Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/907/D1N4Xi9nBUC2TtSutsL_eAOmbHE.mft
File:                     D1N4Xi9nBUC2TtSutsL_eAOmbHE.mft (raw, json)
Hash identifier:          AfX7Djq98X2BuXPdpAbkI8k1yazHaPJ6Wr01LCOA0ds=
Subject key identifier:   E7:51:3B:37:7A:D8:26:1E:B0:93:E2:AA:EF:3E:E7:60:34:6D:B2:68
Authority key identifier: 0F:53:78:5E:2F:67:05:40:B6:4E:D4:AE:B6:C2:FF:78:03:A6:6C:71
Certificate issuer:       /CN=0F53785E2F670540B64ED4AEB6C2FF7803A66C71
Certificate serial:       1F20
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D1N4Xi9nBUC2TtSutsL_eAOmbHE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/D1N4Xi9nBUC2TtSutsL_eAOmbHE.mft
Manifest number:          1F20
Signing time:             Thu 26 May 2022 19:56:51 +0000
Manifest this update:     Thu 26 May 2022 19:56:51 +0000
Manifest next update:     Fri 27 May 2022 01:56:51 +0000
Files and hashes:         1: D1N4Xi9nBUC2TtSutsL_eAOmbHE.crl (hash: k/woZY+576GuJSogRyaUhDJONmV8bZz7dmOj4dWIqNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7968 (0x1f20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F53785E2F670540B64ED4AEB6C2FF7803A66C71
        Validity
            Not Before: May 26 19:56:51 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E7513B377AD8261EB093E2AAEF3EE760346DB268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:1c:21:dd:aa:60:11:d2:31:a3:ac:66:24:
                    6e:f0:f0:87:ba:42:0c:25:b6:16:f3:60:68:c1:d8:
                    e2:a7:e0:08:c1:75:3b:d6:b0:74:da:29:f0:cb:bb:
                    74:05:67:38:c0:7f:fe:a0:d8:f4:a8:b2:9d:bd:72:
                    c6:f6:c2:ab:c7:27:de:17:9e:6c:fc:d2:3d:30:61:
                    dd:92:d7:8b:2c:5a:16:1c:2e:8d:8f:b6:98:cf:03:
                    52:b7:c5:75:37:ae:d0:9a:49:ad:20:36:a7:06:d6:
                    07:dc:68:55:93:51:bb:99:58:f4:ef:1d:c5:63:30:
                    17:cc:6f:dd:d1:c1:ab:b8:37:7a:76:7f:7d:f0:0c:
                    91:29:9a:f0:75:7b:5b:c3:78:99:3c:84:ab:aa:7a:
                    47:ed:af:de:e9:39:b1:73:79:57:b9:db:72:07:c3:
                    9d:f3:7e:92:dd:38:13:7a:76:89:01:f3:c8:e9:8b:
                    82:43:27:9c:03:3f:55:42:57:e4:46:bb:cd:80:f4:
                    6c:58:38:88:1a:28:e4:51:41:f7:d1:fa:6a:68:45:
                    f5:57:9d:7e:60:5c:3f:47:77:49:7b:8b:22:79:e4:
                    dd:c5:73:da:3c:09:1b:2d:06:f8:7c:ec:2c:00:e5:
                    09:4c:d4:d0:2e:cf:9c:65:ce:1c:3f:07:bd:fc:7b:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:3B:37:7A:D8:26:1E:B0:93:E2:AA:EF:3E:E7:60:34:6D:B2:68
            X509v3 Authority Key Identifier:
                keyid:0F:53:78:5E:2F:67:05:40:B6:4E:D4:AE:B6:C2:FF:78:03:A6:6C:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/D1N4Xi9nBUC2TtSutsL_eAOmbHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D1N4Xi9nBUC2TtSutsL_eAOmbHE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/D1N4Xi9nBUC2TtSutsL_eAOmbHE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:47:cf:38:9a:f6:7e:da:90:a6:d3:59:8a:04:4a:af:d3:
         ea:df:e1:c9:23:f6:85:66:4c:3e:eb:9d:f3:a3:c1:de:dc:79:
         e7:4f:f6:cb:28:43:df:5d:91:3d:47:2c:8a:78:55:39:30:ad:
         6d:cd:67:64:f6:a6:4a:7d:e6:ae:91:33:0b:a9:f1:d1:cd:61:
         09:63:d2:f5:6e:c0:94:90:44:6a:fa:d3:f9:8c:39:c0:c4:9f:
         5c:57:18:0f:0d:f7:a4:a2:b3:85:92:69:3a:2a:56:74:b8:61:
         0c:6a:d6:95:f2:5f:e2:64:3d:45:c6:a8:0e:d3:79:bb:b7:53:
         21:05:49:c1:7d:b6:50:a5:07:f7:a6:88:38:4c:25:c6:76:c3:
         70:4b:ef:5f:8b:9e:74:ff:9d:12:82:cd:81:03:2d:f9:ae:69:
         d5:41:0c:2a:40:7c:96:b9:77:69:c4:b7:ed:cb:6a:88:c9:8a:
         3a:2e:20:95:2c:ff:90:18:fb:bf:84:a1:00:af:a2:79:45:3e:
         eb:24:19:36:5e:2d:ab:44:01:73:01:d1:1d:e5:b2:00:cc:68:
         7a:59:fb:db:72:91:86:a4:ff:2e:5a:64:e6:ba:1a:aa:44:b6:
         a1:b0:4a:6e:b5:84:e4:6f:d8:36:38:e6:65:ee:ba:fb:c9:3a:
         e4:6a:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----