Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/irwIZMoL7FmxIOryHsqqdSube1I.mft
File:                     irwIZMoL7FmxIOryHsqqdSube1I.mft (raw, json)
Hash identifier:          mfhdOBQZivuw3X4vDATybSrX2TPCZqKQ8WqJd9gxtO4=
Subject key identifier:   62:7C:86:38:69:81:85:87:02:4B:A9:C6:85:31:DB:C0:5D:74:55:AB
Authority key identifier: 8A:BC:08:64:CA:0B:EC:59:B1:20:EA:F2:1E:CA:AA:75:2B:9B:7B:52
Certificate issuer:       /CN=8ABC0864CA0BEC59B120EAF21ECAAA752B9B7B52
Certificate serial:       0734
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/irwIZMoL7FmxIOryHsqqdSube1I.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/irwIZMoL7FmxIOryHsqqdSube1I.mft
Manifest number:          0733
Signing time:             Thu 26 May 2022 19:00:33 +0000
Manifest this update:     Thu 26 May 2022 19:00:33 +0000
Manifest next update:     Fri 27 May 2022 01:00:33 +0000
Files and hashes:         1: ODdxGatdzJYULPhvfoSmvkN_G40.roa (hash: ZBLlpXj3awQ+zjMOArwmHrM+7k9AU/R6gzKk125I9uE=)
                          2: irwIZMoL7FmxIOryHsqqdSube1I.crl (hash: zxRqt00CG+Q8MA9tB1Y/A3uSR/I1iiHfDDU+xlWtlhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC0864CA0BEC59B120EAF21ECAAA752B9B7B52
        Validity
            Not Before: May 26 19:00:33 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=627C863869818587024BA9C68531DBC05D7455AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:98:16:e8:ef:31:24:23:b9:7f:4a:bc:01:
                    d6:bf:f7:97:6b:81:17:c2:eb:78:1d:fb:69:c4:02:
                    b1:4a:5c:f4:50:c8:63:b3:a9:82:02:f5:76:ba:62:
                    2e:c8:c6:28:a4:d4:34:80:44:1d:e3:f8:42:19:f0:
                    31:c9:02:be:2b:19:5a:00:73:85:da:2d:e2:52:00:
                    b3:98:f5:cc:79:ce:38:26:b4:73:e6:aa:39:f5:a3:
                    9d:07:32:f6:2b:2c:f2:b3:b7:e7:56:06:91:ce:c9:
                    26:3f:57:59:33:3a:26:16:3c:bc:80:92:f0:b7:ac:
                    a3:6a:08:f4:64:54:49:c1:47:7f:24:2d:03:50:a0:
                    c2:2c:4f:b4:c8:ee:b9:5e:19:16:a4:bb:a9:e1:fe:
                    70:01:47:ed:48:81:c3:18:5e:30:a7:8e:1d:3c:2d:
                    bf:c1:73:b4:0a:1f:e3:9d:16:85:3e:b5:f9:1b:2a:
                    66:d7:79:e2:ed:31:c5:8c:59:33:0d:87:ec:e0:91:
                    ec:e4:b7:d7:7f:3e:e4:b2:c0:6d:61:bc:7a:fc:e2:
                    fe:e1:45:8d:b6:7f:1e:79:5b:e7:73:95:db:0f:10:
                    c8:71:bc:dd:cc:4a:3a:97:e8:77:22:38:c5:e8:04:
                    5a:6a:d9:19:fa:07:18:d3:8f:a9:9f:cf:00:11:d9:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7C:86:38:69:81:85:87:02:4B:A9:C6:85:31:DB:C0:5D:74:55:AB
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:64:CA:0B:EC:59:B1:20:EA:F2:1E:CA:AA:75:2B:9B:7B:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/irwIZMoL7FmxIOryHsqqdSube1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/irwIZMoL7FmxIOryHsqqdSube1I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/irwIZMoL7FmxIOryHsqqdSube1I.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a9:6a:8b:22:49:98:11:e0:11:15:94:61:cd:c2:9f:7b:aa:
         43:f5:a0:d1:cc:6a:39:01:41:13:d2:3b:0c:9f:24:23:63:96:
         3b:45:1f:19:16:f0:5a:60:1f:85:39:52:bf:36:93:c2:35:c4:
         74:21:e0:cf:d5:63:a8:7c:f2:9c:fe:32:c0:01:11:88:e1:92:
         67:13:da:68:8c:bc:9c:a4:a9:c6:4e:de:3f:dc:89:d4:96:46:
         33:59:a1:9c:8d:4e:4d:2f:0b:b0:b1:df:df:e5:b1:7e:8f:24:
         52:b2:99:69:dc:ef:f8:80:2f:19:d7:18:70:33:93:7c:c9:72:
         f2:ea:64:3c:c6:a8:3f:7c:b3:0f:8f:47:11:5d:10:b0:33:cc:
         8b:cc:76:31:f8:6d:c8:ac:c3:94:df:e3:7c:6a:99:7a:08:51:
         1f:44:1b:21:8d:9b:12:c8:20:44:ba:bf:da:3c:c4:b7:67:c4:
         63:a0:fa:c7:36:2c:fe:79:57:2f:bf:51:09:85:16:82:3c:c7:
         ed:46:0f:4e:b5:b4:ac:92:57:02:b3:f0:7e:20:26:b1:47:ec:
         38:d1:c7:f8:1a:a4:87:67:22:98:d0:f1:bf:bf:04:40:50:05:
         31:a2:a9:22:7e:00:89:fe:68:67:e9:d3:76:a3:5b:96:62:7d:
         7c:f7:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----