Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
File:                     7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft (raw, json)
Hash identifier:          sx9GC8dcO30SDK5YuVbsLtchyizYn7Ly/cM+7Da439o=
Subject key identifier:   9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Certificate issuer:       /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial:       020E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 19:40:42 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:42 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:42 +0000
Files and hashes:         1: 1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa (hash: y1yapVOWcFRVM0HkMcu6W1MzSDLeXbZvTAbExv3iZIU=)
                          2: 7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl (hash: LeVNg7N33/ceWBkvQEj10EJ7xog0xu9PDU6yyQceFFE=)
                          3: CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa (hash: hdqcb05bFxknkcwIdqOcWs1KgdleQYiVPEkSdv5OTow=)
                          4: LW8ZY2UtSYeujZ532V0CQrYeABA.roa (hash: F4Bh2cqcnHVRx++IenMMdugPp5fWZpfnO1OTNFONqyY=)
                          5: Yg61RxIhCNGDnQvVtwg-egnxOLU.roa (hash: 3XfY+iN0080xE/fEDKYWFBE5T1lbhQ0g9gRDubSk/jY=)
                          6: si24gGFg-sQtUpvK4DZtlqNS05c.roa (hash: /h7TLGBM959FC9Cv5rtuoN4A205gm+8xj8hpkkz0h/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
        Validity
            Not Before: Apr 28 19:40:42 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=9C8A2ECB9D1792638468F7EEA8F52357DB56DA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:17:41:ad:4f:9b:b3:3f:d5:14:f7:6e:23:
                    85:2b:f9:b4:23:58:8c:8e:b0:bf:70:21:41:33:59:
                    14:32:17:53:a4:0a:cf:90:a2:eb:1a:fc:bb:e3:5a:
                    9a:16:d5:20:3b:8b:c3:b1:92:08:7d:6f:27:ec:63:
                    ea:d5:a3:8c:05:c7:7c:2c:75:ab:d3:71:ed:2f:b6:
                    d0:01:c8:eb:78:d3:0c:8d:dd:74:12:02:6b:53:04:
                    d9:c1:c2:1d:52:35:dd:e3:9a:7a:c9:8b:de:ab:10:
                    66:1e:86:9a:68:a0:b3:30:d5:1e:e4:d2:99:f4:84:
                    26:a7:8f:8b:b5:0e:de:3b:73:c2:1c:51:06:5f:84:
                    d0:f0:47:e2:e1:df:56:51:7f:ce:85:3a:ee:f3:04:
                    5b:16:b6:8f:fd:c7:13:fa:8e:c2:3a:e2:8d:d3:de:
                    0a:2c:9d:71:51:0e:f3:4c:7f:57:c5:4a:81:98:44:
                    c0:6c:db:93:e4:f7:d9:2e:c9:d5:cb:47:0c:7f:7d:
                    99:ee:3f:37:0a:86:1a:33:f7:e8:8c:25:df:c3:d9:
                    e4:2e:c6:cb:5f:a0:e9:81:71:b2:56:d4:2a:c7:92:
                    13:2d:74:f1:a4:23:ca:fa:8f:40:c6:39:13:c6:1e:
                    06:39:d8:40:ea:55:96:62:d4:82:9c:a4:bc:14:44:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:2E:CB:9D:17:92:63:84:68:F7:EE:A8:F5:23:57:DB:56:DA:8A
            X509v3 Authority Key Identifier:
                keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:36:0f:0a:5b:e0:ca:a3:8a:7f:17:99:89:b8:3b:6e:77:
         aa:83:ad:34:57:92:7b:c5:a2:e8:a7:85:6c:29:8a:64:6e:50:
         f2:09:d0:61:49:06:fd:e6:5f:41:02:97:69:19:1d:ae:ca:c7:
         ed:a4:c0:c0:32:04:ce:30:42:54:5a:77:79:45:34:6e:a7:8d:
         36:fb:46:88:40:bf:13:b1:41:dc:ef:44:95:05:4c:01:f4:1c:
         01:4b:c2:0d:fd:78:2b:f3:ec:15:71:ff:21:41:5a:03:c2:ea:
         4e:c8:1e:72:71:1e:e5:c5:67:61:58:b2:61:bd:00:bc:6a:d0:
         5e:f6:c8:2b:2e:43:14:e7:ec:88:58:f6:0c:69:c0:2b:ea:46:
         67:a0:b1:24:bd:d7:36:91:75:79:db:94:c5:0f:b5:29:19:c6:
         24:76:0b:1b:b1:38:66:f0:95:89:11:d8:3a:21:8d:bf:cc:a9:
         fe:f5:fc:42:27:0d:3b:a3:d4:4a:21:aa:55:94:aa:15:a4:66:
         53:29:ee:40:51:f4:2e:16:88:7d:62:1d:18:a3:21:84:12:96:
         ff:bb:27:d7:be:38:a3:11:d9:53:91:ef:44:ff:d1:10:2b:3d:
         b6:12:bd:9c:16:b8:ff:32:b7:a2:dd:81:1d:f8:84:64:2a:de:
         73:67:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----