Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
File:                     jpsOFQMC6NRzWaCBchLAKog4dQc.mft (raw, json)
Hash identifier:          trpxj9Pe7LqzOXZgfIl4TVvttqbRyVLDtSCHH8iX7CA=
Subject key identifier:   B3:B0:FF:09:BE:59:50:8E:8C:AA:C2:C7:4B:FC:08:75:A4:DB:9B:76
Authority key identifier: 8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07
Certificate issuer:       /CN=8E9B0E150302E8D47359A0817212C02A88387507
Certificate serial:       1554
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jpsOFQMC6NRzWaCBchLAKog4dQc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
Manifest number:          1554
Signing time:             Thu 22 Feb 2024 16:21:31 +0000
Manifest this update:     Thu 22 Feb 2024 16:21:31 +0000
Manifest next update:     Thu 22 Feb 2024 22:21:31 +0000
Files and hashes:         1: jpsOFQMC6NRzWaCBchLAKog4dQc.crl (hash: TLGskP+X/UbjZWfDml+TxVRAgjmgP6pFCleQBh8DUGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5460 (0x1554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9B0E150302E8D47359A0817212C02A88387507
        Validity
            Not Before: Feb 22 16:21:31 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=B3B0FF09BE59508E8CAAC2C74BFC0875A4DB9B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:d4:a1:78:76:04:b5:c0:31:ba:53:93:44:
                    77:7a:87:72:ca:30:07:cf:15:04:76:94:64:01:7c:
                    ae:aa:05:56:42:2b:73:c9:7a:e8:16:bb:de:89:1b:
                    c6:54:c6:ca:88:24:9d:64:bc:9f:43:fa:ae:d9:be:
                    ed:40:76:80:28:5a:15:d2:e2:e9:d7:4e:7b:d8:40:
                    92:b1:3c:e5:0f:a9:55:51:a2:12:35:4a:01:05:3e:
                    4f:44:4f:77:0f:14:b8:0c:2b:47:71:2b:87:80:2f:
                    f0:78:6d:14:73:06:bb:26:ed:aa:80:52:1f:a9:37:
                    cc:9f:df:7c:87:42:d5:d5:5f:e1:df:7f:55:18:fa:
                    c6:e4:42:86:f7:46:d9:0a:61:b8:7f:6f:b6:e1:74:
                    fa:b0:e9:9d:89:9b:68:d6:74:ee:94:2f:54:8d:c9:
                    80:1e:86:f0:b6:c6:b7:7f:75:79:4f:81:1a:db:b7:
                    f9:70:64:1e:1b:0d:75:fc:d0:6d:0e:5b:ff:04:62:
                    0d:40:9a:de:6f:0f:59:4f:4e:1d:c5:93:19:f3:85:
                    ba:5f:95:8c:c0:b1:1a:36:4f:e0:85:60:7c:3e:b5:
                    14:2d:33:9f:73:6e:53:d9:86:a7:b9:13:f4:7a:c3:
                    17:f8:36:ac:ec:90:1d:d8:b4:38:9e:51:28:1e:b4:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:FF:09:BE:59:50:8E:8C:AA:C2:C7:4B:FC:08:75:A4:DB:9B:76
            X509v3 Authority Key Identifier:
                keyid:8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jpsOFQMC6NRzWaCBchLAKog4dQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e0:05:b3:64:f6:86:8c:f1:3b:08:b1:f6:e1:14:70:32:a7:
         6a:d2:06:2f:30:09:78:23:58:a9:0d:46:82:fd:63:d3:d2:b0:
         7a:f6:30:14:30:5f:b6:b8:31:bd:39:64:32:9e:e4:55:b1:9a:
         2c:69:5f:b1:4a:72:37:18:ce:68:47:7a:ff:37:49:56:c4:c9:
         f8:d5:a2:5a:d6:44:fe:02:ab:42:d1:bb:6e:e7:51:3b:6a:15:
         ae:f3:5b:63:2a:ed:fa:5b:75:c5:c9:c5:72:7a:66:29:30:0c:
         24:9d:a4:3e:c1:ef:d1:a7:d9:59:d5:bc:46:16:b3:11:fb:bd:
         36:98:ba:44:6b:1c:dd:83:e6:ee:b6:fe:6c:29:ae:09:d8:17:
         2f:5f:32:37:5b:32:fe:38:6d:7a:92:49:cc:cc:29:12:16:5e:
         ad:5c:16:07:dd:af:2b:3b:78:35:83:2b:d4:e6:b5:7e:5a:fb:
         f0:c7:d1:91:a7:f2:f1:82:c0:80:ea:18:a4:fb:4a:01:b1:97:
         18:41:1d:0d:d2:d2:79:29:31:aa:d6:e1:c2:63:12:e7:6c:f3:
         fc:4e:25:32:41:42:06:a8:b3:25:79:bd:88:e8:b0:f0:48:c7:
         24:2f:aa:47:06:cc:33:eb:53:78:6b:45:b8:08:4a:4b:19:c2:
         dd:ff:a3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----