Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/9k0LkTJMMNqQVXcMFlyaO2XyayU.mft
File:                     9k0LkTJMMNqQVXcMFlyaO2XyayU.mft (raw, json)
Hash identifier:          iPnVi+LNidf+CVDemkEVDoy/DRvj3jbV/8WLSQOhNCs=
Subject key identifier:   65:28:C9:4B:72:58:C9:68:02:2B:D4:BE:D2:0E:7C:2D:E6:ED:AA:CF
Authority key identifier: F6:4D:0B:91:32:4C:30:DA:90:55:77:0C:16:5C:9A:3B:65:F2:6B:25
Certificate issuer:       /CN=F64D0B91324C30DA9055770C165C9A3B65F26B25
Certificate serial:       06F3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9k0LkTJMMNqQVXcMFlyaO2XyayU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/9k0LkTJMMNqQVXcMFlyaO2XyayU.mft
Manifest number:          06F3
Signing time:             Thu 26 May 2022 19:26:50 +0000
Manifest this update:     Thu 26 May 2022 19:26:50 +0000
Manifest next update:     Fri 27 May 2022 01:26:50 +0000
Files and hashes:         1: 9k0LkTJMMNqQVXcMFlyaO2XyayU.crl (hash: UHy7BYXaL1KdA7Vuz0lcb6/I8AY0n7PsQ0Cru6T4u0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F64D0B91324C30DA9055770C165C9A3B65F26B25
        Validity
            Not Before: May 26 19:26:50 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6528C94B7258C968022BD4BED20E7C2DE6EDAACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:e0:ae:7f:bd:f8:14:c3:57:03:c8:5c:56:
                    16:75:52:03:48:b4:2d:8c:6e:83:bf:74:c7:88:0b:
                    1c:67:34:26:8d:ca:82:27:16:35:d6:73:b7:91:0d:
                    57:2e:81:28:27:f5:2b:3b:ad:6c:9b:e0:35:9a:9e:
                    81:49:6e:36:ab:6a:c1:2b:e5:fb:f8:4b:56:77:03:
                    9c:05:f1:e1:7c:04:9c:34:a2:68:1b:3e:10:68:4a:
                    97:ca:54:ac:6a:42:87:6a:1e:08:37:a1:3d:7c:72:
                    9f:09:bf:37:86:2d:71:06:30:65:e1:a2:2f:23:87:
                    f8:be:89:e6:44:98:e0:23:f9:79:42:6f:89:43:a9:
                    d0:70:ea:3f:44:74:03:9b:fb:cc:53:1c:c3:af:49:
                    a8:0d:c3:39:4b:09:9d:8f:4d:9c:63:35:af:37:34:
                    41:31:77:42:4b:2a:75:d4:df:46:04:18:02:81:57:
                    5c:22:24:3d:4a:18:d3:1f:02:95:0a:6d:22:40:46:
                    34:49:af:f9:c6:e6:ee:1c:4b:a9:0e:2e:38:da:fb:
                    41:5d:6d:66:7a:b6:70:ed:87:4a:70:3c:89:65:2f:
                    bf:47:32:ae:71:81:0f:2a:d7:b7:a7:26:8a:5d:ca:
                    bb:24:ca:c8:43:c9:5c:f8:d6:f9:ea:4e:03:b8:cc:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:28:C9:4B:72:58:C9:68:02:2B:D4:BE:D2:0E:7C:2D:E6:ED:AA:CF
            X509v3 Authority Key Identifier:
                keyid:F6:4D:0B:91:32:4C:30:DA:90:55:77:0C:16:5C:9A:3B:65:F2:6B:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/9k0LkTJMMNqQVXcMFlyaO2XyayU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9k0LkTJMMNqQVXcMFlyaO2XyayU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/9k0LkTJMMNqQVXcMFlyaO2XyayU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:db:43:72:ac:ad:fd:3b:65:f2:7b:98:de:bb:b2:f1:9d:44:
         97:13:71:c8:7f:65:c8:d9:28:30:82:6c:29:01:41:ae:37:20:
         19:13:a4:e1:d0:25:5c:23:36:da:45:9d:84:e5:4c:e4:79:e9:
         be:6c:5a:ea:a5:15:33:84:b2:67:cb:d9:23:38:fb:66:bb:23:
         52:e8:00:4f:5e:4a:ea:ca:3b:6f:30:73:21:cf:2c:29:e3:3e:
         a3:17:86:a0:71:cf:3a:55:c3:f9:8f:c6:bd:10:8f:04:09:be:
         53:b6:ef:a2:74:41:4d:c9:85:c6:69:3b:01:81:eb:2e:d7:47:
         24:fc:1b:df:bc:95:12:4a:8e:8e:54:62:fa:9a:67:ac:ad:9d:
         87:37:08:ee:2b:b8:1a:69:ff:06:cc:84:85:ca:09:30:e0:85:
         90:eb:1b:c3:b3:ff:2f:68:96:28:75:04:c0:79:7e:f0:7a:4c:
         09:90:c4:b8:be:d2:f7:15:25:5d:35:c1:fc:84:c9:b6:24:d5:
         79:50:a4:a8:6a:c1:63:db:81:96:8c:18:c1:de:93:66:17:c1:
         1e:b0:d3:f8:c1:00:5f:f1:92:9b:e9:c2:d9:0a:f0:dc:14:d2:
         ea:6f:3a:71:3e:6f:af:b1:4c:e5:49:94:8c:eb:d0:51:d8:c4:
         61:35:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----