Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/73/rkIq9AObP3w8EzzO5D6f68jeqUA.mft
File:                     rkIq9AObP3w8EzzO5D6f68jeqUA.mft (raw, json)
Hash identifier:          mE5LP+hbU00GZA1ont8qTAy5nOmpuGwVEnBpBTvWjZk=
Subject key identifier:   6E:B9:7C:6F:0F:2E:F3:F5:08:8F:73:24:00:EF:5A:A0:21:40:F3:6E
Authority key identifier: AE:42:2A:F4:03:9B:3F:7C:3C:13:3C:CE:E4:3E:9F:EB:C8:DE:A9:40
Certificate issuer:       /CN=AE422AF4039B3F7C3C133CCEE43E9FEBC8DEA940
Certificate serial:       14B1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rkIq9AObP3w8EzzO5D6f68jeqUA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/rkIq9AObP3w8EzzO5D6f68jeqUA.mft
Manifest number:          14B1
Signing time:             Thu 26 May 2022 19:00:30 +0000
Manifest this update:     Thu 26 May 2022 19:00:30 +0000
Manifest next update:     Fri 27 May 2022 01:00:30 +0000
Files and hashes:         1: rkIq9AObP3w8EzzO5D6f68jeqUA.crl (hash: DU4SJ2XssPNg/jGEoRv45PVj2UzUTIA/7RFF37sefu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5297 (0x14b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE422AF4039B3F7C3C133CCEE43E9FEBC8DEA940
        Validity
            Not Before: May 26 19:00:30 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6EB97C6F0F2EF3F5088F732400EF5AA02140F36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:3b:58:61:63:e2:7a:a5:6c:15:ec:45:9d:
                    f0:09:1e:61:92:90:03:28:31:fb:cd:92:18:24:4b:
                    50:f6:52:d9:be:32:13:d1:aa:f8:35:8b:53:4a:02:
                    ef:54:97:c4:60:d0:56:0f:a3:e2:77:13:e6:e2:f9:
                    c9:e9:40:c5:b8:09:50:c4:37:75:7c:7b:14:0f:2c:
                    34:8c:a9:c9:c4:b3:08:7e:ee:4f:0f:89:65:4d:d8:
                    46:62:f9:e9:25:68:d9:80:47:80:96:70:46:a1:d3:
                    9c:a1:4f:17:84:f9:92:2f:2d:33:c5:51:f6:56:15:
                    9c:10:d4:9e:cc:cd:f9:bd:96:05:09:9b:08:51:ae:
                    3b:ef:b8:0c:13:8f:a1:cc:e2:3d:b5:88:64:7a:92:
                    45:2c:07:79:b8:1c:cd:4c:4d:20:1b:1c:e5:bd:19:
                    e2:ef:3a:70:17:1d:4e:07:01:fd:7e:f4:2f:33:33:
                    32:df:3c:58:9c:06:16:3d:33:53:ef:e3:f5:b3:d1:
                    a0:b7:d0:f1:31:7c:11:18:47:22:b1:34:70:d5:80:
                    a7:fc:a3:24:e8:e0:85:91:d8:3c:36:89:73:4c:2c:
                    8b:99:5e:f8:51:6e:42:9e:f7:3b:35:b0:02:9c:0d:
                    14:f4:0b:b2:c1:b1:8b:cc:49:27:ef:4d:5d:95:24:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B9:7C:6F:0F:2E:F3:F5:08:8F:73:24:00:EF:5A:A0:21:40:F3:6E
            X509v3 Authority Key Identifier:
                keyid:AE:42:2A:F4:03:9B:3F:7C:3C:13:3C:CE:E4:3E:9F:EB:C8:DE:A9:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/rkIq9AObP3w8EzzO5D6f68jeqUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rkIq9AObP3w8EzzO5D6f68jeqUA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/rkIq9AObP3w8EzzO5D6f68jeqUA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:dc:17:88:72:c8:4a:79:38:6b:bd:14:c9:1a:b3:e5:26:
         3c:14:14:4c:22:0c:3c:03:0d:5d:22:74:a1:c5:5d:22:ca:19:
         ce:c2:7b:1b:08:2a:8f:48:d7:d3:29:2c:38:28:c1:d5:31:fc:
         2a:94:63:fc:63:3f:c7:e5:3b:91:5a:2b:85:3a:7f:79:7e:e8:
         35:c6:49:50:e0:89:71:87:b1:1d:0a:20:8b:cd:81:db:48:67:
         d1:47:9b:3b:ca:7e:0c:dd:ce:7c:ea:a1:ed:cb:32:ef:9f:7d:
         f7:6e:4a:bc:3c:2c:4e:2f:33:f6:79:24:90:76:71:9b:9e:57:
         df:96:dc:e5:bc:6e:ac:ec:78:e4:b5:4c:8b:36:fe:d1:e2:27:
         b1:7b:ab:9b:14:c9:46:dc:e8:41:e8:fb:78:c0:de:99:1a:77:
         b7:35:89:2f:a4:f8:38:b4:fa:82:38:2e:d8:4b:5d:5d:02:d3:
         31:67:f1:9e:44:98:f2:37:a3:8e:cd:04:43:98:9d:5b:de:42:
         a2:b7:f5:07:69:66:47:6b:1c:1e:52:91:20:e3:07:40:d2:72:
         8b:9f:fa:df:66:10:a9:7d:27:08:6c:5f:10:06:bf:aa:c3:13:
         14:71:48:7f:13:6a:b7:0c:5a:21:fd:c7:f6:80:8c:ad:e3:15:
         5b:96:3c:12
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICFLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUU0
MjJBRjQwMzlCM0Y3QzNDMTMzQ0NFRTQzRTlGRUJDOERFQTk0MDAeFw0yMjA1MjYx
OTAwMzBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDZFQjk3QzZGMEYyRUYz
RjUwODhGNzMyNDAwRUY1QUEwMjE0MEYzNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDjztYYWPieqVsFexFnfAJHmGSkAMoMfvNkhgkS1D2Utm+MhPR
qvg1i1NKAu9Ul8Rg0FYPo+J3E+bi+cnpQMW4CVDEN3V8exQPLDSMqcnEswh+7k8P
iWVN2EZi+eklaNmAR4CWcEah05yhTxeE+ZIvLTPFUfZWFZwQ1J7Mzfm9lgUJmwhR
rjvvuAwTj6HM4j21iGR6kkUsB3m4HM1MTSAbHOW9GeLvOnAXHU4HAf1+9C8zMzLf
PFicBhY9M1Pv4/Wz0aC30PExfBEYRyKxNHDVgKf8oyTo4IWR2Dw2iXNMLIuZXvhR
bkKe9zs1sAKcDRT0C7LBsYvMSSfvTV2VJFHzAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUbrl8bw8u8/UIj3MkAO9aoCFA824wHwYDVR0jBBgwFoAUrkIq9AObP3w8EzzO
5D6f68jeqUAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzMv
cmtJcTlBT2JQM3c4RXp6TzVENmY2OGplcVVBLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9ya0lxOUFPYlAzdzhFenpPNUQ2ZjY4amVxVUEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83My9ya0lxOUFPYlAzdzhFenpP
NUQ2ZjY4amVxVUEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
inTcF4hyyEp5OGu9FMkas+UmPBQUTCIMPAMNXSJ0ocVdIsoZzsJ7Gwgqj0jX0yks
OCjB1TH8KpRj/GM/x+U7kVorhTp/eX7oNcZJUOCJcYexHQogi82B20hn0UebO8p+
DN3OfOqh7csy7599925KvDwsTi8z9nkkkHZxm55X35bc5bxurOx45LVMizb+0eIn
sXurmxTJRtzoQej7eMDemRp3tzWJL6T4OLT6gjgu2EtdXQLTMWfxnkSY8jejjs0E
Q5idW95Corf1B2lmR2scHlKRIOMHQNJyi5/632YQqX0nCGxfEAa/qsMTFHFIfxNq
twxaIf3H9oCMreMVW5Y8Eg==
-----END CERTIFICATE-----