Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/645/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.mft
File:                     oIsmJFcNBBYTPRGdDgQ-kYV8zTI.mft (raw, json)
Hash identifier:          YD0Ma7+cGe6P0gZ3HJwVYfWJZXnWBR0XKQNgG9pCxto=
Subject key identifier:   67:4A:B6:82:9E:ED:BA:A6:95:6B:34:A8:D4:F4:85:9F:70:D8:2B:96
Authority key identifier: A0:8B:26:24:57:0D:04:16:13:3D:11:9D:0E:04:3E:91:85:7C:CD:32
Certificate issuer:       /CN=A08B2624570D0416133D119D0E043E91857CCD32
Certificate serial:       074A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.mft
Manifest number:          074A
Signing time:             Thu 26 May 2022 19:56:04 +0000
Manifest this update:     Thu 26 May 2022 19:56:03 +0000
Manifest next update:     Fri 27 May 2022 01:56:03 +0000
Files and hashes:         1: oIsmJFcNBBYTPRGdDgQ-kYV8zTI.crl (hash: lE9Z5B8BqEAXpZ5EaMia1MjH40/IsgPTfCsL27L4RiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08B2624570D0416133D119D0E043E91857CCD32
        Validity
            Not Before: May 26 19:56:03 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=674AB6829EEDBAA6956B34A8D4F4859F70D82B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:e8:25:5e:da:1a:57:45:35:e0:a5:52:40:
                    86:d6:d2:64:1d:b0:f5:8b:69:91:3d:14:42:84:71:
                    70:ff:f1:79:0e:73:5e:48:92:cf:60:f4:d5:e1:e8:
                    97:3e:9c:1f:25:21:95:5f:84:26:7f:45:47:87:c5:
                    35:73:3d:f9:08:cd:1c:5a:e9:17:d7:b4:33:89:39:
                    7f:66:b0:0b:ee:15:4e:f0:20:a7:f6:7d:72:cd:0f:
                    cd:c7:7d:6c:72:59:c4:c5:6f:26:92:0d:f5:07:7b:
                    8b:4d:eb:e4:af:10:f4:ac:d6:68:9f:3c:d9:de:50:
                    3c:de:64:87:97:4f:9e:73:49:95:b1:e9:2f:9f:9a:
                    58:a2:a0:46:31:f0:2c:14:f6:e5:f4:69:68:0d:03:
                    cd:72:88:55:13:35:6b:07:5d:db:92:84:39:62:bb:
                    37:4c:58:50:0b:64:08:f6:8b:ba:30:d9:be:8e:85:
                    7d:f6:b2:b7:6a:04:05:de:36:82:36:22:2c:70:97:
                    d1:66:22:71:01:cb:9a:f5:94:fa:f3:47:d0:73:8a:
                    39:e9:e2:e9:51:7c:fe:1c:03:9a:2f:e8:f0:21:28:
                    d8:b6:b8:76:e8:73:ab:b4:37:50:5c:25:b6:4b:f2:
                    14:21:65:aa:50:69:59:8e:b2:87:a4:b4:ae:dc:61:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:B6:82:9E:ED:BA:A6:95:6B:34:A8:D4:F4:85:9F:70:D8:2B:96
            X509v3 Authority Key Identifier:
                keyid:A0:8B:26:24:57:0D:04:16:13:3D:11:9D:0E:04:3E:91:85:7C:CD:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4f:27:f3:0c:41:00:d5:75:ee:ad:a1:2b:19:5f:c0:a0:3e:
         07:d1:f5:f4:01:e7:b5:e3:23:aa:5a:e6:3e:23:3b:0c:23:24:
         c3:57:a2:f3:3f:0f:5b:ac:da:05:68:2c:81:4f:94:1c:c8:2a:
         26:00:af:94:ce:58:5d:28:89:aa:a8:81:9d:9e:94:df:d4:dc:
         bd:e6:de:ba:c1:2a:94:e8:08:18:db:40:5e:5f:09:3d:9f:e3:
         82:b4:1f:b6:11:f0:07:8f:71:48:2c:09:3f:d8:9f:ca:ca:a5:
         58:6a:d3:74:8e:f4:40:2b:32:f6:c2:5e:ac:a4:78:e2:04:b1:
         b2:42:7a:67:60:dc:b8:a2:e6:e7:55:5b:20:2a:e0:f6:49:93:
         e7:97:be:a7:ed:3c:90:f2:f6:4f:0f:d5:a6:27:75:c6:d8:b0:
         45:8c:81:71:96:df:6e:be:b9:04:a2:62:4c:49:66:f0:c4:09:
         44:97:30:f2:f9:06:42:c2:bf:7c:a1:4e:a9:39:31:2e:8c:be:
         8e:ac:0c:2d:3e:45:ed:91:d5:4a:39:40:71:79:2f:04:75:08:
         e1:71:9a:f8:fd:40:48:3f:d6:64:2f:e6:01:af:fb:15:7e:b2:
         95:11:3f:cc:ac:89:60:37:54:3c:7a:97:93:8d:d0:6f:24:78:
         17:9d:19:3e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICB0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA4
QjI2MjQ1NzBEMDQxNjEzM0QxMTlEMEUwNDNFOTE4NTdDQ0QzMjAeFw0yMjA1MjYx
OTU2MDNaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDY3NEFCNjgyOUVFREJB
QTY5NTZCMzRBOEQ0RjQ4NTlGNzBEODJCOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEk+glXtoaV0U14KVSQIbW0mQdsPWLaZE9FEKEcXD/8XkOc15I
ks9g9NXh6Jc+nB8lIZVfhCZ/RUeHxTVzPfkIzRxa6RfXtDOJOX9msAvuFU7wIKf2
fXLND83HfWxyWcTFbyaSDfUHe4tN6+SvEPSs1mifPNneUDzeZIeXT55zSZWx6S+f
mliioEYx8CwU9uX0aWgNA81yiFUTNWsHXduShDliuzdMWFALZAj2i7ow2b6OhX32
srdqBAXeNoI2Iixwl9FmInEBy5r1lPrzR9Bzijnp4ulRfP4cA5ov6PAhKNi2uHbo
c6u0N1BcJbZL8hQhZapQaVmOsoektK7cYdpbAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUZ0q2gp7tuqaVazSo1PSFn3DYK5YwHwYDVR0jBBgwFoAUoIsmJFcNBBYTPRGd
DgQ+kYV8zTIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQ1
L29Jc21KRmNOQkJZVFBSR2REZ1Eta1lWOHpUSS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvb0lzbUpGY05CQllUUFJHZERnUS1rWVY4elRJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQ1L29Jc21KRmNOQkJZVFBS
R2REZ1Eta1lWOHpUSS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC/TyfzDEEA1XXuraErGV/AoD4H0fX0Aee14yOqWuY+IzsMIyTDV6LzPw9brNoF
aCyBT5QcyComAK+UzlhdKImqqIGdnpTf1Ny95t66wSqU6AgY20BeXwk9n+OCtB+2
EfAHj3FILAk/2J/KyqVYatN0jvRAKzL2wl6spHjiBLGyQnpnYNy4oubnVVsgKuD2
SZPnl76n7TyQ8vZPD9WmJ3XG2LBFjIFxlt9uvrkEomJMSWbwxAlElzDy+QZCwr98
oU6pOTEujL6OrAwtPkXtkdVKOUBxeS8EdQjhcZr4/UBIP9ZkL+YBr/sVfrKVET/M
rIlgN1Q8epeTjdBvJHgXnRk+
-----END CERTIFICATE-----