Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/OLYZ9BoGgZD-7QQul78QRCJYnkE.mft
File:                     OLYZ9BoGgZD-7QQul78QRCJYnkE.mft (raw, json)
Hash identifier:          BWA3d9HRQZGEj50qYIEwsg5nWHpFYiWDM9QO7OoAnz4=
Subject key identifier:   79:5B:12:F4:8C:5A:66:12:2D:A2:1C:C6:79:9E:22:6B:D9:9D:7B:6F
Authority key identifier: 38:B6:19:F4:1A:06:81:90:FE:ED:04:2E:97:BF:10:44:22:58:9E:41
Certificate issuer:       /CN=38B619F41A068190FEED042E97BF104422589E41
Certificate serial:       06E9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OLYZ9BoGgZD-7QQul78QRCJYnkE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/OLYZ9BoGgZD-7QQul78QRCJYnkE.mft
Manifest number:          06E9
Signing time:             Mon 28 Apr 2025 19:36:39 +0000
Manifest this update:     Mon 28 Apr 2025 19:36:39 +0000
Manifest next update:     Tue 29 Apr 2025 01:36:39 +0000
Files and hashes:         1: OLYZ9BoGgZD-7QQul78QRCJYnkE.crl (hash: Zaupk5MMqn2rn/7PKaXs+tXtSELNw/VFp2APJw2IG3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38B619F41A068190FEED042E97BF104422589E41
        Validity
            Not Before: Apr 28 19:36:39 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=795B12F48C5A66122DA21CC6799E226BD99D7B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:a1:70:f2:c2:e8:60:d9:f8:60:61:8c:fd:
                    09:ca:51:3a:d4:1d:00:9b:34:cc:42:ae:a0:59:dd:
                    40:63:ea:9f:e8:62:43:e8:68:88:5e:59:10:59:8c:
                    a1:70:97:ef:1e:59:b7:0e:53:b6:61:f3:d2:c5:a2:
                    37:26:ec:43:c3:a2:c6:ce:10:50:49:f1:fd:a0:72:
                    1b:b7:3c:d8:12:97:fc:de:82:28:93:d7:1d:21:cb:
                    f1:ad:44:d0:04:65:89:c1:84:17:28:76:fd:14:13:
                    c9:aa:03:56:ad:8b:85:e8:19:5a:c4:e4:0c:3b:2c:
                    07:c5:20:78:0b:7d:58:fe:72:4a:37:56:80:37:63:
                    c3:d1:9c:eb:9b:e9:49:84:bf:9a:65:fb:3c:6a:37:
                    93:f5:68:62:03:50:8b:f1:0d:83:6f:24:35:2e:4f:
                    0c:25:8b:a7:9d:4e:52:28:60:b1:d9:9d:f6:11:55:
                    b5:97:69:15:cc:1c:4f:86:6e:06:c5:1f:43:59:95:
                    15:16:d3:f2:65:8b:9a:f0:ee:c9:25:84:61:43:34:
                    e3:0b:6e:43:a0:82:0f:e2:92:5e:e5:fd:a9:28:4a:
                    da:e0:af:4d:ff:70:5e:8c:39:53:6f:37:65:60:ad:
                    24:c3:04:74:55:1f:9e:34:1c:ad:3a:7f:96:6b:a3:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5B:12:F4:8C:5A:66:12:2D:A2:1C:C6:79:9E:22:6B:D9:9D:7B:6F
            X509v3 Authority Key Identifier:
                keyid:38:B6:19:F4:1A:06:81:90:FE:ED:04:2E:97:BF:10:44:22:58:9E:41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/OLYZ9BoGgZD-7QQul78QRCJYnkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OLYZ9BoGgZD-7QQul78QRCJYnkE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/OLYZ9BoGgZD-7QQul78QRCJYnkE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:01:84:ea:f5:f2:ff:f4:93:2c:0e:16:c4:98:67:6d:d4:
         9f:9f:cd:22:15:19:87:80:b5:cd:c7:6c:3c:10:36:01:cb:36:
         93:d8:57:ce:a1:50:8d:e8:4c:7b:f7:02:de:71:b9:26:4a:97:
         51:76:88:93:71:b4:a1:15:7d:c2:2a:92:a5:86:62:fe:c3:f7:
         d9:69:87:a6:a1:6f:e8:a1:99:c6:6d:32:58:28:86:9d:ef:a4:
         39:bb:2f:62:ed:2a:0c:42:88:03:32:a7:29:00:53:66:d7:2a:
         ba:03:56:96:43:48:3a:f1:a0:d6:d9:1f:cd:19:fc:b4:1c:9d:
         3a:b7:66:b9:3f:39:fd:d9:5c:84:67:61:61:13:f8:e3:b9:82:
         8a:f8:c3:c5:cb:9d:18:5f:f3:88:df:28:62:d3:97:96:c5:6a:
         64:ac:6f:ff:10:17:e9:87:fb:4f:0c:71:d3:60:ea:4b:7c:40:
         66:06:ba:95:0f:05:e7:32:3c:97:8b:45:4e:3b:c4:a4:b0:8d:
         b1:5e:fd:ec:65:f6:22:ad:dc:7d:4d:c1:ef:72:3b:29:b6:2d:
         44:c0:ca:f3:e5:93:ed:e0:a7:96:3b:56:1f:be:1f:d0:29:9d:
         d0:5d:5a:61:5e:03:67:30:4a:0a:69:8e:f4:13:b4:12:4f:f9:
         5c:1f:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----