Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
File:                     zfv2KGSEFu4dmdMuX5yWhae-K7w.mft (raw, json)
Hash identifier:          UlhSC1yAUrA58P9yGd3Qx93oaj1XyKAvMF702j7EHHs=
Subject key identifier:   3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
Authority key identifier: CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC
Certificate issuer:       /CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
Certificate serial:       1CF4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
Manifest number:          1CF4
Signing time:             Mon 28 Apr 2025 19:40:12 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:12 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:12 +0000
Files and hashes:         1: zfv2KGSEFu4dmdMuX5yWhae-K7w.crl (hash: u2UhQS27Ko7A5F3DT7jku1QTdfBKFdUPs/rtHE893yU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7412 (0x1cf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFBF628648416EE1D99D32E5F9C9685A7BE2BBC
        Validity
            Not Before: Apr 28 19:40:12 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=3C66EB21CE741247CB2A9320E25E8CEF324D467B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:49:8e:33:ee:b4:d8:a8:76:b4:9d:5b:cc:42:
                    2f:9f:47:62:a7:e1:8e:d7:07:e1:e0:5d:02:81:a9:
                    d0:22:bd:24:a3:6e:9b:de:62:be:2a:40:6e:38:19:
                    d3:66:28:57:3b:99:53:71:f2:5c:d4:ea:c3:bd:6c:
                    63:37:85:6b:ef:18:36:68:30:95:90:1a:8b:ee:0e:
                    89:8c:5e:43:ee:c6:df:15:16:3c:34:7e:46:5f:06:
                    ec:d9:86:c9:7c:a8:28:9c:34:56:48:c9:b3:e5:a2:
                    6c:90:33:29:c8:8c:e9:57:34:c6:f6:45:37:f6:71:
                    00:2f:1b:b8:9e:8b:f3:92:5f:88:93:ed:a9:3d:ef:
                    3b:61:74:ad:7b:bf:e7:3e:27:63:a2:88:49:0a:a3:
                    1f:63:11:40:d4:86:24:0f:5a:73:f0:17:3d:33:25:
                    61:42:8f:5f:6e:85:46:f6:90:98:fd:ae:43:2b:02:
                    e5:09:fd:c9:44:df:58:94:36:c2:a7:05:a9:60:18:
                    20:49:44:c6:b4:5a:20:a1:24:05:fa:5a:7e:e4:47:
                    fe:e9:51:73:9b:c1:59:2e:be:3e:9a:84:64:52:8f:
                    c3:c7:31:32:1f:f0:53:4d:4e:9c:81:0a:f0:13:99:
                    d8:61:bf:3b:c8:1d:59:92:30:46:36:2a:ab:87:d8:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:66:EB:21:CE:74:12:47:CB:2A:93:20:E2:5E:8C:EF:32:4D:46:7B
            X509v3 Authority Key Identifier:
                keyid:CD:FB:F6:28:64:84:16:EE:1D:99:D3:2E:5F:9C:96:85:A7:BE:2B:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zfv2KGSEFu4dmdMuX5yWhae-K7w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/zfv2KGSEFu4dmdMuX5yWhae-K7w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e0:46:f0:31:8a:9f:d9:a8:32:1b:77:ea:79:dd:81:57:b8:
         e1:58:b0:e5:86:2b:b1:ad:38:4c:0a:eb:26:1e:3f:9b:88:cb:
         0c:42:3a:0f:b4:2e:0d:1d:20:e1:30:b3:4e:b9:37:22:db:6e:
         9b:c8:41:99:d2:41:21:2d:d2:c8:08:2c:ec:cc:54:ee:c0:9e:
         e0:de:f5:6f:55:a8:be:08:30:0d:a2:65:ec:a9:62:9a:80:a9:
         f6:c5:54:f4:19:26:b5:56:ac:f8:8c:d3:e4:4b:ef:41:25:20:
         c0:1d:df:05:e8:f5:7f:35:db:58:36:41:70:cc:00:73:60:1e:
         51:68:48:0d:71:0d:4b:80:a4:e9:50:a4:6e:c1:8a:d5:ca:6c:
         a0:81:c6:ce:a8:9b:ea:22:3f:c5:3a:14:6b:9c:42:e4:2d:05:
         42:d7:2c:da:fe:5b:11:8a:e5:36:dd:dd:c8:d9:80:b7:4e:1d:
         c6:80:70:55:39:10:e9:bd:86:29:3b:90:43:5f:75:8c:63:16:
         92:18:4e:bb:ab:2f:5a:24:40:36:2f:26:17:87:61:83:cf:16:
         a4:a9:6f:0d:8f:a4:37:74:34:38:f6:3f:92:62:ce:77:57:b0:
         4d:f1:a0:c9:36:bf:dc:eb:80:dd:38:03:b3:67:b9:2c:8d:d6:
         72:f7:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----