Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft
File:                     REpvrwhyRfumTIvW5EyRKvs9IGY.mft (raw, json)
Hash identifier:          vYLrIjl30EOBh7WiGGs6fBGypj1M1+e/GpY772Ud5b4=
Subject key identifier:   1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92
Authority key identifier: 44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66
Certificate issuer:       /CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066
Certificate serial:       039E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft
Manifest number:          039E
Signing time:             Mon 28 Apr 2025 19:38:06 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:06 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:06 +0000
Files and hashes:         1: REpvrwhyRfumTIvW5EyRKvs9IGY.crl (hash: ZtucIVGM7RMvdeyU6ehWpHCRGQ9EIQ7eIpQJn2SinG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444A6FAF087245FBA64C8BD6E44C912AFB3D2066
        Validity
            Not Before: Apr 28 19:38:06 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=1AB861E2929A89AC6582D35AAD01A279CA426392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:79:8f:a0:8b:63:12:f9:e5:9d:c1:55:0a:
                    09:d9:71:50:88:eb:61:0a:93:7b:74:0e:80:b1:46:
                    0e:7a:1a:a5:2f:0b:0b:51:b7:6d:82:d7:3b:a1:1f:
                    8f:ce:71:78:39:27:2d:1a:42:61:ff:95:30:a5:d1:
                    f7:44:a2:ed:fc:cb:27:33:46:f1:b0:2f:b3:86:7c:
                    67:66:1d:d7:63:38:b0:51:25:b3:ba:d6:e0:42:43:
                    07:6e:68:b8:6c:b3:17:df:1c:ec:37:21:24:db:9d:
                    43:2e:91:ed:73:a6:8d:b2:85:dc:c1:74:cd:ea:ef:
                    77:2e:b6:30:94:85:c0:37:29:1d:b4:82:27:d5:9c:
                    63:c6:5c:2c:72:0a:e1:9c:51:d0:9a:69:ea:c3:3c:
                    44:9e:fc:b0:cf:25:c1:0d:dd:82:f2:67:a8:97:9e:
                    00:b0:83:1e:17:ac:2a:d0:c1:56:13:b0:d7:15:68:
                    17:9b:96:05:69:b6:ee:d6:48:56:ad:82:f1:0a:8f:
                    9b:27:c4:05:fa:5e:6e:95:26:f5:95:02:b1:73:19:
                    af:97:e7:8f:b0:63:69:9c:de:4e:8f:b3:fd:af:ec:
                    e4:5e:22:31:f3:fd:50:e7:6b:26:7a:16:a1:9c:06:
                    6d:b1:69:52:1d:6b:14:f6:3c:e9:17:bc:55:44:3e:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:61:E2:92:9A:89:AC:65:82:D3:5A:AD:01:A2:79:CA:42:63:92
            X509v3 Authority Key Identifier:
                keyid:44:4A:6F:AF:08:72:45:FB:A6:4C:8B:D6:E4:4C:91:2A:FB:3D:20:66

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/REpvrwhyRfumTIvW5EyRKvs9IGY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/REpvrwhyRfumTIvW5EyRKvs9IGY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:36:be:10:a8:fe:67:67:1e:d5:8f:f7:45:a7:d0:52:c6:
         17:b5:e9:90:d1:e5:ed:8f:d2:9e:aa:78:f0:36:a9:30:cf:f9:
         79:9c:59:49:6f:d3:b8:55:c9:d3:e7:8b:03:e2:04:d0:34:10:
         27:e9:92:c1:7d:d8:8c:25:50:b9:e2:19:d9:eb:9b:db:71:83:
         f7:bd:dc:ba:93:de:6d:39:89:9e:bd:da:27:98:d0:ab:ff:8a:
         9b:44:90:16:ee:6e:64:bc:a2:c9:70:e8:64:c3:91:03:f5:e2:
         0e:7e:30:b7:f9:56:bd:00:65:d0:fe:4b:8e:ad:3f:a2:88:1e:
         b6:b1:5b:b5:7a:77:6c:d6:2b:d7:d1:6d:16:d1:c4:18:72:e1:
         0e:12:df:ad:39:2f:0b:21:62:64:75:bc:04:a8:65:12:b0:46:
         01:d3:3d:9c:a3:a3:bb:64:48:69:9c:83:78:28:3b:2f:5e:ba:
         f5:6c:97:0b:9b:c6:48:e4:58:0e:34:a1:9f:79:10:ed:0d:63:
         33:1e:42:75:32:2f:22:7b:5e:ad:9b:42:d1:67:d5:8b:1d:93:
         55:6d:25:60:a0:b1:01:6d:37:ab:6e:7b:e1:ef:9a:82:71:19:
         50:ad:07:85:85:86:42:d3:73:64:25:c0:39:25:05:42:53:d9:
         80:fd:fd:a2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ0
QTZGQUYwODcyNDVGQkE2NEM4QkQ2RTQ0QzkxMkFGQjNEMjA2NjAeFw0yNTA0Mjgx
OTM4MDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBQjg2MUUyOTI5QTg5
QUM2NTgyRDM1QUFEMDFBMjc5Q0E0MjYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDATXmPoItjEvnlncFVCgnZcVCI62EKk3t0DoCxRg56GqUvCwtR
t22C1zuhH4/OcXg5Jy0aQmH/lTCl0fdEou38yyczRvGwL7OGfGdmHddjOLBRJbO6
1uBCQwduaLhssxffHOw3ISTbnUMuke1zpo2yhdzBdM3q73cutjCUhcA3KR20gifV
nGPGXCxyCuGcUdCaaerDPESe/LDPJcEN3YLyZ6iXngCwgx4XrCrQwVYTsNcVaBeb
lgVptu7WSFatgvEKj5snxAX6Xm6VJvWVArFzGa+X54+wY2mc3k6Ps/2v7OReIjHz
/VDnayZ6FqGcBm2xaVIdaxT2POkXvFVEPmZFAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUGrhh4pKaiaxlgtNarQGiecpCY5IwHwYDVR0jBBgwFoAUREpvrwhyRfumTIvW
5EyRKvs9IGYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5
NS9SRXB2cndoeVJmdW1USXZXNUV5Ukt2czlJR1kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1JFcHZyd2h5UmZ1bVRJdlc1RXlSS3ZzOUlHWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvUkVwdnJ3aHlSZnVt
VEl2VzVFeVJLdnM5SUdZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHZ8Nr4QqP5nZx7Vj/dFp9BSxhe16ZDR5e2P0p6qePA2qTDP+XmcWUlv07hV
ydPniwPiBNA0ECfpksF92IwlULniGdnrm9txg/e93LqT3m05iZ692ieY0Kv/iptE
kBbubmS8oslw6GTDkQP14g5+MLf5Vr0AZdD+S46tP6KIHraxW7V6d2zWK9fRbRbR
xBhy4Q4S3605LwshYmR1vASoZRKwRgHTPZyjo7tkSGmcg3goOy9euvVslwubxkjk
WA40oZ95EO0NYzMeQnUyLyJ7Xq2bQtFn1Ysdk1VtJWCgsQFtN6tue+HvmoJxGVCt
B4WFhkLTc2QlwDklBUJT2YD9/aI=
-----END CERTIFICATE-----