Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft
File:                     fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft (raw, json)
Hash identifier:          ZIfx25GbfGS6R0GfZOBrSz9oo6M1+W/0hhvjvVrKpEM=
Subject key identifier:   C2:68:AC:C7:23:90:DD:E8:17:9B:33:86:68:84:2E:89:D7:B8:96:E1
Authority key identifier: 7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44
Certificate issuer:       /CN=7F1DB89923D58D2D4E925D7F29B4FA552CB1A344
Certificate serial:       0738
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft
Manifest number:          0737
Signing time:             Thu 26 May 2022 20:25:15 +0000
Manifest this update:     Thu 26 May 2022 20:25:15 +0000
Manifest next update:     Fri 27 May 2022 02:25:15 +0000
Files and hashes:         1: fNyvOwtnunV1XeOyzS64Q9Zuqv8.roa (hash: zEcRqc5IKvGN5f9ubaIfwanS6xUnq+4WlUgN52XIR2Q=)
                          2: fx24mSPVjS1Okl1_KbT6VSyxo0Q.crl (hash: CccjL1iv9W0hwiX6X4UyVAyg0zi4sPGc3iH24znouRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F1DB89923D58D2D4E925D7F29B4FA552CB1A344
        Validity
            Not Before: May 26 20:25:15 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C268ACC72390DDE8179B338668842E89D7B896E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:da:1b:bf:78:ca:d7:2e:b1:d0:db:e5:78:
                    31:85:df:dd:f5:59:d0:99:cd:2b:72:1d:0e:db:39:
                    54:e0:4a:f5:39:a0:74:fa:b2:1a:fc:a5:94:ee:c6:
                    68:b6:3f:28:ec:fc:00:7a:06:53:e7:a9:8e:b7:0b:
                    7f:54:4b:bc:ff:24:e4:c0:1d:45:bc:b9:94:06:a6:
                    6b:be:78:b2:ca:c6:b8:96:bb:f4:58:7c:a8:03:2d:
                    13:5e:c6:a8:9d:77:01:d6:fb:97:9a:c5:dc:20:f0:
                    a3:10:ba:0a:b2:11:f3:18:a9:36:9a:6a:f2:08:82:
                    77:65:04:53:8f:c2:2b:85:51:02:ce:10:a2:0e:d7:
                    ff:dd:c9:af:86:8f:f3:6c:48:07:1e:99:ed:b8:cd:
                    19:a1:b7:f4:6c:36:2b:05:8f:9f:16:1b:55:39:5d:
                    a6:b1:57:2e:5d:09:3d:a4:ea:cc:be:12:10:19:c6:
                    38:ef:98:75:06:d2:30:ca:62:fd:4e:b6:ab:74:bd:
                    8c:9f:5d:d2:16:47:1c:11:60:cf:6f:10:ec:28:b3:
                    f2:c8:b2:bf:01:11:36:68:a4:cf:54:03:cc:3d:f6:
                    3e:de:30:a0:23:ed:57:57:6a:6e:06:c7:16:fa:b9:
                    87:3f:c7:2c:66:26:83:97:d9:c2:b0:f5:e7:9e:cb:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:68:AC:C7:23:90:DD:E8:17:9B:33:86:68:84:2E:89:D7:B8:96:E1
            X509v3 Authority Key Identifier:
                keyid:7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d6:9d:a6:7b:a5:f8:c9:0a:f4:63:ff:ce:31:21:3d:f6:ea:
         6c:b4:42:e2:b2:e0:3e:5e:75:bb:d1:5c:00:a6:9e:d0:e7:35:
         33:3a:3a:c9:d8:a2:9b:68:cd:9a:b7:ed:0c:e7:df:59:a2:c8:
         2d:5b:2d:8b:60:91:88:b6:ea:73:b7:09:91:bc:a9:60:c5:4b:
         5e:9a:e6:fb:4d:cc:5e:3b:b0:e9:92:08:31:d9:cc:ed:5f:79:
         72:f1:19:fb:f8:4c:02:bf:e9:31:4c:3c:86:7c:27:be:a4:40:
         22:61:f1:05:7b:ad:7a:79:fd:02:54:42:11:21:56:51:b8:f1:
         d6:9f:b2:23:aa:97:4e:54:a3:9a:01:bd:28:a6:fa:c9:4b:2a:
         fa:40:19:12:75:f3:e3:be:45:77:cc:fa:3a:10:18:15:16:17:
         89:bc:cd:cf:3b:f8:ab:93:d4:e6:4b:a2:98:60:dd:b5:69:c1:
         45:3d:7f:3c:0b:10:4c:5a:6b:ee:00:6d:f8:0f:a2:5e:4f:0e:
         63:37:be:54:c1:c9:82:70:6d:ee:42:29:6e:1a:a3:d6:80:b5:
         ad:a5:06:6b:be:8d:9d:0e:1a:4b:7d:c7:da:33:9a:44:cb:0d:
         e5:90:3e:37:43:b1:c0:29:be:39:a8:0e:c1:3e:8a:d1:4b:8f:
         8a:14:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----