Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/77/2bxshZ7Ua195YHPkPbMvGsrdf9w.mft
File:                     2bxshZ7Ua195YHPkPbMvGsrdf9w.mft (raw, json)
Hash identifier:          iB3sfkckwOlY1syYR8Xotq1q07AcPKe+Gj8EZ/MsQHs=
Subject key identifier:   6E:A5:F1:B3:F9:66:78:01:E8:15:20:F4:69:2A:04:C6:2B:3D:99:32
Authority key identifier: D9:BC:6C:85:9E:D4:6B:5F:79:60:73:E4:3D:B3:2F:1A:CA:DD:7F:DC
Certificate issuer:       /CN=D9BC6C859ED46B5F796073E43DB32F1ACADD7FDC
Certificate serial:       0732
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2bxshZ7Ua195YHPkPbMvGsrdf9w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/2bxshZ7Ua195YHPkPbMvGsrdf9w.mft
Manifest number:          0732
Signing time:             Thu 26 May 2022 21:56:17 +0000
Manifest this update:     Thu 26 May 2022 21:56:17 +0000
Manifest next update:     Fri 27 May 2022 03:56:17 +0000
Files and hashes:         1: 2bxshZ7Ua195YHPkPbMvGsrdf9w.crl (hash: eeJWnUq5HcN7rAiGyApkH1+hIjIeDkWCaowdsf553EQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BC6C859ED46B5F796073E43DB32F1ACADD7FDC
        Validity
            Not Before: May 26 21:56:17 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6EA5F1B3F9667801E81520F4692A04C62B3D9932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:49:eb:2c:56:62:48:0b:3a:16:da:69:f1:
                    fd:08:b9:b1:02:7e:9b:ad:32:40:34:f0:5e:e9:93:
                    60:0d:0c:05:d8:8d:59:5d:09:d3:03:18:d5:95:a0:
                    46:de:96:69:eb:0e:71:5d:f1:ad:b3:c9:a8:85:2b:
                    34:89:2c:54:e0:21:4a:6f:aa:01:32:09:ff:23:47:
                    e0:5d:d0:18:f6:55:8d:f2:f5:38:a6:03:98:e3:1e:
                    3d:9f:af:e6:a6:84:17:60:4c:5a:4b:b5:c6:67:dc:
                    fd:71:70:f8:b3:f2:02:a7:71:80:70:f4:88:b2:10:
                    71:6d:50:70:bc:b6:fc:b8:98:51:b0:4c:c3:80:dc:
                    73:9b:e9:09:f8:9c:28:64:c2:99:85:c1:28:47:2d:
                    e4:ae:d5:62:17:c0:1c:3c:1d:89:88:f4:9d:59:52:
                    25:5a:b3:de:82:80:31:6b:b4:15:e7:a4:d5:12:6a:
                    20:43:ab:4e:7d:c1:45:9b:d0:c3:36:cd:e9:da:64:
                    0c:8b:d5:cf:0c:7e:15:5f:97:28:ae:b8:fd:7d:e8:
                    ee:ac:f1:02:03:07:85:3b:9f:2e:94:3c:a3:14:93:
                    25:51:f5:50:8a:ab:e2:bb:07:f6:c7:fa:fa:56:77:
                    21:66:ce:75:01:70:b2:91:0a:97:22:56:77:73:6c:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:F1:B3:F9:66:78:01:E8:15:20:F4:69:2A:04:C6:2B:3D:99:32
            X509v3 Authority Key Identifier:
                keyid:D9:BC:6C:85:9E:D4:6B:5F:79:60:73:E4:3D:B3:2F:1A:CA:DD:7F:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/2bxshZ7Ua195YHPkPbMvGsrdf9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2bxshZ7Ua195YHPkPbMvGsrdf9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/2bxshZ7Ua195YHPkPbMvGsrdf9w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:7c:82:a7:3d:e0:8b:c8:dc:07:f8:53:b5:c7:1b:9f:2f:6c:
         d9:ec:2f:b9:91:fd:5a:3a:98:d6:37:0d:4b:f6:4d:b4:06:0f:
         2c:b9:db:71:b9:80:10:a2:61:54:84:ea:20:ec:03:7b:eb:a8:
         8e:b4:f2:ac:d2:fa:03:b9:97:2d:5f:23:62:32:a6:04:b6:7a:
         6f:92:7a:8f:d1:55:0d:79:ef:9e:12:8c:6f:36:16:76:96:99:
         bb:c6:5b:02:d4:09:bf:82:7c:7b:a5:e9:6a:fe:4d:1c:ec:d5:
         bb:bd:9e:11:dd:4a:84:28:78:fc:f8:a1:03:b8:b6:a3:af:4d:
         09:e7:a7:07:75:ce:c5:8f:f5:b1:63:1d:c4:43:4d:05:23:8f:
         81:8b:3e:13:06:5b:d5:d3:d0:fc:0e:74:f1:5f:9f:35:79:e5:
         ba:d5:be:68:70:23:0d:cd:65:4d:c4:e7:48:9a:6c:9f:55:7e:
         af:99:07:b9:10:b3:7b:be:ec:0a:20:b3:83:be:c9:0d:c1:24:
         ea:f0:ad:69:76:4b:4b:02:81:f0:4c:71:71:ba:37:b9:74:a3:
         20:da:13:48:a5:a4:7f:f4:e8:4a:91:62:97:b0:e4:d7:db:12:
         df:d4:3f:ee:80:99:9e:c3:d1:56:2f:cf:c7:7a:cb:3c:06:14:
         d1:b6:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----