Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
File:                     ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft (raw, json)
Hash identifier:          rXVIMHYPszmyKWxpvDnra0pgB4YxmfA92qruYwkJUmo=
Subject key identifier:   7C:CC:E5:F9:52:59:DA:47:95:EE:28:77:18:0C:7D:C6:40:70:B1:E4
Authority key identifier: 7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2
Certificate issuer:       /CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2
Certificate serial:       06B7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
Manifest number:          06B7
Signing time:             Mon 28 Apr 2025 19:39:02 +0000
Manifest this update:     Mon 28 Apr 2025 19:39:02 +0000
Manifest next update:     Tue 29 Apr 2025 01:39:02 +0000
Files and hashes:         1: ezbMMQZhv7l_8x7_1Ca0mpyESPI.crl (hash: XukGGxmWaUJ+D6TKhNyZNOOZQqUf4bl1i18rNXBzW98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2
        Validity
            Not Before: Apr 28 19:39:02 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=7CCCE5F95259DA4795EE2877180C7DC64070B1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:46:2b:c2:aa:92:4d:1e:f1:af:68:be:04:
                    b2:4b:e6:ce:d6:56:f8:ba:99:f7:4f:f6:ef:70:6c:
                    5d:93:65:1d:4a:38:0e:38:d8:7c:9c:2d:0c:87:97:
                    df:ca:7d:14:ac:a9:0c:82:aa:68:6a:61:c2:97:31:
                    14:63:b7:a2:44:c1:51:f1:c9:b8:06:c7:52:e6:d7:
                    3e:f6:5b:9b:05:05:34:3d:e0:23:ca:0e:0b:ce:ba:
                    52:96:0c:15:aa:79:d9:0b:c7:82:9c:f0:ba:56:17:
                    65:bf:13:74:ea:a6:0f:ff:3a:16:09:7c:64:cb:61:
                    60:b5:6c:26:87:c9:2f:61:06:78:28:0c:9d:13:1c:
                    17:bd:4b:d6:b3:8f:02:eb:8c:cc:4a:63:3d:e3:ff:
                    68:c8:1f:36:6d:47:0a:76:e7:17:49:7e:5c:6a:a7:
                    05:16:42:79:8a:bb:aa:ce:89:4e:ee:38:a2:d8:47:
                    92:08:4e:bb:c2:f0:84:3a:53:3d:6b:98:e7:13:bf:
                    cd:91:de:84:1a:d6:9f:38:41:ad:0d:f5:e1:31:f0:
                    fd:6e:58:1f:f3:e3:2b:c9:bb:f9:ae:9d:0a:2b:cd:
                    a7:0d:bf:48:91:f2:24:3c:de:33:55:60:2e:7f:f7:
                    00:1f:70:7b:b7:c9:a6:1b:d7:21:24:23:d7:d5:26:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:E5:F9:52:59:DA:47:95:EE:28:77:18:0C:7D:C6:40:70:B1:E4
            X509v3 Authority Key Identifier:
                keyid:7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d3:75:93:5d:df:44:b6:98:ad:39:8a:26:dd:82:90:5e:e0:
         fc:46:42:4e:c1:c0:5a:29:20:9e:e7:19:6c:54:6d:b1:ae:61:
         9b:e4:ae:04:58:3d:a3:86:33:a1:6f:dc:dd:5a:95:50:e8:94:
         e6:07:db:38:a3:75:ab:de:78:54:78:cb:52:d6:fc:e7:69:39:
         c6:3d:0f:93:c4:1f:4b:8d:17:fc:84:ac:4d:32:6c:9a:7b:57:
         fa:33:57:22:f8:b6:8f:88:ed:42:e8:b3:92:56:9f:09:bf:8b:
         00:2c:13:f1:24:bf:0b:a0:78:42:11:e3:13:e4:50:23:15:7f:
         1c:3a:c6:f2:cf:4f:2a:59:6c:7d:d8:4d:49:a0:de:9c:9e:e9:
         7c:99:4d:24:7f:c8:31:33:e2:b6:31:3e:60:cf:a6:ae:68:34:
         f4:c7:99:ac:0b:67:28:81:82:89:56:aa:f2:de:57:ae:6b:0d:
         ec:56:c0:26:3e:8d:5c:13:5c:d5:a9:d0:b6:5d:96:2f:ce:96:
         4d:c5:fa:ac:c0:41:a1:3a:d1:61:23:29:cb:42:95:db:27:05:
         34:6a:1d:86:81:3a:75:2e:16:95:78:40:0b:aa:9a:f8:30:92:
         da:c1:12:7e:b9:21:6d:76:18:77:a3:33:30:ca:66:57:85:3b:
         af:80:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----