXpK4gF2URij5BaTl2H/3vzguGIwSxzhNw=)
                          2: R-xN1ZITWLwA2DFUOU_wsZmUBGE.roa (hash: /ZoztxuHd6BKRIUxOLfo99jwzjJbniFfbajGtCBQ3HU=)
                          3: VChtSAWZerfm1oUcpZ8O9Jb7-x4.roa (hash: /nKQKpW1draS34OmQBnxGHS2Qmu53qqdI1+r90WAbZ8=)
                          4: WF0r1gQ9lMi-hZYmKFVe3HJKwXc.roa (hash: lvXLLIU143ce+zu4fAM1QYY2NVSEQay38vXyJIIkVjg=)
                          5: gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.crl (hash: oO5TcU8o3aa9Z6gqrlD2mCg6vzIlBxgjCYTJCyH9E7U=)
                          6: jDzQrUMpKeFVINZvTEFZmJdYuMk.roa (hash: vlv8FnqKxbZKx3z258wlsFt1g5bYbja52x+7H6UdkOo=)
                          7: wEDB4hvITO80yTKh-vhuAidpyQs.roa (hash: 9Rt0R7h7M20rTfdgIBOnX4Y/hq8dgI4SWKoID9i2+AM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
        Validity
            Not Before: May 26 19:27:07 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=D277134FDA5159E85BFC4EE9F3F14A03F69A7C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:95:d6:41:ed:3c:64:0b:c6:6d:1b:bb:e3:
                    1e:e0:e9:b4:54:6e:4f:3a:f4:de:a8:43:e0:54:62:
                    f6:6c:f9:01:ad:f0:a6:72:37:8e:c8:68:92:34:3f:
                    0f:8a:bd:27:29:65:70:6a:15:6f:bf:68:ee:3e:ff:
                    c8:76:ed:68:06:a1:cd:42:86:4d:7b:4d:d9:aa:12:
                    f6:e4:86:8c:f4:fb:11:14:1d:c8:0d:24:ff:45:78:
                    3f:dd:b4:04:f4:ad:06:05:40:46:7c:87:69:bc:09:
                    0a:79:17:b6:f3:13:e3:1d:af:c5:04:2c:84:7a:a7:
                    d8:b0:9b:08:95:a9:dc:e4:53:d9:43:32:1b:fe:c3:
                    b3:ea:7c:b7:5a:da:3e:cd:18:00:8e:8a:ab:df:84:
                    58:94:ca:15:0a:65:16:90:07:23:eb:cf:a8:8a:67:
                    fe:12:7b:fe:a2:f2:04:18:be:e8:d4:08:70:44:08:
                    1c:29:3b:41:97:ab:3f:e2:ef:c1:9d:fe:8f:de:e7:
                    28:6e:ba:94:4d:b9:d5:d0:7f:d4:16:3d:e8:ba:ca:
                    31:94:85:0d:24:ea:e2:af:f7:2d:03:e7:aa:dc:9f:
                    36:15:42:50:98:5f:9c:b0:c5:fa:38:2c:c2:89:2f:
                    7e:68:5d:ad:8f:69:e1:ea:7c:7c:97:8c:3a:7c:13:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:13:4F:DA:51:59:E8:5B:FC:4E:E9:F3:F1:4A:03:F6:9A:7C:46
            X509v3 Authority Key Identifier:
                keyid:81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c6:f2:6a:01:ed:e6:ec:db:bd:73:90:e2:04:6a:c9:71:40:
         a1:55:29:30:7d:87:aa:b0:87:cb:ee:af:1f:77:a6:4e:04:d5:
         74:4b:77:24:5d:04:3d:1e:c3:98:fa:60:d7:f2:ab:00:56:1a:
         2b:cf:c3:63:00:14:08:0f:e6:a3:61:46:d0:6e:b2:80:87:99:
         08:ab:38:75:8b:ca:b3:fd:23:0e:85:fe:df:09:92:26:61:38:
         a8:cc:6d:ba:e1:8c:0f:ca:b0:2f:2e:cf:a7:41:05:29:74:fc:
         34:e2:a6:2e:0f:e7:bd:e5:51:64:6f:9c:0d:bb:61:5b:0d:fa:
         87:b2:09:39:18:ea:e0:86:8d:16:f9:7c:19:53:4e:b0:cb:ff:
         53:ff:59:d0:4e:7c:67:c3:cd:a7:f3:3d:b4:72:4f:03:ca:2f:
         77:f6:c7:d5:78:b9:84:dc:04:56:28:f3:86:f5:2d:8b:c6:88:
         1a:d6:30:fb:f2:06:4f:54:4c:e1:74:04:5c:4e:6f:9b:b0:ca:
         87:1a:83:1a:7d:cc:e1:e6:e5:6b:53:5d:44:7b:d1:36:c6:d3:
         cb:dc:92:e4:76:d4:88:d5:c7:92:b6:b7:33:ae:74:74:fb:1b:
         d5:7e:ca:16:28:cb:86:aa:1b:04:7c:f2:0d:4a:d7:20:e9:8f:
         59:2d:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----