Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3221/2V4DuTga4dCKeF1h61xDOkm7Dvg.mft
File:                     2V4DuTga4dCKeF1h61xDOkm7Dvg.mft (raw, json)
Hash identifier:          lFke3YD+FGCZ3zHQNF7qRh88i/5njX9n0zkZ3KNLmfg=
Subject key identifier:   AE:0A:A9:E2:4F:55:35:17:DE:F5:A1:2D:B2:C9:CE:BE:46:4F:6A:89
Authority key identifier: D9:5E:03:B9:38:1A:E1:D0:8A:78:5D:61:EB:5C:43:3A:49:BB:0E:F8
Certificate issuer:       /CN=D95E03B9381AE1D08A785D61EB5C433A49BB0EF8
Certificate serial:       0C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2V4DuTga4dCKeF1h61xDOkm7Dvg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3221/2V4DuTga4dCKeF1h61xDOkm7Dvg.mft
Manifest number:          0C
Signing time:             Wed 07 Jun 2023 02:53:48 +0000
Manifest this update:     Wed 07 Jun 2023 02:53:48 +0000
Manifest next update:     Wed 07 Jun 2023 08:53:48 +0000
Files and hashes:         1: 2V4DuTga4dCKeF1h61xDOkm7Dvg.crl (hash: rjepwnxW7WaMgoGUqaFmPgooIfJ1UMC+/Acsh5UpoaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95E03B9381AE1D08A785D61EB5C433A49BB0EF8
        Validity
            Not Before: Jun  7 02:53:48 2023 GMT
            Not After : Jun  4 07:30:10 2024 GMT
        Subject: CN=AE0AA9E24F553517DEF5A12DB2C9CEBE464F6A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:a4:67:ba:42:70:d0:69:f4:67:90:0c:73:
                    7b:da:df:6e:d1:11:2f:a8:03:7f:c6:c5:3a:8b:63:
                    45:f7:91:7a:d4:27:d2:e5:96:0f:31:85:6a:16:4c:
                    dc:5a:72:04:41:e2:f8:8d:9b:2e:db:b8:cc:af:c7:
                    a7:49:99:ae:73:c5:92:e9:c4:01:a9:aa:ca:86:59:
                    31:dc:24:37:43:47:c5:fe:66:03:80:45:f3:06:23:
                    78:c8:1d:fe:af:cc:a8:be:b6:39:56:71:26:af:59:
                    67:1d:04:0f:4f:10:d8:16:48:bf:b2:91:07:be:c9:
                    2c:0e:1d:dc:12:f1:5b:62:c5:20:a0:0e:b4:d9:f8:
                    49:a7:31:95:6f:d3:a7:a5:f3:89:31:e0:3e:6f:c8:
                    24:89:75:3d:86:08:25:2a:75:75:92:7a:d6:84:68:
                    e8:0e:67:de:62:d2:fd:47:ad:b9:64:e7:dd:5e:c6:
                    fd:ea:8d:48:05:d3:ab:41:45:17:38:55:9e:95:fa:
                    0f:da:3e:f6:68:32:ae:6e:f3:9c:41:99:c6:06:cc:
                    5b:22:36:82:25:e1:a1:75:0a:20:55:a0:6d:5b:e8:
                    02:4e:05:24:96:2d:38:de:11:34:46:02:d0:94:c3:
                    0e:3a:db:9e:ba:fe:a8:ee:70:b0:f6:66:a0:b0:b4:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0A:A9:E2:4F:55:35:17:DE:F5:A1:2D:B2:C9:CE:BE:46:4F:6A:89
            X509v3 Authority Key Identifier:
                keyid:D9:5E:03:B9:38:1A:E1:D0:8A:78:5D:61:EB:5C:43:3A:49:BB:0E:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3221/2V4DuTga4dCKeF1h61xDOkm7Dvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2V4DuTga4dCKeF1h61xDOkm7Dvg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3221/2V4DuTga4dCKeF1h61xDOkm7Dvg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:de:93:6b:cb:94:4d:55:f9:b2:d8:e5:a3:e3:a7:c8:cc:c2:
         10:5b:1a:3a:52:dc:94:fe:42:d3:3e:d9:cf:0e:d3:c7:f9:18:
         d6:91:81:87:a4:62:8a:bb:a8:c2:6d:c8:eb:05:27:dd:86:67:
         46:81:b1:8a:1d:78:bf:1f:8d:b8:92:f3:a0:8e:53:d3:8c:03:
         42:fa:fa:12:58:1b:91:c0:57:4b:d4:af:37:44:e0:0d:17:fd:
         2e:eb:db:52:ec:8c:02:40:9e:e9:3f:6e:88:80:65:e9:76:14:
         fa:f9:f8:7d:ee:e9:cd:0f:c8:57:53:97:d0:57:9a:d1:50:5a:
         d6:72:8a:bb:08:a0:32:f3:22:47:e0:1b:88:bd:15:7b:cc:1b:
         3b:e5:a5:7a:8d:a1:e6:08:52:6b:e6:f2:04:3b:26:3e:24:6b:
         9a:24:c9:18:73:8a:80:d2:c0:65:4c:05:eb:84:b5:bf:f8:ec:
         99:41:4a:30:5a:da:f6:8b:8e:dd:5b:4a:16:9c:4b:ef:9c:b4:
         26:20:7e:b0:78:03:52:65:e3:0f:92:7e:9b:0a:fc:95:49:47:
         64:4c:c0:e3:ae:56:6f:de:2e:82:56:3b:40:9c:47:09:64:ea:
         f3:d0:1c:67:7f:42:f9:3d:21:12:3b:fa:54:97:35:1c:da:4c:
         d3:3c:ca:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----