Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bsY1GT4krQ6tWnbTm7cxif1jenk.mft
File:                     bsY1GT4krQ6tWnbTm7cxif1jenk.mft (raw, json)
Hash identifier:          6awXlK0A8drcJlMaFy0FD2FJ9HpdvJsoWI+VMBkjzrc=
Subject key identifier:   40:B7:80:77:45:56:97:DB:82:28:8E:85:8B:1C:C3:62:EB:91:B4:08
Authority key identifier: 6E:C6:35:19:3E:24:AD:0E:AD:5A:76:D3:9B:B7:31:89:FD:63:7A:79
Certificate issuer:       /CN=6EC635193E24AD0EAD5A76D39BB73189FD637A79
Certificate serial:       03AC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bsY1GT4krQ6tWnbTm7cxif1jenk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bsY1GT4krQ6tWnbTm7cxif1jenk.mft
Manifest number:          03AC
Signing time:             Thu 26 May 2022 21:56:47 +0000
Manifest this update:     Thu 26 May 2022 21:56:47 +0000
Manifest next update:     Fri 27 May 2022 03:56:47 +0000
Files and hashes:         1: bsY1GT4krQ6tWnbTm7cxif1jenk.crl (hash: SDvQvCqzJ4RwaEwR7lEMJPUsZQPsO8Ti6Xe1Dh+rMVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EC635193E24AD0EAD5A76D39BB73189FD637A79
        Validity
            Not Before: May 26 21:56:47 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=40B78077455697DB82288E858B1CC362EB91B408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:72:d8:64:ec:31:a0:38:9b:6b:c2:4e:2c:
                    b1:d4:8a:6c:ea:b3:a1:9d:77:57:19:00:ad:50:25:
                    cd:f3:ec:4d:11:62:57:1e:f6:10:c6:e5:be:f5:e0:
                    79:79:af:75:d6:41:7a:2c:fd:4e:94:eb:e9:55:d9:
                    21:b3:2d:ee:09:17:5f:e4:ac:6d:b7:83:1a:14:4c:
                    df:cb:aa:0e:24:c9:95:55:fd:9b:68:52:4c:6c:9b:
                    3c:ce:4c:b9:18:c4:2b:98:88:07:b9:7a:9d:9a:ca:
                    fa:15:9d:db:e0:e0:e7:4b:5e:8d:16:68:30:28:e2:
                    46:7f:cd:4c:d5:75:ab:aa:28:c4:fa:d5:7a:f5:1b:
                    da:32:be:75:7e:38:ef:12:21:93:0b:df:30:10:ff:
                    d1:ee:21:27:4f:f2:00:4e:1f:a9:1f:51:8e:78:45:
                    2b:68:e8:dd:b7:05:f6:37:fd:f0:5f:e6:5f:76:5b:
                    a9:70:26:55:1e:40:9b:f2:d4:27:51:a4:95:74:64:
                    6a:13:96:d1:9c:86:17:7b:e8:b5:db:ed:e6:67:4d:
                    ee:06:c0:3a:9a:cd:b2:e7:26:89:9f:a3:ce:a2:b7:
                    e1:b0:3b:06:f4:62:e9:73:50:ca:40:43:44:51:fc:
                    95:7a:18:bf:9c:79:93:86:00:0e:24:50:22:ae:0e:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:80:77:45:56:97:DB:82:28:8E:85:8B:1C:C3:62:EB:91:B4:08
            X509v3 Authority Key Identifier:
                keyid:6E:C6:35:19:3E:24:AD:0E:AD:5A:76:D3:9B:B7:31:89:FD:63:7A:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bsY1GT4krQ6tWnbTm7cxif1jenk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bsY1GT4krQ6tWnbTm7cxif1jenk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bsY1GT4krQ6tWnbTm7cxif1jenk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:96:20:76:b6:c3:3e:aa:7f:16:27:3b:86:eb:e1:b1:76:
         ba:16:f7:f2:fb:c7:78:3e:0a:e4:e8:07:92:4f:2d:b6:ec:c1:
         e0:f9:eb:35:33:46:7a:f5:a2:66:43:eb:9f:71:89:7a:82:b0:
         de:b4:a2:b2:25:0a:5e:67:ba:9a:ec:bc:cc:a7:8c:53:d8:28:
         fb:16:21:53:7d:22:6b:c6:c4:9c:da:9a:7c:fd:01:73:9a:71:
         80:c3:bb:42:b3:d2:2e:df:a5:3e:df:30:80:a3:dc:cd:3c:f8:
         a9:4d:0d:a3:05:bd:18:10:5e:7a:e3:3d:f0:88:26:f8:14:e2:
         b4:96:6c:2e:9c:30:dc:0c:8b:52:c1:35:86:54:58:13:6c:a6:
         f9:23:c3:6f:59:9a:c1:3a:1f:af:98:ac:af:e7:bb:bc:49:f8:
         13:b5:e4:e1:4e:ef:f0:9d:56:e6:5c:75:9e:d7:5e:55:7b:c1:
         1f:ee:65:5f:ac:31:76:25:27:6a:3b:4f:e0:60:84:67:92:0d:
         db:76:18:16:3b:f3:5a:cd:5b:b2:4a:13:78:50:ea:12:be:9f:
         04:d9:e2:f5:2f:da:e3:ab:b9:50:54:85:5f:87:a9:8e:4b:1b:
         66:21:e4:0c:fe:d9:e0:dd:ea:56:ae:25:c2:44:5e:38:44:30:
         58:09:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----