Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.mft
File:                     Q3ctVcOqnctFoA-iZr-nzoiNg_w.mft (raw, json)
Hash identifier:          jCOwL742av6z5tRx3twJv+ktvHDMEByZAlp34LlvV3I=
Subject key identifier:   90:78:00:D6:7D:BB:51:1E:0A:72:4A:75:02:52:E8:E2:8F:27:A1:9A
Authority key identifier: 43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC
Certificate issuer:       /CN=43772D55C3AA9DCB45A00FA266BFA7CE888D83FC
Certificate serial:       0C1C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.mft
Manifest number:          0C07
Signing time:             Thu 26 May 2022 21:56:43 +0000
Manifest this update:     Thu 26 May 2022 21:56:43 +0000
Manifest next update:     Fri 27 May 2022 03:56:43 +0000
Files and hashes:         1: Q3ctVcOqnctFoA-iZr-nzoiNg_w.crl (hash: 7ASZJNTHuEpuKSkDfrYWGEXC6OIQu5SH1QZh+4TcexM=)
                          2: nA9BIoG9NTqI_TxjqiouPs7pu3c.roa (hash: 4b0dk5fTRR0AVG1Fn5ruPBqyYbeJEG+btrqnj2uL/S0=)
                          3: s19xEQLf1LCJV6p7-Pi_M0QuKkg.roa (hash: zhnboJz7y3OLAKavd6C73lZ8m0nOXrH1fqbPToBOva4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43772D55C3AA9DCB45A00FA266BFA7CE888D83FC
        Validity
            Not Before: May 26 21:56:43 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=907800D67DBB511E0A724A750252E8E28F27A19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:70:36:15:d4:56:77:c4:f7:f2:57:bb:9c:
                    8d:f1:6c:2c:77:08:83:a9:c8:b7:70:f5:00:86:0b:
                    23:b9:f9:6a:70:0b:0e:48:12:0d:17:f6:5f:3e:c6:
                    c5:91:b7:de:da:4a:3c:f1:4f:14:df:d7:5c:45:4d:
                    bc:3c:cd:57:2c:01:5b:af:31:77:d1:01:41:4d:ad:
                    e0:ec:b5:60:c7:be:f6:2a:c2:c6:bc:0a:82:e2:19:
                    99:1a:af:19:96:0c:e6:83:10:d2:89:d2:b6:17:25:
                    21:43:37:f1:5f:5a:90:0f:06:cd:7f:60:be:04:0b:
                    de:f6:57:77:54:95:85:6c:15:50:ae:c5:46:ac:ef:
                    1d:6a:69:0a:ba:d1:06:ba:7d:d8:40:c3:03:4c:63:
                    e0:ec:52:cc:2e:fb:bc:f4:87:f4:11:6f:ab:64:3f:
                    60:80:13:45:12:f4:2c:9e:4a:b6:89:f0:06:bb:42:
                    c5:4a:0a:46:e6:8f:9f:a0:b4:00:c8:c4:62:4e:9f:
                    3b:1f:89:ec:59:a3:ff:d8:04:86:7a:71:89:a9:0c:
                    88:b2:e7:98:36:9e:e5:04:95:62:9a:6e:da:bf:f5:
                    8e:55:d7:0d:76:90:3e:08:75:96:81:dd:6e:38:01:
                    45:91:5a:5e:59:4c:cd:4c:6b:8f:ea:c7:d4:26:2b:
                    8e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:78:00:D6:7D:BB:51:1E:0A:72:4A:75:02:52:E8:E2:8F:27:A1:9A
            X509v3 Authority Key Identifier:
                keyid:43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:85:b6:b2:55:46:33:ab:1c:0a:f2:20:86:15:04:3b:0a:49:
         2c:bf:ff:9d:0c:09:35:32:e4:8e:c1:57:b3:fa:c7:b8:db:f7:
         f4:59:3e:52:9d:6f:87:b6:9c:1f:b3:2d:12:bd:35:64:6c:3c:
         d6:9b:07:5f:f1:6b:f4:ee:17:0b:3f:42:64:66:cb:c8:56:a2:
         f8:a2:a6:b0:76:1d:64:33:1c:fe:ee:ff:ea:51:9d:98:68:09:
         d7:1a:72:a9:a0:a7:61:c9:b9:db:f0:08:13:e5:ed:da:11:52:
         40:fb:6f:6c:1e:d8:74:88:fe:69:e7:df:e3:83:bf:28:5b:b9:
         c6:08:db:a9:e8:21:2a:ad:8d:8d:eb:01:7c:d3:1e:40:f0:57:
         71:f9:7f:f1:17:95:03:da:03:52:1e:56:76:ab:9d:a5:cf:c0:
         29:ea:22:a9:58:a0:b4:c8:43:8b:5c:99:bc:92:94:67:66:c8:
         7d:cf:47:c1:47:3d:aa:e9:2d:7c:52:98:41:45:1a:80:63:bc:
         95:93:26:94:27:4d:d3:4c:9b:b5:55:72:13:77:0b:81:3f:79:
         b0:48:0a:6a:20:64:f0:f7:05:f5:2d:b5:e2:f2:70:9c:ef:dd:
         f3:73:52:e8:81:08:8b:5a:5a:bf:26:77:26:e3:79:f8:8e:ae:
         14:28:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----