Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2766/u-bmsvRBlwH39UaMU0PmqUW5JhE.mft
File:                     u-bmsvRBlwH39UaMU0PmqUW5JhE.mft (raw, json)
Hash identifier:          pCzzB9pRL4JT2WekvxyNxGLU3yrf6O7sDWWP/yUxUDE=
Subject key identifier:   8F:E2:F8:52:23:DC:DB:4F:9B:D4:B0:CD:2C:63:51:91:34:F6:DE:84
Authority key identifier: BB:E6:E6:B2:F4:41:97:01:F7:F5:46:8C:53:43:E6:A9:45:B9:26:11
Certificate issuer:       /CN=BBE6E6B2F4419701F7F5468C5343E6A945B92611
Certificate serial:       06F9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u-bmsvRBlwH39UaMU0PmqUW5JhE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2766/u-bmsvRBlwH39UaMU0PmqUW5JhE.mft
Manifest number:          06F9
Signing time:             Thu 26 May 2022 19:00:16 +0000
Manifest this update:     Thu 26 May 2022 19:00:16 +0000
Manifest next update:     Fri 27 May 2022 01:00:16 +0000
Files and hashes:         1: u-bmsvRBlwH39UaMU0PmqUW5JhE.crl (hash: vaYG0g1eH6mHvwxdQEdhcPfxuspp2hdW9GLT7tSQwnc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBE6E6B2F4419701F7F5468C5343E6A945B92611
        Validity
            Not Before: May 26 19:00:16 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8FE2F85223DCDB4F9BD4B0CD2C63519134F6DE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:6d:3b:09:1e:65:26:98:2d:15:c3:a2:ed:
                    24:39:79:12:a8:8c:5c:f4:37:bc:ae:8c:8a:9a:c2:
                    da:be:55:43:b8:b5:da:e4:ee:b8:d0:09:e3:1d:a3:
                    0a:42:00:21:41:4d:6e:39:ec:e3:e3:5e:ac:e6:0e:
                    45:d3:ca:ef:37:d5:ab:71:9a:ef:6e:dc:7e:53:ba:
                    f3:4c:84:2b:fb:4a:02:f1:13:80:85:22:10:61:fb:
                    86:f0:4c:58:36:29:4e:e5:cc:f1:41:7e:f6:c0:29:
                    eb:f0:09:f3:e6:9c:df:8f:0a:12:4b:ae:eb:fd:51:
                    28:fb:c1:1b:26:b9:32:f0:d6:ef:33:c2:55:de:f1:
                    f5:c4:02:ac:b4:5e:66:f4:a2:5e:4e:2d:6c:98:11:
                    48:9e:a0:30:6c:f4:4a:b8:d3:d0:79:17:9b:af:6a:
                    a7:a9:a9:93:24:80:8c:b0:39:c0:e7:ff:7e:64:1d:
                    37:bc:55:80:cd:b6:32:22:22:98:57:fb:95:4c:3f:
                    f4:58:1b:ca:53:5e:3e:b1:12:c7:0d:ef:fb:35:00:
                    02:6b:22:d7:e1:f7:f7:19:b8:c9:c8:aa:63:ea:99:
                    d8:63:05:93:0b:74:05:4f:39:4b:af:67:0b:d5:d1:
                    e5:85:41:cd:e3:4d:45:68:88:03:ab:82:ad:c6:c6:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E2:F8:52:23:DC:DB:4F:9B:D4:B0:CD:2C:63:51:91:34:F6:DE:84
            X509v3 Authority Key Identifier:
                keyid:BB:E6:E6:B2:F4:41:97:01:F7:F5:46:8C:53:43:E6:A9:45:B9:26:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2766/u-bmsvRBlwH39UaMU0PmqUW5JhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u-bmsvRBlwH39UaMU0PmqUW5JhE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2766/u-bmsvRBlwH39UaMU0PmqUW5JhE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:bf:41:b6:ca:66:3d:35:9a:74:c1:bf:f1:b8:75:c7:9c:
         f3:4e:75:d5:bc:7f:86:77:30:ef:21:93:f1:14:c3:be:f4:21:
         46:8b:c1:f0:d5:12:b5:06:90:67:be:a3:9b:f5:4f:9c:0f:68:
         94:27:23:fe:5d:1b:0d:ed:60:50:b8:ec:38:a2:21:92:5e:3b:
         59:ef:1c:7a:56:5e:90:41:53:35:8a:f9:9f:56:2b:ee:e4:06:
         8c:ae:85:06:49:29:48:08:fb:a5:b4:77:e4:ee:ad:40:02:63:
         9e:b3:43:5e:27:89:24:74:ba:1c:6d:df:1d:6a:b3:18:c2:82:
         db:da:50:07:ca:36:88:e4:ff:34:55:19:fc:c9:9b:24:8d:02:
         15:6e:be:0b:3c:02:69:24:8c:f2:db:83:91:dc:c4:b3:6a:04:
         a3:cf:ce:d6:d4:e1:18:9c:09:8a:32:8d:b2:95:b5:cb:60:3f:
         06:ae:b6:43:75:46:67:da:f9:37:aa:09:a7:3f:44:b8:59:a7:
         17:fc:97:e4:b3:87:52:11:62:bb:8e:65:58:8b:4d:49:02:9e:
         cd:79:be:b7:e3:0b:8f:91:e4:57:91:16:66:d3:3f:c5:d5:a0:
         e7:d1:2b:8c:fd:da:43:9c:d3:30:56:81:f6:1d:06:56:e6:8f:
         1c:1f:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----