Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/538/7Ckse1qEhL9DPHAQul-1dyqmI0g.mft
File:                     7Ckse1qEhL9DPHAQul-1dyqmI0g.mft (raw, json)
Hash identifier:          Z5ag1XnuYHNQL6o7/3FVPKVVXTl4PigGeBfySrHOPNo=
Subject key identifier:   D8:EA:80:04:E3:F0:43:17:A2:E2:EF:1B:26:13:8C:06:7E:2D:07:AE
Authority key identifier: EC:29:2C:7B:5A:84:84:BF:43:3C:70:10:BA:5F:B5:77:2A:A6:23:48
Certificate issuer:       /CN=EC292C7B5A8484BF433C7010BA5FB5772AA62348
Certificate serial:       1F8D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7Ckse1qEhL9DPHAQul-1dyqmI0g.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/538/7Ckse1qEhL9DPHAQul-1dyqmI0g.mft
Manifest number:          1F8D
Signing time:             Thu 26 May 2022 19:27:12 +0000
Manifest this update:     Thu 26 May 2022 19:27:12 +0000
Manifest next update:     Fri 27 May 2022 01:27:12 +0000
Files and hashes:         1: 7Ckse1qEhL9DPHAQul-1dyqmI0g.crl (hash: IxfR+qbmm68DCqzhifv840iCj1/p3J2rzIe5pgDy0t8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8077 (0x1f8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC292C7B5A8484BF433C7010BA5FB5772AA62348
        Validity
            Not Before: May 26 19:27:12 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=D8EA8004E3F04317A2E2EF1B26138C067E2D07AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:e2:d0:7d:11:7e:d1:59:c4:38:48:d9:a4:
                    31:6a:13:dd:c4:d2:fb:26:27:19:81:60:f9:c3:7c:
                    8e:40:01:35:aa:90:84:6f:71:00:97:bd:05:cc:91:
                    69:ef:73:bb:90:38:31:f6:4b:22:56:bb:16:b1:d4:
                    1e:05:9b:57:2d:2c:39:82:4a:86:d8:4f:a6:8b:2d:
                    a5:26:82:2c:22:15:69:15:f4:ac:cf:69:09:a0:d8:
                    a0:f6:53:57:bf:d1:9b:89:1f:4e:f8:14:55:8e:4f:
                    dc:d6:c3:3e:09:fc:02:da:22:54:d9:5c:32:a2:7c:
                    63:02:eb:ae:5f:29:19:da:72:c1:7b:68:f9:7a:07:
                    fa:c5:df:56:6c:09:bc:4a:6e:f2:2c:32:e2:33:b2:
                    12:3f:32:1e:0b:9a:1d:22:99:26:40:bd:81:2a:52:
                    14:37:3a:f6:80:20:04:55:a4:8d:77:01:66:95:d8:
                    7e:db:c7:2c:89:7e:8e:cc:9b:9d:6a:0b:05:db:1d:
                    d3:71:b1:5a:d5:32:25:fe:77:73:89:2d:a1:73:14:
                    78:10:46:90:d8:26:4a:37:d1:e9:30:7e:7a:59:42:
                    dd:55:c1:52:61:bf:2a:29:14:79:68:d6:4a:15:a3:
                    56:78:24:15:b3:ce:d6:0f:e4:ca:98:cc:4c:91:40:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:80:04:E3:F0:43:17:A2:E2:EF:1B:26:13:8C:06:7E:2D:07:AE
            X509v3 Authority Key Identifier:
                keyid:EC:29:2C:7B:5A:84:84:BF:43:3C:70:10:BA:5F:B5:77:2A:A6:23:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/538/7Ckse1qEhL9DPHAQul-1dyqmI0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7Ckse1qEhL9DPHAQul-1dyqmI0g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/538/7Ckse1qEhL9DPHAQul-1dyqmI0g.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:cc:01:1d:ad:d3:36:77:ed:19:ad:c8:7f:00:14:99:ac:15:
         19:7e:8f:2e:a2:05:ff:01:8d:b0:fe:e3:cb:1f:ff:22:bf:a3:
         21:42:c2:55:31:a9:6c:65:e3:c8:c8:b7:36:3a:bf:e1:d1:27:
         47:79:f4:53:1f:ca:5f:cc:18:5e:96:51:87:0a:0e:53:f6:27:
         a9:0b:95:b7:15:9e:3a:8b:65:f5:a1:a2:b0:19:38:8d:b5:37:
         02:ad:b5:7f:cf:1d:27:c4:88:22:30:7f:cf:6c:31:7f:09:8c:
         2b:27:82:58:aa:13:b8:1c:d0:b1:5c:90:a1:d3:f9:f0:0f:70:
         c4:bf:98:93:76:e9:bf:52:b3:63:84:7e:f2:d3:5e:9e:93:bb:
         6a:14:83:94:bc:ef:69:d0:93:9d:37:07:2f:82:61:09:72:01:
         a0:25:88:3e:d4:93:d8:55:53:3e:e9:65:06:9c:98:b3:c7:01:
         96:4b:1f:b3:0b:f6:92:57:18:15:be:b7:f8:0b:1e:2c:48:fd:
         63:9d:42:7e:ef:71:eb:d0:35:09:af:7f:8c:25:1a:f1:cd:e2:
         60:d0:d6:65:c9:a7:45:de:ff:a9:d2:47:23:e2:81:ca:b7:52:
         5f:52:b4:dd:ac:b8:9e:50:d1:2a:68:b3:02:4d:42:2b:17:93:
         28:ae:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----