Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft
File:                     kOpMYj8LihBi2qgOqaj0R49Z3oU.mft (raw, json)
Hash identifier:          NFy/IpwQfhwwkpdbqfTn9jATEyAuTAkAXeqqi2Q2VaA=
Subject key identifier:   14:3E:EE:FE:12:08:DB:B6:7D:A9:53:F5:54:2B:95:1C:DF:56:0F:F0
Authority key identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85
Certificate issuer:       /CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85
Certificate serial:       0789
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft
Manifest number:          0789
Signing time:             Mon 28 Apr 2025 19:41:08 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:08 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:08 +0000
Files and hashes:         1: kOpMYj8LihBi2qgOqaj0R49Z3oU.crl (hash: ZxtkSSjwq3v6YuKxB+1ZOMtvmyYFHlCv/95jiufCY7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85
        Validity
            Not Before: Apr 28 19:41:08 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=143EEEFE1208DBB67DA953F5542B951CDF560FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:e8:f9:51:72:bd:f8:a3:49:d8:ab:7e:aa:
                    a3:cc:28:a1:fb:5b:74:e3:a0:5f:7b:99:a5:f9:26:
                    e8:12:6d:46:15:bc:ca:55:de:ff:37:96:fa:17:70:
                    9d:8f:52:40:b7:7c:97:d9:d6:e1:87:3e:3a:c1:fd:
                    21:66:93:03:c3:4e:0c:85:c6:28:8b:0d:e4:2e:71:
                    f4:12:85:5c:63:2f:8c:28:d7:66:ad:e0:d5:48:fb:
                    f2:c5:5c:67:42:f7:f8:30:33:74:99:56:39:80:a0:
                    ed:66:5b:7c:88:85:fa:59:05:b1:21:67:0a:b6:1e:
                    cc:2a:cd:79:f5:61:48:18:95:dd:61:50:ce:e6:d5:
                    d8:87:91:08:36:9e:f3:9a:e7:a2:be:53:06:8e:45:
                    04:93:bb:04:07:75:58:39:7d:0a:ce:fd:52:42:c9:
                    e6:66:19:ad:15:cb:11:ae:35:a6:de:87:44:48:82:
                    e0:31:06:b7:98:b9:6b:e1:22:7b:07:82:22:96:41:
                    ae:af:51:d0:51:c3:c9:02:79:e8:0d:0a:cd:98:ef:
                    66:fc:fd:a2:86:c0:a3:0b:35:84:4b:6b:7d:57:93:
                    14:bd:94:2b:a0:4b:48:0b:58:a2:1a:6e:f3:b4:e2:
                    c0:97:59:25:20:02:bd:ed:c6:8c:b4:fa:63:53:03:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3E:EE:FE:12:08:DB:B6:7D:A9:53:F5:54:2B:95:1C:DF:56:0F:F0
            X509v3 Authority Key Identifier:
                keyid:90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:48:51:7e:44:c8:72:09:84:c2:52:67:5f:24:f0:8b:8a:15:
         df:72:7a:a2:78:53:c8:77:84:fa:3f:40:e2:7b:2f:09:bf:ae:
         24:57:a8:7d:43:cb:a3:78:8a:38:d3:01:aa:e0:01:78:9d:9e:
         cc:3a:94:d8:40:82:c7:d5:fc:73:e0:72:5d:94:1f:45:0d:a2:
         a7:1f:e4:3e:95:fe:0b:52:7d:11:a4:15:05:7c:65:b1:55:6a:
         28:91:c1:25:52:28:82:56:a1:40:e0:eb:b7:79:93:3d:07:b2:
         11:59:6b:9f:a8:f1:ab:fa:e9:ca:dc:e6:c7:92:24:ce:6d:79:
         34:43:68:9f:7f:bf:e4:04:1f:13:6f:48:ef:ca:b2:88:2c:04:
         11:4a:66:70:0e:03:93:55:3d:0f:4c:6d:59:f0:9a:f2:d9:7c:
         a8:ca:51:f1:53:4a:62:40:87:51:dd:c9:63:14:5e:d7:03:dc:
         dc:0f:9c:f3:4f:3a:0b:1a:22:0f:18:fb:ad:89:e8:bd:40:23:
         9d:1d:71:f5:8c:12:47:f5:07:b7:88:ee:ec:7a:80:59:11:26:
         82:7a:e6:71:ee:94:11:3c:64:40:69:43:8e:d3:1a:0c:a0:ee:
         0d:d2:36:52:10:ef:bc:8e:72:39:f3:8f:7f:a8:33:24:d6:17:
         00:6e:b8:68
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTBF
QTRDNjIzRjBCOEExMDYyREFBODBFQTlBOEY0NDc4RjU5REU4NTAeFw0yNTA0Mjgx
OTQxMDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE0M0VFRUZFMTIwOERC
QjY3REE5NTNGNTU0MkI5NTFDREY1NjBGRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDIej5UXK9+KNJ2Kt+qqPMKKH7W3TjoF97maX5JugSbUYVvMpV
3v83lvoXcJ2PUkC3fJfZ1uGHPjrB/SFmkwPDTgyFxiiLDeQucfQShVxjL4wo12at
4NVI+/LFXGdC9/gwM3SZVjmAoO1mW3yIhfpZBbEhZwq2HswqzXn1YUgYld1hUM7m
1diHkQg2nvOa56K+UwaORQSTuwQHdVg5fQrO/VJCyeZmGa0VyxGuNabeh0RIguAx
BreYuWvhInsHgiKWQa6vUdBRw8kCeegNCs2Y72b8/aKGwKMLNYRLa31XkxS9lCug
S0gLWKIabvO04sCXWSUgAr3txoy0+mNTA5djAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUFD7u/hII27Z9qVP1VCuVHN9WD/AwHwYDVR0jBBgwFoAUkOpMYj8LihBi2qgO
qaj0R49Z3oUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
NS9rT3BNWWo4TGloQmkycWdPcWFqMFI0OVozb1UuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2tPcE1ZajhMaWhCaTJxZ09xYWowUjQ5WjNvVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzUva09wTVlqOExpaEJp
MnFnT3FhajBSNDlaM29VLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIZIUX5EyHIJhMJSZ18k8IuKFd9yeqJ4U8h3hPo/QOJ7Lwm/riRXqH1Dy6N4
ijjTAargAXidnsw6lNhAgsfV/HPgcl2UH0UNoqcf5D6V/gtSfRGkFQV8ZbFVaiiR
wSVSKIJWoUDg67d5kz0HshFZa5+o8av66crc5seSJM5teTRDaJ9/v+QEHxNvSO/K
sogsBBFKZnAOA5NVPQ9MbVnwmvLZfKjKUfFTSmJAh1HdyWMUXtcD3NwPnPNPOgsa
Ig8Y+62J6L1AI50dcfWMEkf1B7eI7ux6gFkRJoJ65nHulBE8ZEBpQ47TGgyg7g3S
NlIQ77yOcjnzj3+oMyTWFwBuuGg=
-----END CERTIFICATE-----