Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2873/95JZxaQlhnHUx-2F2RruTVxFqlk.mft
File:                     95JZxaQlhnHUx-2F2RruTVxFqlk.mft (raw, json)
Hash identifier:          3wx2G/ot3esr7is7Ap2SDoKjp+wXw/Cn5GiQUUdEGpY=
Subject key identifier:   92:69:54:1D:50:4C:D1:F3:47:71:20:50:A8:DA:D0:68:6D:F7:D6:C3
Authority key identifier: F7:92:59:C5:A4:25:86:71:D4:C7:ED:85:D9:1A:EE:4D:5C:45:AA:59
Certificate issuer:       /CN=F79259C5A4258671D4C7ED85D91AEE4D5C45AA59
Certificate serial:       0E3B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/95JZxaQlhnHUx-2F2RruTVxFqlk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/95JZxaQlhnHUx-2F2RruTVxFqlk.mft
Manifest number:          0E3B
Signing time:             Mon 27 Mar 2023 21:44:49 +0000
Manifest this update:     Mon 27 Mar 2023 21:44:49 +0000
Manifest next update:     Tue 28 Mar 2023 03:44:49 +0000
Files and hashes:         1: 95JZxaQlhnHUx-2F2RruTVxFqlk.crl (hash: YWdGiFgAwxniULE35M8peD607r3aSe5MIMhtLslSg2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3643 (0xe3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79259C5A4258671D4C7ED85D91AEE4D5C45AA59
        Validity
            Not Before: Mar 27 21:44:49 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=9269541D504CD1F347712050A8DAD0686DF7D6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:61:64:7e:b0:65:5b:76:c9:4c:c5:e3:61:
                    17:2e:ee:a0:f0:72:63:9a:04:73:e8:d5:70:4b:84:
                    b7:6f:a6:80:2a:de:a7:a1:06:79:a1:0b:8b:b6:86:
                    2f:4a:e6:ac:30:92:a0:05:2f:f5:cb:86:56:2b:bf:
                    f9:4b:b2:d0:ac:de:6e:51:b1:3c:81:24:4d:ec:56:
                    e7:7d:e9:39:6a:73:d3:03:38:bc:0f:62:57:40:26:
                    79:0c:33:98:04:dc:5d:3b:df:2b:19:1d:43:c4:55:
                    b4:04:bb:05:0e:54:56:85:77:9b:16:e2:cb:2d:76:
                    95:04:e1:4d:d3:98:d7:97:3b:61:c0:2e:97:98:f3:
                    07:fe:a8:58:b8:51:03:dd:dd:23:4b:59:b3:20:85:
                    83:61:c2:6d:c4:06:c5:c7:17:9a:e1:c1:ba:b0:f8:
                    8b:c3:13:18:6a:25:54:4c:25:fc:e7:b0:4b:4c:7a:
                    08:ed:68:34:a2:d3:f8:58:b6:4d:89:6e:10:b1:88:
                    0d:45:c3:d1:bc:96:07:23:8e:0a:d1:00:55:2d:fe:
                    e7:31:1c:b5:2b:97:c6:fe:1c:a2:4c:ca:29:c2:c2:
                    fd:24:52:ca:43:ac:43:58:c6:6a:a7:a3:73:99:81:
                    5c:69:f3:d8:7a:26:76:c7:c6:d2:f6:e3:c2:9c:15:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:69:54:1D:50:4C:D1:F3:47:71:20:50:A8:DA:D0:68:6D:F7:D6:C3
            X509v3 Authority Key Identifier:
                keyid:F7:92:59:C5:A4:25:86:71:D4:C7:ED:85:D9:1A:EE:4D:5C:45:AA:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/95JZxaQlhnHUx-2F2RruTVxFqlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/95JZxaQlhnHUx-2F2RruTVxFqlk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/95JZxaQlhnHUx-2F2RruTVxFqlk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:e4:6c:3f:c7:0e:e4:5b:82:82:3c:e4:11:c2:53:8b:5e:
         8b:8e:84:ba:ca:a0:19:98:cf:bb:fe:76:03:77:6d:7b:63:4a:
         01:e8:00:5e:ba:e0:b1:71:c4:50:7a:17:70:40:e4:1e:79:ef:
         d2:a2:11:84:ea:54:a1:07:ca:5c:7c:cf:1c:7c:22:66:1e:a7:
         1f:4d:c2:66:87:0b:dc:53:b3:27:82:65:07:de:c4:d1:9c:8f:
         40:8d:6d:41:2b:8f:ab:ed:f5:80:6b:a7:52:5e:80:e0:bf:db:
         b8:bb:53:f0:af:f6:7f:6e:a7:bd:e7:a6:d5:d2:af:9a:43:e9:
         cb:80:28:5b:3f:e4:c9:de:78:3f:16:91:a1:92:62:f5:87:a7:
         f8:bc:3d:27:b0:55:89:5b:80:67:3b:29:ed:24:f9:03:2c:d2:
         53:25:20:fb:48:ec:a7:da:69:93:bd:61:6f:46:3a:c3:c6:b1:
         00:e3:b8:b7:bb:d9:25:f7:86:15:b9:7c:90:19:20:7f:06:b3:
         f9:fb:55:94:de:bc:29:44:f8:81:1b:c9:93:a7:64:4d:62:d4:
         89:7a:1e:aa:47:9c:d6:d2:05:dc:6a:d9:2a:2c:ec:1a:c1:db:
         82:75:3a:26:7d:a6:e3:99:d0:9e:92:b5:3e:8a:b0:c1:65:17:
         08:30:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----