Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2634/BiYIOE8SR0bGahwd0yUk6GYAlGA.mft
File:                     BiYIOE8SR0bGahwd0yUk6GYAlGA.mft (raw, json)
Hash identifier:          J508LVcPrh7vOpN59JjaAaWMYu7g+/vkxHFb9XRHQNA=
Subject key identifier:   CA:59:70:AF:17:9D:CC:9B:12:07:3E:05:5B:EC:DC:48:4A:6B:E8:EE
Authority key identifier: 06:26:08:38:4F:12:47:46:C6:6A:1C:1D:D3:25:24:E8:66:00:94:60
Certificate issuer:       /CN=062608384F124746C66A1C1DD32524E866009460
Certificate serial:       0A48
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BiYIOE8SR0bGahwd0yUk6GYAlGA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/BiYIOE8SR0bGahwd0yUk6GYAlGA.mft
Manifest number:          0A48
Signing time:             Mon 13 Nov 2023 04:18:38 +0000
Manifest this update:     Mon 13 Nov 2023 04:18:38 +0000
Manifest next update:     Mon 13 Nov 2023 10:18:38 +0000
Files and hashes:         1: BiYIOE8SR0bGahwd0yUk6GYAlGA.crl (hash: MxTKnFD3I2ejjs5TwJNh/2zQRhotFqO3e4GJHNIinjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=062608384F124746C66A1C1DD32524E866009460
        Validity
            Not Before: Nov 13 04:18:38 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=CA5970AF179DCC9B12073E055BECDC484A6BE8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:93:c9:25:f8:53:11:e8:11:06:df:8e:3a:
                    d6:0f:8f:8b:fd:d5:3d:0a:5d:a6:6a:b6:2b:70:2f:
                    b9:b1:6d:a7:44:77:34:79:d5:3a:4a:1b:f6:b6:f0:
                    b0:c4:a9:13:f2:91:86:84:69:5e:13:68:41:cb:ef:
                    02:c8:33:bc:b3:49:89:39:e4:2a:73:da:13:92:c3:
                    5b:da:06:b5:1e:68:71:2e:78:38:32:d2:7e:e8:f2:
                    d0:a3:be:07:f0:76:7e:c2:9a:8a:99:5b:71:74:69:
                    34:f5:16:eb:b8:b6:9f:e2:e4:6f:54:8f:85:e4:cd:
                    87:a2:a7:78:d4:af:59:0c:7a:d7:f8:42:e7:97:95:
                    22:35:29:26:97:cc:2a:3a:48:45:dc:f7:93:6d:eb:
                    7f:93:82:a0:57:33:b4:55:eb:12:18:6d:de:05:30:
                    d8:2a:fc:c3:76:a0:d7:9e:a3:73:c5:9f:99:53:f1:
                    d3:b7:8a:2c:27:eb:b3:f0:e3:70:ec:6f:69:fe:83:
                    c7:1c:c8:f3:7a:53:5d:48:7e:18:fa:72:e8:83:03:
                    2e:c3:f2:ff:6f:6d:1d:74:57:d1:e7:1a:b7:c3:b2:
                    b2:17:66:e1:ac:0d:91:05:b9:10:88:4e:8c:19:41:
                    c7:2a:78:87:86:5b:ba:95:c9:25:19:a5:41:83:04:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:70:AF:17:9D:CC:9B:12:07:3E:05:5B:EC:DC:48:4A:6B:E8:EE
            X509v3 Authority Key Identifier:
                keyid:06:26:08:38:4F:12:47:46:C6:6A:1C:1D:D3:25:24:E8:66:00:94:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/BiYIOE8SR0bGahwd0yUk6GYAlGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BiYIOE8SR0bGahwd0yUk6GYAlGA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/BiYIOE8SR0bGahwd0yUk6GYAlGA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:2e:b3:cb:f7:13:9f:8b:89:06:6c:19:b5:60:0e:1f:3f:
         91:1d:c7:03:60:c7:fa:97:a5:ca:4e:42:f3:0e:a0:1a:b6:e6:
         6d:1c:e6:c5:a2:98:14:75:91:fd:bf:ef:e7:f2:4b:05:18:ba:
         12:86:e6:62:a7:2c:14:99:ba:a9:dc:68:62:b7:87:b5:21:d3:
         e7:b2:d6:68:68:37:3b:cf:b3:f5:1b:3a:2c:1d:f1:46:fd:10:
         0c:44:4d:5f:2b:c5:ac:0a:af:d7:ae:e5:d3:f9:03:39:d6:80:
         90:c8:a5:6c:a0:d5:df:de:55:ee:1b:e6:1c:06:e0:87:52:5b:
         2b:e1:85:40:23:1d:55:e4:72:76:45:ec:ae:f0:e9:28:41:9d:
         26:07:ae:ac:67:8d:dc:2d:dc:0d:04:9a:05:43:f7:28:8d:9e:
         e0:d6:89:89:7c:e7:00:53:77:94:0f:5a:14:40:b2:4e:36:92:
         fa:85:fd:37:84:25:45:44:a1:9c:9b:b4:70:f6:aa:ec:3d:90:
         b6:83:db:40:d0:e5:a8:28:28:1f:a2:34:57:1d:57:c2:1a:fc:
         34:1f:6f:1f:ef:0c:01:c3:b0:2b:f7:af:cb:c9:22:c8:ec:1f:
         11:9c:f1:0e:92:d6:80:69:66:60:da:08:32:cc:98:f4:71:60:
         c6:45:84:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----