Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
File:                     FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft (raw, json)
Hash identifier:          UJhG/W3SCikri6qmQMCbCZsaMxk/aoS8TrEaFUdCyr4=
Subject key identifier:   CD:2D:B1:69:8A:A7:CE:87:2C:F3:60:B9:61:66:02:87:70:95:1A:AF
Authority key identifier: 15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54
Certificate issuer:       /CN=15103AD9A15D7E417C67087793D514CF238AF254
Certificate serial:       1E77
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
Manifest number:          1E77
Signing time:             Mon 28 Apr 2025 19:36:53 +0000
Manifest this update:     Mon 28 Apr 2025 19:36:53 +0000
Manifest next update:     Tue 29 Apr 2025 01:36:53 +0000
Files and hashes:         1: FRA62aFdfkF8Zwh3k9UUzyOK8lQ.crl (hash: h4rWcQoL5PU/k48Sj1On5COVvIKlPkpHRFYqo+NIZ1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7799 (0x1e77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15103AD9A15D7E417C67087793D514CF238AF254
        Validity
            Not Before: Apr 28 19:36:53 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=CD2DB1698AA7CE872CF360B96166028770951AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:ec:f9:af:8a:22:c4:92:f5:1c:91:c2:26:
                    73:74:c4:fb:fc:37:b8:ac:9d:5b:d0:75:9a:f1:af:
                    70:91:6f:f0:f2:1e:17:06:38:39:14:86:1c:44:b8:
                    83:cc:a9:8a:12:30:54:a9:f0:0a:0e:47:e0:a3:a7:
                    8d:22:12:4d:4f:32:7b:6f:20:f0:fe:9e:8a:90:b9:
                    ee:b8:52:2d:ea:a0:1f:c8:60:db:c3:ad:e7:5a:50:
                    f6:65:f6:e3:69:7b:43:d0:36:9c:f8:d5:db:80:c2:
                    9e:1b:97:86:ee:b0:6b:c3:2b:af:d9:22:04:e3:2e:
                    bc:e8:50:39:48:fe:58:f0:75:92:f5:b5:8b:cb:6c:
                    65:f1:ac:d7:c8:00:33:6f:37:40:70:fa:6a:5b:6a:
                    3c:e0:ea:5b:80:0e:7f:03:5f:b2:2e:95:d0:d2:43:
                    a7:3d:84:75:94:27:64:7b:82:6e:33:ab:a7:c8:88:
                    03:3e:51:86:f8:d2:62:51:10:08:cf:a0:ee:7c:a9:
                    6d:11:86:bd:1c:6b:42:62:02:41:5b:80:88:ef:c1:
                    9a:b8:cb:fe:88:09:a4:0a:9c:9a:34:ad:b4:ea:8f:
                    8d:08:de:f5:86:4f:01:d4:71:54:a7:36:a8:d4:10:
                    05:13:2c:fc:42:d7:e2:22:3e:c8:2e:a4:5b:d6:26:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2D:B1:69:8A:A7:CE:87:2C:F3:60:B9:61:66:02:87:70:95:1A:AF
            X509v3 Authority Key Identifier:
                keyid:15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:24:5e:a0:83:f9:0b:04:33:11:aa:41:65:cb:68:11:39:
         92:3e:05:15:d6:37:3c:5b:0e:8d:d1:ad:02:50:a8:05:41:29:
         f3:89:de:ae:6d:26:f2:61:a7:fa:37:6f:60:0c:c0:42:1d:75:
         46:c6:fa:b1:08:56:39:88:11:97:c1:d8:94:6c:63:d1:4a:e3:
         4a:ef:c2:99:13:0e:70:ee:be:5a:75:08:e2:78:41:a6:7a:92:
         fc:eb:05:c3:1c:b8:20:78:35:b0:be:ee:61:30:dc:82:86:6f:
         fa:05:5a:a5:cb:47:8a:de:ca:b8:e2:5f:0f:c3:3a:3e:37:39:
         09:f5:de:19:29:65:9c:17:36:cb:0d:8a:6b:2f:55:8f:2f:49:
         ae:56:2b:1e:06:44:58:fc:1d:d4:4d:7b:f9:84:2c:a7:42:2c:
         b4:b4:c9:73:4a:9f:a6:c0:7d:5e:95:18:17:44:9b:0b:3d:5e:
         f9:4f:63:b6:7b:54:39:2c:75:47:53:b6:ee:95:3b:3f:cb:4f:
         56:7a:f4:79:bd:30:47:7e:bb:7d:8f:9c:00:dc:82:51:89:ff:
         d7:cd:88:02:fb:5d:e0:71:fa:22:ae:7d:f7:7f:ab:32:3e:0e:
         c6:3b:d0:8e:21:15:01:fd:ec:ff:a6:79:69:68:32:4b:27:0a:
         4e:19:99:b1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTUx
MDNBRDlBMTVEN0U0MTdDNjcwODc3OTNENTE0Q0YyMzhBRjI1NDAeFw0yNTA0Mjgx
OTM2NTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENEMkRCMTY5OEFBN0NF
ODcyQ0YzNjBCOTYxNjYwMjg3NzA5NTFBQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4sOz5r4oixJL1HJHCJnN0xPv8N7isnVvQdZrxr3CRb/DyHhcG
ODkUhhxEuIPMqYoSMFSp8AoOR+Cjp40iEk1PMntvIPD+noqQue64Ui3qoB/IYNvD
redaUPZl9uNpe0PQNpz41duAwp4bl4busGvDK6/ZIgTjLrzoUDlI/ljwdZL1tYvL
bGXxrNfIADNvN0Bw+mpbajzg6luADn8DX7IuldDSQ6c9hHWUJ2R7gm4zq6fIiAM+
UYb40mJREAjPoO58qW0Rhr0ca0JiAkFbgIjvwZq4y/6ICaQKnJo0rbTqj40I3vWG
TwHUcVSnNqjUEAUTLPxC1+IiPsgupFvWJrRnAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUzS2xaYqnzocs82C5YWYCh3CVGq8wHwYDVR0jBBgwFoAUFRA62aFdfkF8Zwh3
k9UUzyOK8lQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3
Ni9GUkE2MmFGZGZrRjhad2gzazlVVXp5T0s4bFEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0ZSQTYyYUZkZmtGOFp3aDNrOVVVenlPSzhsUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNzYvRlJBNjJhRmRma0Y4
WndoM2s5VVV6eU9LOGxRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAD/AJF6gg/kLBDMRqkFly2gROZI+BRXWNzxbDo3RrQJQqAVBKfOJ3q5tJvJh
p/o3b2AMwEIddUbG+rEIVjmIEZfB2JRsY9FK40rvwpkTDnDuvlp1COJ4QaZ6kvzr
BcMcuCB4NbC+7mEw3IKGb/oFWqXLR4reyrjiXw/DOj43OQn13hkpZZwXNssNimsv
VY8vSa5WKx4GRFj8HdRNe/mELKdCLLS0yXNKn6bAfV6VGBdEmws9XvlPY7Z7VDks
dUdTtu6VOz/LT1Z69Hm9MEd+u32PnADcglGJ/9fNiAL7XeBx+iKuffd/qzI+DsY7
0I4hFQH97P+meWloMksnCk4ZmbE=
-----END CERTIFICATE-----