Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.mft
File:                     ngWjfokKtd79OHX80DVmocqs5DE.mft (raw, json)
Hash identifier:          ijP2xBF0SXmDsmkc5JiJDB5TZQ1qG7PY6wEoKO1qDY4=
Subject key identifier:   AD:8F:28:FA:DC:90:41:A9:43:59:BD:9C:F1:BD:B2:90:21:9C:ED:12
Authority key identifier: 9E:05:A3:7E:89:0A:B5:DE:FD:38:75:FC:D0:35:66:A1:CA:AC:E4:31
Certificate issuer:       /CN=9E05A37E890AB5DEFD3875FCD03566A1CAACE431
Certificate serial:       358F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ngWjfokKtd79OHX80DVmocqs5DE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.mft
Manifest number:          358F
Signing time:             Mon 28 Apr 2025 19:38:54 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:54 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:54 +0000
Files and hashes:         1: ngWjfokKtd79OHX80DVmocqs5DE.crl (hash: zz6MEM6Fbck9ZYSFVMz4H3sNmyct+LGLGPxUBj0sabQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13711 (0x358f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E05A37E890AB5DEFD3875FCD03566A1CAACE431
        Validity
            Not Before: Apr 28 19:38:54 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=AD8F28FADC9041A94359BD9CF1BDB290219CED12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:88:29:7a:74:23:e7:4c:55:04:6f:43:93:
                    5f:d7:6a:33:25:f4:5a:82:55:02:13:a6:8f:d8:d1:
                    21:9a:46:f9:4f:51:ee:ec:4b:dd:59:3b:89:64:08:
                    1b:ed:36:0a:91:aa:28:a8:bb:f0:63:fc:6d:14:89:
                    a2:39:6f:8b:dd:73:b1:87:1c:7a:c3:81:11:f2:43:
                    fc:4c:8b:5b:c8:02:44:e1:04:57:0c:6d:86:1e:ee:
                    37:83:3c:44:ea:39:c6:86:5b:5c:5e:6b:29:85:8f:
                    4c:6b:60:7d:f2:7e:15:cb:b8:72:8a:e9:44:89:cd:
                    50:3d:8a:81:8c:14:13:f2:34:f3:10:fa:81:cb:f1:
                    ee:1a:b6:2b:f2:21:d2:e6:b7:a7:45:67:62:e9:09:
                    26:f0:73:14:2a:85:a2:f7:0d:79:31:c4:c7:9a:e0:
                    63:01:eb:61:b7:9c:59:61:80:43:30:6f:51:52:dc:
                    e9:11:ca:e0:b7:42:38:e9:fb:b6:53:79:15:51:e4:
                    04:50:f1:16:b5:ca:d5:f6:81:db:d4:41:c1:2d:c3:
                    0f:e4:08:5e:3a:4c:93:99:e8:4a:3a:b3:ef:df:bc:
                    31:cd:56:d8:15:cc:97:1c:b4:1e:2d:ab:70:e8:27:
                    bb:8c:1b:21:fa:85:53:b2:b0:c4:3e:35:f7:00:08:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:28:FA:DC:90:41:A9:43:59:BD:9C:F1:BD:B2:90:21:9C:ED:12
            X509v3 Authority Key Identifier:
                keyid:9E:05:A3:7E:89:0A:B5:DE:FD:38:75:FC:D0:35:66:A1:CA:AC:E4:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ngWjfokKtd79OHX80DVmocqs5DE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/ngWjfokKtd79OHX80DVmocqs5DE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:06:3f:15:c5:2e:58:52:f2:20:73:54:30:e5:63:f9:33:
         99:ef:47:f9:29:7c:53:5c:d9:91:c1:34:7d:32:9f:9a:d9:96:
         0f:04:7b:e5:7f:b7:7e:6d:fa:17:c3:8e:7d:c3:e4:08:5a:24:
         a7:08:ea:db:39:2e:ab:66:82:e6:dc:48:06:9c:0d:7a:b6:c8:
         d3:fe:51:f3:5a:28:4b:8f:56:1a:22:09:91:f0:05:74:b2:4d:
         ec:eb:50:11:24:72:0f:d0:f7:a6:da:86:d7:a0:9b:8f:ba:cc:
         c2:d6:42:42:ed:40:77:13:cc:b6:6f:bb:f3:37:0b:01:9a:44:
         96:9f:87:63:0c:8a:10:6b:37:2f:7d:3d:c2:1b:62:9d:24:50:
         06:9d:75:b0:f4:4c:fd:67:08:14:8a:1d:e9:4c:aa:f2:71:8d:
         ce:2f:6b:e6:1e:17:b0:28:5a:f6:6e:a5:a5:c1:ce:6f:d9:71:
         ff:24:ac:1f:f4:fd:ce:40:f4:a7:29:68:ea:94:23:b5:26:2d:
         62:47:2d:ea:bc:79:e9:21:ec:11:06:f5:73:eb:4c:d1:e5:ae:
         51:75:58:1e:cf:33:3c:18:e5:19:c2:11:f5:68:2a:4a:64:fe:
         b8:10:c9:56:14:68:82:d3:2a:3d:67:ff:89:1b:ea:c1:60:8d:
         26:b3:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----