Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2457/vyYXTl7UummQoE_rcgAGRDDnGEI.mft
File:                     vyYXTl7UummQoE_rcgAGRDDnGEI.mft (raw, json)
Hash identifier:          Pf3Z4IdofHn3SKbJIsj/b+zcvzZLY98an+USCP4e3FM=
Subject key identifier:   23:C7:8B:22:15:6E:F0:3B:F3:82:60:AD:77:A4:EE:C7:0F:40:DB:08
Authority key identifier: BF:26:17:4E:5E:D4:BA:69:90:A0:4F:EB:72:00:06:44:30:E7:18:42
Certificate issuer:       /CN=BF26174E5ED4BA6990A04FEB7200064430E71842
Certificate serial:       05DD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vyYXTl7UummQoE_rcgAGRDDnGEI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/vyYXTl7UummQoE_rcgAGRDDnGEI.mft
Manifest number:          05DD
Signing time:             Mon 27 Mar 2023 21:47:20 +0000
Manifest this update:     Mon 27 Mar 2023 21:47:20 +0000
Manifest next update:     Tue 28 Mar 2023 03:47:20 +0000
Files and hashes:         1: vyYXTl7UummQoE_rcgAGRDDnGEI.crl (hash: MVXo4WtfYJrwCSjsf8WlkLoz7e6HsCITV4fbtv/Gqbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF26174E5ED4BA6990A04FEB7200064430E71842
        Validity
            Not Before: Mar 27 21:47:20 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=23C78B22156EF03BF38260AD77A4EEC70F40DB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:e3:1c:ff:60:94:a1:82:b3:44:5e:6a:82:
                    c6:18:cf:b9:51:8e:a7:86:e9:60:c8:c7:50:2e:76:
                    f9:d7:36:90:b3:a2:e1:ee:9d:65:06:5f:a4:ce:db:
                    72:d4:a0:11:e4:b9:6b:d7:f3:1f:e7:f5:7b:ae:94:
                    83:d4:88:d2:e2:da:f8:0d:bb:96:e6:fb:4c:70:2b:
                    9e:f8:b8:a5:f4:a4:20:58:3d:5f:bf:01:ae:c1:79:
                    b8:db:33:6a:de:41:71:d8:62:bc:f4:16:fe:c8:08:
                    cc:ed:cb:15:2b:53:00:fd:6d:92:8d:ce:5d:fc:e9:
                    a3:cf:88:e2:62:ca:77:97:cd:35:11:1c:82:1e:cd:
                    72:d3:95:e1:0c:6c:f0:22:73:e9:dc:47:f5:12:fe:
                    60:34:1d:b7:fa:5f:9c:05:ee:11:84:03:4c:16:a2:
                    1b:f8:ba:e2:04:84:86:7a:4b:00:9a:46:72:35:43:
                    ff:c0:a8:5b:71:4e:32:98:2a:71:bc:14:fc:12:41:
                    91:7d:24:4d:c2:3f:d8:a4:5a:75:e1:aa:98:e2:03:
                    21:52:fc:3a:05:6c:53:9a:4a:75:59:67:33:32:85:
                    33:27:2e:75:7c:83:e7:31:d2:fb:6e:0b:25:90:6a:
                    84:eb:e7:36:2d:50:59:4f:a2:50:f7:18:ca:a7:7d:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C7:8B:22:15:6E:F0:3B:F3:82:60:AD:77:A4:EE:C7:0F:40:DB:08
            X509v3 Authority Key Identifier:
                keyid:BF:26:17:4E:5E:D4:BA:69:90:A0:4F:EB:72:00:06:44:30:E7:18:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/vyYXTl7UummQoE_rcgAGRDDnGEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vyYXTl7UummQoE_rcgAGRDDnGEI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/vyYXTl7UummQoE_rcgAGRDDnGEI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b9:ad:7a:45:2e:50:07:4a:1a:ef:99:22:a9:21:c2:3f:84:
         69:7c:2e:4f:c6:06:2e:0f:65:01:2b:fa:58:ba:06:93:c7:4d:
         14:00:c3:a4:54:08:75:0b:78:8e:c5:58:20:de:05:65:2c:58:
         26:6f:23:0e:ba:6a:07:04:f3:86:8b:63:3a:5d:8f:cb:cb:13:
         fe:b2:ec:57:9d:73:4b:59:8b:54:8d:a0:71:0a:f5:8c:f4:5a:
         55:07:c4:ba:01:e8:9a:a6:17:d7:95:47:8c:08:55:54:f4:d2:
         44:4c:a8:05:1e:cc:93:13:2c:7c:b0:0f:46:78:c7:f1:e7:de:
         90:f0:0f:cf:9e:a8:75:c9:2b:c3:5d:c3:df:b9:ef:cb:33:b5:
         20:4b:5d:87:3b:8d:fa:ed:71:bf:29:b2:a5:4f:45:1f:d5:a8:
         8c:15:8e:e9:8d:d1:57:60:a8:66:3e:1e:b2:77:6f:8a:c9:f2:
         d5:6e:a1:e5:05:29:e3:fb:87:13:e4:39:e2:3f:cd:f8:a7:70:
         c7:03:ed:a0:00:e3:4b:35:0b:ac:db:13:0c:04:d7:a8:49:83:
         a8:3f:09:a8:bb:f1:98:60:a2:f3:03:42:52:84:7f:68:ff:5e:
         1c:d8:7f:95:12:09:e8:88:36:e7:07:85:84:e1:81:4e:5c:94:
         eb:fc:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----