Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft
File:                     pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft (raw, json)
Hash identifier:          Nb+M5dypxTcBjfJmgCTB7E0bbpyvm6QIGPzPs1oFpfo=
Subject key identifier:   AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B
Authority key identifier: A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4
Certificate issuer:       /CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4
Certificate serial:       061D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft
Manifest number:          061D
Signing time:             Mon 28 Apr 2025 19:41:27 +0000
Manifest this update:     Mon 28 Apr 2025 19:41:27 +0000
Manifest next update:     Tue 29 Apr 2025 01:41:27 +0000
Files and hashes:         1: pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl (hash: IkGw1VTlecUg74DVnLQCUeBfBfV0xOWW7IbSFEYtR8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E808D7DB52F1C0CA0CD3ADAF67B4CD2D51CBC4
        Validity
            Not Before: Apr 28 19:41:27 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=AAE353CF829C997E97DA5A7218E20D6338F6E57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:89:a9:dc:32:8c:41:48:14:7e:01:c2:c1:
                    24:1e:8c:32:91:86:49:0f:04:c3:54:bb:af:16:1c:
                    e6:81:ca:ad:5e:93:ae:c8:fc:3b:e8:66:88:d3:40:
                    95:e4:33:c0:75:de:8c:a3:07:6f:4e:7d:76:1a:4a:
                    08:36:01:53:36:22:ca:c9:1c:c4:72:05:ec:68:8f:
                    5f:8d:64:7a:70:30:9d:0f:c4:96:0c:35:9c:35:3f:
                    75:13:fb:79:a1:41:e2:4b:83:94:06:0a:98:ba:83:
                    32:2f:1a:5d:df:79:12:6b:7c:a3:f4:d9:07:bd:89:
                    aa:99:a8:99:72:e8:73:13:bc:82:84:77:50:60:64:
                    d2:fc:16:05:b3:8f:32:62:16:de:1e:0d:72:05:05:
                    a6:e7:20:f4:8f:a1:05:d7:60:67:d3:e6:84:b3:4c:
                    9e:91:60:50:45:70:2c:c2:f0:6c:25:80:af:95:53:
                    75:3d:ef:37:3c:4d:bf:c3:a2:f3:87:8f:74:a2:da:
                    36:63:7b:06:6f:32:e3:c8:f2:bc:e3:99:12:1c:5a:
                    fa:24:be:5d:f5:39:00:19:a3:0a:70:8d:fe:7a:3c:
                    11:66:36:2f:22:4f:d9:4d:94:22:4e:26:dd:df:15:
                    21:e5:5d:b6:7b:7f:1f:ca:e6:7e:92:1b:1a:74:a1:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:53:CF:82:9C:99:7E:97:DA:5A:72:18:E2:0D:63:38:F6:E5:7B
            X509v3 Authority Key Identifier:
                keyid:A4:E8:08:D7:DB:52:F1:C0:CA:0C:D3:AD:AF:67:B4:CD:2D:51:CB:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3294/pOgI19tS8cDKDNOtr2e0zS1Ry8Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:97:d4:9e:68:05:e5:c7:08:e8:35:31:10:d8:08:8f:1b:
         30:f9:28:52:9f:92:2d:cf:e6:c7:60:23:a2:57:fe:a2:25:9b:
         87:17:a2:44:c7:aa:c1:71:05:35:25:13:7f:f4:4e:9b:7b:d0:
         98:74:75:f3:6a:4a:bd:5f:d3:01:da:9e:71:fb:03:e7:0d:7e:
         fe:20:0c:b7:b9:fb:e1:58:17:54:98:f0:e9:b7:3d:56:bc:7e:
         2d:7b:fa:fa:2e:95:fe:52:1f:07:97:40:d1:da:fd:7a:23:ba:
         4b:9e:1d:22:6b:67:de:9b:51:8b:1e:8f:a8:d3:42:c4:97:71:
         bc:b8:16:b4:6c:47:54:4e:ae:4e:f6:ac:fe:fe:e9:33:80:e0:
         c1:cc:38:e8:c6:39:e0:1b:06:6c:a8:8b:2e:f2:e3:9c:56:8a:
         90:24:57:fb:57:02:7a:a2:f1:00:20:b3:74:f9:f6:0c:61:9f:
         4e:1c:61:e8:50:67:0c:f8:1b:e4:d5:0b:a4:94:cf:16:db:6f:
         69:2f:a7:7a:c0:7a:b4:1a:4a:67:6e:b8:34:55:28:63:f8:e7:
         02:e4:e6:43:ca:83:a2:17:52:23:9c:f0:54:f7:3d:90:56:1f:
         25:50:ef:7e:4e:3c:f9:e7:87:45:fe:02:e8:da:e3:8d:4a:ca:
         63:58:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----