Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/KiSxwsbp7xb8VsFkrK5n0kd_C-o.mft
File:                     KiSxwsbp7xb8VsFkrK5n0kd_C-o.mft (raw, json)
Hash identifier:          9mRWVaPJpeFeQWUbnjrYJktXyk6w7vydoTOBHTVxdvw=
Subject key identifier:   00:0F:53:9D:D3:DF:1F:CC:2D:70:49:A9:6D:61:12:0B:6E:63:A1:DB
Authority key identifier: 2A:24:B1:C2:C6:E9:EF:16:FC:56:C1:64:AC:AE:67:D2:47:7F:0B:EA
Certificate issuer:       /CN=2A24B1C2C6E9EF16FC56C164ACAE67D2477F0BEA
Certificate serial:       06FB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiSxwsbp7xb8VsFkrK5n0kd_C-o.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/KiSxwsbp7xb8VsFkrK5n0kd_C-o.mft
Manifest number:          06FA
Signing time:             Thu 26 May 2022 21:55:51 +0000
Manifest this update:     Thu 26 May 2022 21:55:51 +0000
Manifest next update:     Fri 27 May 2022 03:55:51 +0000
Files and hashes:         1: KiSxwsbp7xb8VsFkrK5n0kd_C-o.crl (hash: 7BHGfZiTIo0DrJMtitpJ7rdhOs+6ll0UYd2jh/BZwjA=)
                          2: rCuhLrnD6E7L2U-PSOWVjSh7a9o.roa (hash: P1gjDjeWbMSDepbB4sxYnn/6qkTNd+OPz4iKkAHXB/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A24B1C2C6E9EF16FC56C164ACAE67D2477F0BEA
        Validity
            Not Before: May 26 21:55:51 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=000F539DD3DF1FCC2D7049A96D61120B6E63A1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:9d:e8:6e:9c:05:70:94:ba:8d:91:01:f0:
                    53:e9:63:ff:7b:a7:ba:62:06:7b:cf:06:15:0b:df:
                    f2:6e:eb:b1:b5:de:0e:01:ab:59:88:0e:e4:3a:d4:
                    23:fa:ae:74:8e:40:4d:74:45:d8:c7:ea:51:67:89:
                    e1:5c:93:ff:66:02:eb:3d:a7:c5:5f:69:95:3e:15:
                    2d:ab:d8:5e:fe:67:68:0f:18:60:c2:4a:41:d7:4b:
                    e5:23:c9:bb:fb:3c:a1:a5:26:30:bc:6a:3e:23:cb:
                    63:1e:f7:d1:76:80:52:b6:ac:86:f4:bb:8f:f0:44:
                    01:43:0f:02:3c:22:7d:e9:8d:c4:99:33:cf:a3:66:
                    37:27:34:6e:70:bb:5b:48:02:4a:3b:ea:c0:3f:ae:
                    38:51:e0:8f:b3:c0:1b:ef:52:87:d2:4d:40:51:6a:
                    63:63:55:99:2e:44:ed:d1:11:31:f0:e9:6f:fa:08:
                    e3:83:14:51:65:8b:dc:b4:85:b0:b4:15:57:42:aa:
                    4c:a7:8d:21:d8:1e:38:17:3c:92:29:fc:a1:9b:36:
                    a3:b5:da:7b:22:c4:af:50:ec:6b:12:ca:61:03:76:
                    04:91:6d:bb:3a:b1:57:be:3e:88:c9:2c:fc:18:22:
                    ed:fc:c8:f7:fd:c7:d9:66:eb:80:ef:7b:a8:48:b0:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:53:9D:D3:DF:1F:CC:2D:70:49:A9:6D:61:12:0B:6E:63:A1:DB
            X509v3 Authority Key Identifier:
                keyid:2A:24:B1:C2:C6:E9:EF:16:FC:56:C1:64:AC:AE:67:D2:47:7F:0B:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/KiSxwsbp7xb8VsFkrK5n0kd_C-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiSxwsbp7xb8VsFkrK5n0kd_C-o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/KiSxwsbp7xb8VsFkrK5n0kd_C-o.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:00:c4:af:c5:e4:43:e1:e7:ba:93:e4:da:60:f0:63:e4:
         04:7b:03:3e:c3:62:17:30:1c:b2:3b:09:fc:34:99:4b:0c:bd:
         2d:9b:10:7b:d4:3f:5b:2d:78:1b:ca:02:04:30:31:0a:b4:06:
         96:b6:1a:6f:a0:80:c3:a5:57:fa:91:02:1c:7e:b4:79:6a:7e:
         e1:25:50:b5:aa:a4:fc:d1:c2:15:cc:64:be:a0:66:45:ea:a5:
         ff:f5:36:cc:d7:87:aa:b2:ef:33:31:88:55:37:c9:50:38:a5:
         3b:9d:01:fe:e4:b1:50:08:96:dc:01:82:75:f9:d8:45:37:f8:
         f2:d8:36:37:6b:88:a5:b3:13:2e:f9:fb:ed:52:3f:eb:47:53:
         5e:80:5f:00:75:1a:9a:89:07:1b:00:b1:97:fc:79:a3:81:98:
         57:9d:ff:0c:01:ec:8f:c1:97:63:2d:d5:56:00:37:aa:36:50:
         e8:84:eb:6b:d7:19:fd:c4:b6:01:d3:af:a0:f9:3c:a4:0e:c3:
         5a:3d:33:d9:9f:21:47:0b:c6:ca:a4:0a:56:04:56:7c:25:04:
         31:0b:20:85:35:9e:34:df:e2:37:36:67:fe:c4:03:24:7a:ba:
         76:19:39:12:98:96:bd:59:9e:a1:cd:96:61:75:5f:43:62:66:
         91:78:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org