Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/999/ihLD_XuIkhWD5wZVTmMM98i5BV0.mft
File:                     ihLD_XuIkhWD5wZVTmMM98i5BV0.mft (raw, json)
Hash identifier:          rv+YprEQ6jU4BsPUXg51EXNliH8MWxWkQ8B3z6ggb40=
Subject key identifier:   AC:95:71:20:DB:48:D0:1A:3A:8A:90:BE:BD:0B:60:62:F7:26:C7:56
Authority key identifier: 8A:12:C3:FD:7B:88:92:15:83:E7:06:55:4E:63:0C:F7:C8:B9:05:5D
Certificate issuer:       /CN=8A12C3FD7B88921583E706554E630CF7C8B9055D
Certificate serial:       3AF5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ihLD_XuIkhWD5wZVTmMM98i5BV0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/ihLD_XuIkhWD5wZVTmMM98i5BV0.mft
Manifest number:          3AF5
Signing time:             Thu 26 May 2022 19:57:12 +0000
Manifest this update:     Thu 26 May 2022 19:57:12 +0000
Manifest next update:     Fri 27 May 2022 01:57:12 +0000
Files and hashes:         1: ihLD_XuIkhWD5wZVTmMM98i5BV0.crl (hash: yMEFOF9YjGMEKsYL41gNdg4mY11UKajwO+2xab0If+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15093 (0x3af5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A12C3FD7B88921583E706554E630CF7C8B9055D
        Validity
            Not Before: May 26 19:57:12 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=AC957120DB48D01A3A8A90BEBD0B6062F726C756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:55:58:6e:ad:2f:b7:9c:9c:67:5b:8d:f9:
                    ed:22:30:e8:a0:60:3e:51:af:73:9a:a4:8f:0d:7e:
                    62:42:0b:a4:dc:ca:60:f4:35:a8:6b:d2:21:a7:2f:
                    c8:0c:83:81:36:13:30:7c:d5:db:44:63:57:a5:d4:
                    33:8e:51:62:d2:ae:cb:a7:9d:04:4e:60:be:08:d4:
                    c8:9b:f3:24:5f:fe:2b:66:cf:1d:5f:e2:e7:99:5c:
                    10:69:10:98:e0:1c:86:57:61:51:bc:cd:33:3a:0c:
                    18:a6:de:36:ed:8c:66:22:c7:11:e9:70:fd:c6:88:
                    39:f6:c9:f4:34:6c:01:a2:01:9d:a6:fb:5a:9c:c5:
                    2a:f6:10:18:0a:eb:ae:5d:b7:e9:24:3a:b0:0a:ff:
                    4a:8a:6a:68:e1:4e:f5:81:2d:53:30:aa:06:c1:aa:
                    e0:02:65:8e:75:1d:11:af:bb:dd:a4:20:75:50:e2:
                    29:09:9b:68:21:79:f7:c5:76:a0:11:63:28:0e:a0:
                    c9:43:ee:e1:25:04:6a:7d:47:49:19:d2:f7:b4:fd:
                    48:87:50:08:4a:73:c8:dd:49:c7:2a:db:1d:55:99:
                    67:0a:be:d5:3c:86:95:5e:ee:88:08:70:18:2c:6f:
                    f8:ef:1f:f9:7b:a6:0f:ca:91:d2:cd:ac:f3:b2:2e:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:71:20:DB:48:D0:1A:3A:8A:90:BE:BD:0B:60:62:F7:26:C7:56
            X509v3 Authority Key Identifier:
                keyid:8A:12:C3:FD:7B:88:92:15:83:E7:06:55:4E:63:0C:F7:C8:B9:05:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/ihLD_XuIkhWD5wZVTmMM98i5BV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ihLD_XuIkhWD5wZVTmMM98i5BV0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/ihLD_XuIkhWD5wZVTmMM98i5BV0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:b5:9a:18:cf:05:f3:50:d2:40:d5:e6:b9:5a:ae:2e:cb:
         a4:67:2d:9e:e3:22:8a:b7:b5:af:ec:77:7b:b7:f1:d2:87:46:
         39:80:b3:09:18:0d:61:7f:5e:c2:55:1f:c0:3a:1d:22:ba:93:
         7a:57:9f:22:67:7e:13:06:6b:84:75:3f:f3:6d:2e:4f:4b:5d:
         d9:58:35:b1:71:65:6c:1b:61:87:aa:c9:0e:b6:4b:f1:75:d1:
         fe:b1:4f:d4:92:56:08:77:70:5c:17:b9:70:c0:4e:63:1d:1d:
         25:f8:79:66:6f:34:86:28:b5:32:b4:84:40:81:1c:f6:45:54:
         4b:9e:3b:62:4b:2c:45:15:3e:f5:40:b2:61:29:44:d0:4e:81:
         60:3b:c2:38:af:69:42:b5:29:27:08:d6:07:45:98:8e:73:a2:
         b7:2d:c2:37:cb:fa:70:08:9c:57:ce:dd:91:99:0e:82:00:1d:
         03:14:91:7e:42:cc:66:e5:5e:58:3a:51:2d:dd:79:29:7b:2b:
         01:72:c5:a5:88:42:28:3e:39:0b:81:fb:db:65:6b:99:59:3b:
         2d:5c:75:5c:ea:f5:f7:76:45:4e:c7:9e:e7:87:df:4c:3b:4c:
         34:ca:d9:7b:c4:58:9f:1e:90:f3:a5:99:32:1b:ed:7b:15:0d:
         51:b4:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----