Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.mft
File:                     5EHyzPLl0-sWN-747oA8tT3R6v4.mft (raw, json)
Hash identifier:          rdiaMx992Qm+E188tIGJg+k9zKUq5gZM9I+upYSokWY=
Subject key identifier:   7E:50:41:AE:16:85:D2:4E:DE:DE:00:1A:79:86:2B:2A:7E:FA:B7:88
Authority key identifier: E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
Certificate issuer:       /CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Certificate serial:       075B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.mft
Manifest number:          074B
Signing time:             Thu 26 May 2022 19:00:32 +0000
Manifest this update:     Thu 26 May 2022 19:00:32 +0000
Manifest next update:     Fri 27 May 2022 01:00:32 +0000
Files and hashes:         1: 5EHyzPLl0-sWN-747oA8tT3R6v4.crl (hash: rT8o2E5Z7kWukOYqszRBMj1104iQMYuB72Lx38vMKBQ=)
                          2: AV68fjoWs0t6lMbhH1uHAtzhpXA.roa (hash: 6LJ8VHD/BQ67GB5iK3dCWuk70cS1dji3VWra3jQAdHE=)
                          3: SZEozlJJdchkVyVyv4cRolVc9Hk.roa (hash: 4ckUHtHoQ2dMbOy6vVwoPySt3zdkRGvcDq1WZbwsYaY=)
                          4: cRhqWkXHiLNYJHgTT4j1hZ3tU6k.roa (hash: xZ3+/pnu1Nu1AEuDQZj0Wlv9XyCHS/l/AUSTU3NzANU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
        Validity
            Not Before: May 26 19:00:32 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7E5041AE1685D24EDEDE001A79862B2A7EFAB788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:59:ec:dd:fd:d6:e4:63:a9:38:68:a5:fc:
                    23:e1:0e:10:ef:3d:ef:8d:4a:c1:c7:0e:ef:f2:78:
                    d1:7c:ee:6a:96:d4:1b:f5:39:b7:fe:c2:82:0e:1a:
                    f0:58:ea:0b:f7:0a:b6:6b:4f:82:ed:24:ec:eb:7a:
                    57:5b:a9:19:8c:f2:88:9f:70:4d:72:16:1b:1b:6f:
                    20:b7:32:14:00:a9:6e:73:d1:ed:14:2c:18:16:c8:
                    cc:a5:12:96:1c:89:ad:3b:c4:d6:bc:ea:a0:4a:2b:
                    bc:25:99:f5:7a:d1:84:fd:86:94:53:a0:d5:2c:f2:
                    37:32:fb:79:f6:1c:4b:21:af:31:f3:fa:de:0d:01:
                    bc:0d:b2:c0:c3:ee:2e:35:89:b5:3b:6e:1a:8e:9a:
                    5c:41:3d:ca:bd:3b:bc:a4:e2:87:75:37:7e:98:ed:
                    8f:e3:22:37:73:5c:20:8d:35:db:f4:32:88:a7:3f:
                    66:9c:f0:7d:c2:4c:bd:e1:d7:af:ee:17:5c:ab:eb:
                    31:ec:3e:13:ac:af:fc:7d:88:52:8e:97:da:09:d3:
                    ef:17:f4:5a:e7:30:0f:5e:07:52:9d:5a:22:bb:19:
                    fb:a1:58:7f:26:70:e0:09:c1:4d:c5:98:26:b7:8b:
                    8f:6a:9c:19:8d:63:a8:3b:d4:cb:96:96:6c:5e:00:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:41:AE:16:85:D2:4E:DE:DE:00:1A:79:86:2B:2A:7E:FA:B7:88
            X509v3 Authority Key Identifier:
                keyid:E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0e:d1:ce:2e:cf:4a:13:ee:c0:88:45:4c:98:58:ff:cb:6d:
         65:9e:8b:de:71:7f:f4:a5:ce:b6:f9:95:a5:79:03:6c:9f:d8:
         d2:df:8c:29:df:b6:ed:c5:6b:e1:15:ad:e2:2c:4a:c3:76:56:
         97:cf:7d:5c:e3:c6:90:87:ae:2a:83:d8:eb:34:2a:42:74:06:
         fd:ba:35:42:d6:64:c0:d8:54:a6:df:35:00:10:89:63:a2:26:
         c4:c4:b0:d6:8e:27:5b:cb:ab:76:46:4e:f8:2f:75:05:f8:37:
         0c:0f:fe:52:71:6c:9a:c2:0f:98:07:e1:38:8f:68:3c:92:87:
         11:c8:a8:49:ef:a1:a5:0a:60:c4:eb:81:d9:bc:2a:c0:d0:26:
         5c:2f:29:61:e4:fe:1a:0e:a1:34:0f:ed:18:12:b4:07:b2:69:
         01:52:5b:b6:7f:fd:99:b0:fa:cc:5a:da:b5:49:e8:9f:74:13:
         eb:95:4c:64:18:15:5c:e3:33:da:5a:92:3e:66:1b:12:63:9e:
         b1:e9:92:b7:ea:b6:89:fa:a9:cc:41:84:aa:20:8f:7e:48:22:
         33:87:95:33:32:0a:21:69:49:ec:f7:07:dc:4e:98:35:8a:48:
         36:b3:30:27:56:a8:23:d7:29:9e:3a:85:e6:4f:f7:33:97:7b:
         c6:c6:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----