Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2457/lvIE0t8rCXiwXe94k6RbLIWAww4.mft
File:                     lvIE0t8rCXiwXe94k6RbLIWAww4.mft (raw, json)
Hash identifier:          d4Q5aClsO5PjB3ViKxIuZCEhm5Zq2yQJByz0l7OURXc=
Subject key identifier:   50:AF:82:3B:73:6B:25:66:93:B3:C1:28:FF:92:A2:47:58:D2:22:52
Authority key identifier: 96:F2:04:D2:DF:2B:09:78:B0:5D:EF:78:93:A4:5B:2C:85:80:C3:0E
Certificate issuer:       /CN=96F204D2DF2B0978B05DEF7893A45B2C8580C30E
Certificate serial:       073A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lvIE0t8rCXiwXe94k6RbLIWAww4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/lvIE0t8rCXiwXe94k6RbLIWAww4.mft
Manifest number:          073A
Signing time:             Thu 26 May 2022 18:59:20 +0000
Manifest this update:     Thu 26 May 2022 18:59:19 +0000
Manifest next update:     Fri 27 May 2022 00:59:19 +0000
Files and hashes:         1: lvIE0t8rCXiwXe94k6RbLIWAww4.crl (hash: 5AkPlm9RJG+qbAv7kRvuiz0FeZOz6zSlK3WF4LSoZV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F204D2DF2B0978B05DEF7893A45B2C8580C30E
        Validity
            Not Before: May 26 18:59:19 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=50AF823B736B256693B3C128FF92A24758D22252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:b6:69:63:26:aa:a9:ea:89:18:5f:8a:b6:
                    90:99:16:08:17:7d:73:4b:d4:61:d8:2a:f7:72:86:
                    9c:92:f6:0d:a0:33:e2:1b:ad:43:c3:91:c1:0b:5b:
                    ea:d4:6b:a8:40:f3:33:cb:18:df:1d:8f:66:1c:9c:
                    32:3e:ca:11:51:0a:8a:e9:e9:67:dc:31:95:58:7f:
                    da:72:8f:75:55:da:a3:fc:04:8b:99:5e:ab:0c:07:
                    5c:15:d1:d4:3f:bb:41:cc:6b:80:c6:8d:32:bf:b0:
                    8e:6d:85:04:cb:56:97:7c:44:1c:87:6d:76:a5:51:
                    a2:a7:5a:22:51:9a:e6:b8:87:0f:58:57:cf:dd:24:
                    5d:34:b6:ff:4e:9e:0d:a5:68:65:2d:83:64:e5:87:
                    62:8a:4d:f4:3d:0d:2f:46:e8:78:92:b9:86:bf:6c:
                    0e:60:a2:31:5e:e8:d6:91:50:70:a3:56:5d:a6:62:
                    8a:f7:ca:44:6b:02:2c:79:71:23:b4:f7:3f:f9:c9:
                    59:8b:ab:8f:61:4d:16:6f:7f:27:e0:1a:6b:91:15:
                    6f:ce:52:b6:19:07:5c:6d:77:d3:d8:16:a3:70:05:
                    e0:06:ba:13:6c:15:0b:31:40:71:e0:80:e3:69:3e:
                    f5:42:29:c8:53:51:d9:fa:2d:e3:35:94:0c:ef:2d:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AF:82:3B:73:6B:25:66:93:B3:C1:28:FF:92:A2:47:58:D2:22:52
            X509v3 Authority Key Identifier:
                keyid:96:F2:04:D2:DF:2B:09:78:B0:5D:EF:78:93:A4:5B:2C:85:80:C3:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/lvIE0t8rCXiwXe94k6RbLIWAww4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lvIE0t8rCXiwXe94k6RbLIWAww4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/lvIE0t8rCXiwXe94k6RbLIWAww4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:30:38:e9:a0:4e:eb:92:b7:86:2b:77:5f:a7:3b:eb:ab:bd:
         87:bc:98:f4:01:a2:16:0d:2c:18:94:1e:07:03:68:b8:bd:c4:
         63:e1:09:e4:bf:7d:3d:0b:81:e8:d2:3e:63:6f:88:a2:82:76:
         04:f8:64:4d:ae:60:e4:52:5a:e9:4c:d0:a4:47:62:7b:9e:d2:
         af:ba:e9:24:af:00:2b:30:d6:7e:5f:75:30:33:f9:6c:92:bc:
         80:d2:7e:4b:b4:12:f4:f4:dc:82:a4:1e:49:ab:cb:ac:4a:21:
         12:9d:7c:bb:48:97:fa:7b:ca:3e:2f:23:3a:d8:2e:b8:52:7a:
         6a:e0:c9:0a:f0:d7:df:10:b1:f3:09:8e:cf:bc:cf:b6:9e:44:
         ef:3d:6a:5c:99:26:65:d7:7f:b5:cf:32:f6:7b:17:eb:68:94:
         d0:1b:0f:54:d7:df:5b:5f:58:75:a4:28:1d:9a:3d:ab:45:7c:
         36:6a:14:6c:16:c9:06:68:c1:ab:e6:5b:41:ab:ee:9b:40:96:
         70:85:5c:ee:03:d8:7f:4c:00:6b:b0:e1:fc:4b:c1:1d:93:b2:
         77:7c:bd:31:90:e3:66:44:5b:16:b7:e5:61:07:03:e7:79:8f:
         63:b9:41:3b:79:94:e9:a3:c0:e5:5c:03:35:e5:d3:e7:31:7e:
         3b:1a:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----