Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
File:                     DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json)
Hash identifier:          14MZNppmvOXp/Dk5aY5P5uPOJFrDTZztKx00YeiOp+4=
Subject key identifier:   FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Certificate issuer:       /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial:       167F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
Manifest number:          167F
Signing time:             Mon 28 Apr 2025 19:41:33 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:33 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:33 +0000
Files and hashes:         1: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: eUg/oJNV60k3N2MR9obXhWfcqvshSt91U+/alN0/aBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5759 (0x167f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
        Validity
            Not Before: Apr 28 19:41:33 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92:
                    ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1:
                    42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68:
                    ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad:
                    4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3:
                    51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25:
                    2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec:
                    58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f:
                    14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3:
                    1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36:
                    49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf:
                    bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5:
                    75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01:
                    14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4:
                    f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00:
                    ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9:
                    49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
            X509v3 Authority Key Identifier:
                keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:9a:57:51:f6:40:b5:83:69:ff:9d:2b:15:93:a1:90:36:
         cc:50:2f:ad:65:9a:c8:02:dc:e8:e7:44:19:e9:79:9e:ce:98:
         2c:4c:ba:c8:f0:85:23:a7:9b:37:34:f3:ec:9e:a2:6f:5d:97:
         ba:5e:a0:cb:74:69:2c:57:46:85:1e:3d:5a:8d:17:99:2b:95:
         51:76:3a:50:9d:85:c5:72:74:91:46:63:d3:24:59:de:09:57:
         d9:34:64:a7:72:24:76:e4:9a:5f:8f:f2:22:5c:b6:46:59:43:
         1a:04:28:22:2d:a8:dc:5b:aa:73:8f:ec:e6:21:0f:64:f3:6d:
         8d:ba:7f:87:74:a1:b6:77:34:bf:f9:d9:2b:53:82:8f:58:f7:
         8b:d9:81:c7:b9:f2:87:ad:c3:f4:8f:0d:8d:89:cd:2a:9b:db:
         ed:6f:72:be:ce:9c:78:bc:f1:43:bf:62:59:cb:9d:ad:16:7f:
         dd:e4:c6:92:24:0d:b9:ad:6b:82:41:16:cd:78:00:8c:ac:f5:
         f5:af:37:5d:16:bd:1f:2c:50:c5:5f:c7:fe:30:63:bf:e8:92:
         4d:2b:a7:97:0b:3c:82:36:05:44:00:f8:ce:2c:69:de:f9:5f:
         4b:b9:75:8d:5d:57:43:20:45:82:4d:23:8b:42:15:8d:55:6d:
         05:75:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----