Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/46/xWqPJSIg58yb7AOSq9Q8kpiDefo.mft
File:                     xWqPJSIg58yb7AOSq9Q8kpiDefo.mft (raw, json)
Hash identifier:          xvIPci5WehRCV40fpHEiaa4s87sKwjzpbYKKu1jcXek=
Subject key identifier:   85:BF:CE:66:FA:B4:E5:BE:67:68:C5:E3:FE:E5:06:0A:7A:21:51:06
Authority key identifier: C5:6A:8F:25:22:20:E7:CC:9B:EC:03:92:AB:D4:3C:92:98:83:79:FA
Certificate issuer:       /CN=C56A8F252220E7CC9BEC0392ABD43C92988379FA
Certificate serial:       074B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWqPJSIg58yb7AOSq9Q8kpiDefo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/xWqPJSIg58yb7AOSq9Q8kpiDefo.mft
Manifest number:          074B
Signing time:             Thu 26 May 2022 19:57:06 +0000
Manifest this update:     Thu 26 May 2022 19:57:06 +0000
Manifest next update:     Fri 27 May 2022 01:57:06 +0000
Files and hashes:         1: xWqPJSIg58yb7AOSq9Q8kpiDefo.crl (hash: xB+apg1KK8a3X3rL528ncjWfLpV4L9WWxUMqESpCj/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C56A8F252220E7CC9BEC0392ABD43C92988379FA
        Validity
            Not Before: May 26 19:57:06 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=85BFCE66FAB4E5BE6768C5E3FEE5060A7A215106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:ce:1b:fe:d9:6f:66:17:5e:a8:f3:fd:16:
                    76:b0:97:a6:a1:74:b5:e0:15:6c:59:89:81:4e:6c:
                    47:a5:e6:0d:9c:05:99:f8:de:90:a0:df:90:22:14:
                    87:7a:b2:9c:82:18:4c:92:34:da:04:40:1e:9d:5b:
                    40:6f:32:f6:b4:e8:d5:b5:7d:2a:47:dc:78:4e:c9:
                    35:f7:7b:84:63:e0:45:b0:9e:67:e5:78:bd:d4:bd:
                    61:cb:c8:3e:1b:ef:10:38:7c:de:f2:90:4f:d9:c1:
                    0a:e9:ff:52:5e:f8:3d:40:d5:f0:79:dc:a8:5d:48:
                    f7:b2:47:f2:8e:58:97:58:12:26:5b:8c:77:2d:49:
                    29:9a:50:37:88:f9:a2:13:e1:3b:5a:aa:1d:92:e5:
                    82:6f:52:0d:8c:64:43:b9:45:9f:fa:c2:71:d6:2c:
                    a9:dd:24:0a:b7:4e:cf:40:81:52:97:c9:da:48:41:
                    1c:c1:6f:fd:e7:67:19:2e:1b:23:c0:29:eb:f0:a8:
                    2d:dd:e9:bd:d9:84:f0:a7:f5:01:90:10:df:3e:e3:
                    39:0b:03:4f:4d:60:58:86:88:b5:1e:40:6a:43:54:
                    9d:fd:19:5f:30:3d:a9:23:d2:30:7c:0e:69:df:e6:
                    f1:a2:d2:a7:f1:e1:34:f1:33:8e:ea:09:bb:23:6c:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BF:CE:66:FA:B4:E5:BE:67:68:C5:E3:FE:E5:06:0A:7A:21:51:06
            X509v3 Authority Key Identifier:
                keyid:C5:6A:8F:25:22:20:E7:CC:9B:EC:03:92:AB:D4:3C:92:98:83:79:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/xWqPJSIg58yb7AOSq9Q8kpiDefo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xWqPJSIg58yb7AOSq9Q8kpiDefo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/xWqPJSIg58yb7AOSq9Q8kpiDefo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:78:5e:ae:c0:85:2e:2e:2a:50:58:39:4e:ba:f6:c5:58:ac:
         bf:5a:9b:f1:6c:89:13:3e:7f:a8:86:59:54:cc:09:e6:98:ae:
         dc:18:88:38:75:5f:ce:0d:4a:11:df:10:8e:22:d4:ad:2e:c9:
         73:18:9a:02:b4:c4:55:78:da:b1:7b:35:b5:ea:06:e6:75:94:
         24:fc:1b:60:1d:0c:2d:a1:d9:6b:d1:43:df:a2:7f:b8:87:bd:
         d5:d8:4c:68:5d:94:10:f0:46:02:b7:48:dd:7c:18:af:a7:e6:
         85:e6:e0:11:f6:84:3e:fc:2d:25:26:89:4d:22:95:ce:b0:ee:
         c7:d8:50:ce:92:50:40:57:b8:18:88:24:75:ff:31:15:4d:5f:
         90:38:1c:e7:65:58:de:92:21:cf:d6:1b:26:0b:55:7f:23:c0:
         b1:e2:23:8e:f8:35:ce:16:29:d9:c8:48:e0:f8:a0:4b:da:cd:
         a3:a9:9b:9e:43:36:4b:06:74:53:20:35:0f:39:dd:96:b6:8c:
         aa:64:65:78:8b:eb:8d:8e:5b:8f:8b:3b:17:a9:fd:a3:ef:90:
         ee:0d:a6:49:b3:19:2f:44:ff:fd:d8:bc:9f:fd:8e:6c:34:82:
         96:ef:7f:af:2e:9e:14:07:c6:9f:5f:e2:20:f2:59:21:77:0f:
         c0:44:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----