Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
File:                     5odkXtr0lXS_3oajcUhO5DBK3n4.mft (raw, json)
Hash identifier:          HYoByaaakhK9kxH9DKiQOWlOfIpMIBdnjsWtYni9MTI=
Subject key identifier:   C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
Authority key identifier: E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E
Certificate issuer:       /CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
Certificate serial:       07C8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
Manifest number:          07C8
Signing time:             Mon 28 Apr 2025 19:38:22 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:22 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:22 +0000
Files and hashes:         1: 5odkXtr0lXS_3oajcUhO5DBK3n4.crl (hash: xnS3rTXkr70vMP1n7Hj1Bk+QwHg6ZXDLZIeoIhOP8uU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
        Validity
            Not Before: Apr 28 19:38:22 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=C487014326D8A3CC22137031939879396FAD370A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:95:22:d4:0b:59:32:63:74:40:f9:ee:30:
                    d0:c7:54:11:e5:a7:b8:55:c1:9f:77:7f:1d:5c:8f:
                    dc:48:ae:b3:31:9b:d3:8c:3f:49:9c:14:09:9a:c2:
                    26:46:21:6c:e0:a9:5b:54:1f:8d:a0:b8:ba:55:d9:
                    5a:b0:bd:69:50:25:ef:73:f8:92:53:8e:58:67:48:
                    27:87:02:72:8d:49:43:02:2d:ce:40:a3:d6:7b:43:
                    3d:a9:ed:f2:ec:e6:ee:73:cc:fc:89:91:ea:4b:93:
                    07:4f:3a:e4:66:e7:a3:a1:16:ed:16:c0:c0:b6:32:
                    e6:b3:d7:88:88:73:92:e0:e9:f7:64:92:d1:dc:7b:
                    14:80:08:e6:5a:93:9b:f0:f2:03:2b:2a:74:f5:53:
                    75:5c:c2:0b:f3:8f:f6:5f:40:2a:98:35:c1:63:0e:
                    07:4b:9f:ab:94:11:e5:d5:bb:a2:74:ae:6b:f2:60:
                    28:fe:8f:57:aa:57:d9:92:fc:ee:ec:d1:bc:38:7c:
                    8c:74:7f:24:e7:e5:1e:eb:ab:4c:a9:97:c9:0b:39:
                    82:1a:14:cb:da:b3:14:09:d6:d1:ac:a8:d1:1a:11:
                    a3:5b:5a:be:63:f5:b8:2a:27:b4:69:74:1b:36:97:
                    23:a8:1a:af:d4:0d:8a:85:db:fc:33:39:65:ad:33:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
            X509v3 Authority Key Identifier:
                keyid:E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bd:f9:f4:40:fd:35:3b:19:0e:07:43:51:cc:50:80:99:86:
         51:ad:ec:26:98:00:06:55:1e:11:4e:3c:06:12:47:e7:d3:d6:
         85:25:3e:65:99:74:68:4d:9e:e9:c3:3f:48:63:e6:43:63:b7:
         1e:df:7a:32:89:b8:2d:43:fb:25:c5:2b:a0:52:41:a6:5c:61:
         ed:9f:8e:c1:f3:de:7b:fa:23:ff:50:be:f5:8c:05:69:0a:e1:
         7f:0c:e6:e6:c6:04:89:34:7e:1b:63:38:ec:bb:54:e5:c2:99:
         ad:14:dc:5c:86:03:9f:f8:09:95:52:9f:d8:8f:9b:3c:5f:15:
         36:39:41:fa:f7:56:4c:10:af:02:28:3c:74:2a:31:22:1d:9f:
         4e:a3:7f:d5:f1:20:51:dd:06:38:31:7d:8a:fd:b6:8b:f9:1b:
         67:9e:90:35:67:99:57:12:9b:fc:6c:b5:40:a6:95:27:5a:fe:
         0c:01:a0:6a:ab:ef:aa:de:6c:48:3e:a0:a0:dd:11:f9:db:00:
         b6:08:30:6a:55:5a:e3:2a:b6:8d:9f:4e:19:6b:b4:85:b7:95:
         68:0f:10:29:aa:b8:37:df:bf:e4:6f:80:73:b9:74:9a:55:43:
         8e:84:b7:0b:47:dc:0f:c9:d7:3b:76:2d:58:0e:09:ef:f4:38:
         1f:5e:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----