Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3009/6zR3PukNEUw3aCOix8uKN9vKjDs.mft
File:                     6zR3PukNEUw3aCOix8uKN9vKjDs.mft (raw, json)
Hash identifier:          zvlkaEkdvUj5GONwNA1Jbn7B7qVlClnOiHcXNezLXRE=
Subject key identifier:   E9:04:1A:BB:47:D6:58:B1:5D:B0:56:A5:33:97:99:7C:67:E3:DC:79
Authority key identifier: EB:34:77:3E:E9:0D:11:4C:37:68:23:A2:C7:CB:8A:37:DB:CA:8C:3B
Certificate issuer:       /CN=EB34773EE90D114C376823A2C7CB8A37DBCA8C3B
Certificate serial:       1779
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6zR3PukNEUw3aCOix8uKN9vKjDs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/6zR3PukNEUw3aCOix8uKN9vKjDs.mft
Manifest number:          1779
Signing time:             Mon 30 Oct 2023 21:47:51 +0000
Manifest this update:     Mon 30 Oct 2023 21:47:51 +0000
Manifest next update:     Tue 31 Oct 2023 03:47:51 +0000
Files and hashes:         1: 6zR3PukNEUw3aCOix8uKN9vKjDs.crl (hash: k1hMUdhbNSLPS36tLHD6kHSn8+tqIoC01F2CIvAncOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6009 (0x1779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB34773EE90D114C376823A2C7CB8A37DBCA8C3B
        Validity
            Not Before: Oct 30 21:47:51 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=E9041ABB47D658B15DB056A53397997C67E3DC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:bc:d1:76:8e:2f:25:fd:01:9a:78:81:bd:
                    78:60:a1:e8:3b:b4:9a:56:2d:8c:97:a1:97:79:0e:
                    6b:ed:79:63:98:62:10:76:6b:03:0c:69:94:19:05:
                    80:90:00:22:36:f2:e6:a1:49:06:29:5a:81:bb:1f:
                    33:79:00:e1:b2:15:77:aa:33:0e:86:7d:6e:27:39:
                    08:d5:34:85:c3:72:f3:d2:7f:2e:92:c9:67:fd:69:
                    3f:22:b3:2c:f3:2d:33:7c:8c:7e:eb:96:4f:30:e7:
                    96:82:80:3e:21:19:5a:ab:9f:a1:b1:1b:ef:ce:9d:
                    02:c8:f6:3a:fc:aa:37:32:fc:22:6d:de:fd:78:16:
                    9c:ef:4c:8c:33:5b:1d:90:68:96:79:a9:d4:67:d9:
                    f1:5e:54:b4:31:52:50:3c:16:07:3d:33:38:e8:5c:
                    a7:68:be:78:ba:ad:a6:66:fd:f4:56:ca:27:d1:35:
                    c3:9a:a0:19:ab:c3:90:70:e0:a7:f7:1a:23:28:b8:
                    f4:1b:fa:f5:82:2c:ad:f1:a1:3c:f3:1e:4e:e0:b1:
                    a2:64:33:37:97:5b:3d:a2:3e:9e:a6:7f:d6:d9:67:
                    f7:74:94:56:e6:0e:52:4c:10:a4:fd:36:72:36:38:
                    22:08:35:88:9c:65:d9:f1:87:15:19:48:f6:64:94:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:04:1A:BB:47:D6:58:B1:5D:B0:56:A5:33:97:99:7C:67:E3:DC:79
            X509v3 Authority Key Identifier:
                keyid:EB:34:77:3E:E9:0D:11:4C:37:68:23:A2:C7:CB:8A:37:DB:CA:8C:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/6zR3PukNEUw3aCOix8uKN9vKjDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6zR3PukNEUw3aCOix8uKN9vKjDs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/6zR3PukNEUw3aCOix8uKN9vKjDs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:fc:d6:50:58:14:64:ba:ff:9f:20:ea:08:77:18:f5:73:
         90:73:db:bc:a3:2a:1b:30:62:c4:ca:ab:6d:e4:d5:c4:af:ae:
         ea:1c:61:b8:ee:52:f8:f7:d4:9b:53:bb:a4:bf:39:cf:ec:0a:
         5c:cd:88:98:52:1c:5d:3a:52:68:1a:b3:95:24:62:8d:92:95:
         23:17:03:2d:21:ab:86:b2:46:c1:03:2e:7c:c1:e2:ee:38:7c:
         d8:de:cf:85:5e:07:c9:7f:f4:4d:4d:48:6c:d5:c7:15:9f:4c:
         e7:1c:3f:b4:a5:9d:7c:0b:22:24:4b:44:7e:2b:51:bf:f4:d2:
         32:d8:b3:28:ce:78:a2:20:c0:3e:97:49:62:57:b5:ab:5e:80:
         13:1a:64:45:80:88:9d:37:1f:2b:71:df:dc:6f:e9:2e:6c:4f:
         99:58:ee:8b:78:c6:68:51:38:da:72:45:31:55:ff:a0:0d:96:
         54:55:ea:60:ef:1e:42:6f:35:ed:99:d4:a6:8c:06:be:aa:54:
         e3:08:a0:9d:ba:0b:7c:8a:82:ae:3b:f8:08:1c:74:d4:a7:5a:
         d3:a1:06:a6:7f:56:b7:4f:4a:77:07:a0:7a:02:e7:3f:c7:f8:
         1b:ce:9c:b7:de:5f:df:f5:cc:ee:6c:a7:c3:34:23:9a:77:3b:
         21:0e:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----