Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft
File:                     RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft (raw, json)
Hash identifier:          /vTR1VhpvmFBgiw6NlRQa5Z2Dw15PxARv4WJ0lP+j7Y=
Subject key identifier:   53:A4:BE:23:22:E5:A6:5A:81:7A:09:09:0C:F3:FC:7E:0F:00:F9:3E
Authority key identifier: 46:73:0C:92:06:0F:7A:34:50:C3:14:99:2B:23:56:E4:8A:77:E4:88
Certificate issuer:       /CN=46730C92060F7A3450C314992B2356E48A77E488
Certificate serial:       05F2
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RnMMkgYPejRQwxSZKyNW5Ip35Ig.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft
Manifest number:          05F2
Signing time:             Mon 28 Apr 2025 19:38:44 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:44 +0000
Manifest next update:     Tue 29 Apr 2025 01:38:44 +0000
Files and hashes:         1: RnMMkgYPejRQwxSZKyNW5Ip35Ig.crl (hash: FI08adglj14hxBcFTGGd5VY7VX6uYAHO/fv5A0pwzNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46730C92060F7A3450C314992B2356E48A77E488
        Validity
            Not Before: Apr 28 19:38:44 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=53A4BE2322E5A65A817A09090CF3FC7E0F00F93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:14:27:22:f0:a5:d5:85:c0:e4:be:bf:cb:
                    35:04:3b:44:6c:a6:c1:5c:6d:d6:37:b2:13:54:8a:
                    54:a4:15:8e:e5:11:9a:64:71:92:f6:07:b3:78:58:
                    1a:65:f3:94:84:7a:54:2a:85:bc:aa:5b:56:e2:d6:
                    11:3b:0e:4b:e8:11:b5:35:41:20:55:d0:56:a2:0d:
                    71:9b:19:d6:c2:0c:8f:5a:6c:ee:13:05:6e:a1:dd:
                    45:e7:e0:75:cf:ec:02:7c:13:c0:ad:e2:b5:00:fb:
                    73:98:b6:fd:c5:60:13:57:fc:ad:32:c0:da:d6:35:
                    35:8d:7d:b8:9c:bb:ad:52:dc:eb:6c:00:e5:79:46:
                    28:9c:9b:29:c6:57:1b:ac:99:a1:17:fb:c2:f6:f9:
                    a9:3b:89:76:6f:bb:5f:59:d9:1a:a0:62:88:5f:71:
                    33:5f:cf:61:fa:5b:d8:59:a6:7a:13:a8:9e:c4:62:
                    25:dd:54:9f:79:29:ce:56:9e:ef:5f:d9:d0:e7:f0:
                    d5:b6:1b:61:4f:59:d7:36:b8:e3:76:89:b0:0e:b3:
                    7d:1e:b1:af:10:01:2c:13:aa:d1:9a:79:19:cc:92:
                    bf:eb:96:5c:0e:3f:a7:6c:02:57:fc:c6:b0:20:73:
                    ed:ab:ae:da:7b:ff:59:72:12:3b:5e:19:c1:75:82:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A4:BE:23:22:E5:A6:5A:81:7A:09:09:0C:F3:FC:7E:0F:00:F9:3E
            X509v3 Authority Key Identifier:
                keyid:46:73:0C:92:06:0F:7A:34:50:C3:14:99:2B:23:56:E4:8A:77:E4:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RnMMkgYPejRQwxSZKyNW5Ip35Ig.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/RnMMkgYPejRQwxSZKyNW5Ip35Ig.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:ba:99:0b:a5:19:33:9b:78:49:b8:0e:d6:58:bf:95:a4:
         70:a9:90:44:5c:eb:d5:cd:17:51:1c:69:ba:6c:25:cb:75:25:
         fc:ad:b1:e8:03:8c:50:74:3a:b2:11:98:0d:37:66:12:86:ff:
         2f:ad:50:1d:8b:20:39:3b:d5:d4:b0:72:60:f1:61:c1:4c:3b:
         f5:cc:2d:e9:bf:e6:1f:ad:33:72:66:7a:7c:b7:0f:3e:41:d6:
         98:f4:cc:3a:a2:f9:90:53:63:0b:51:45:b6:fd:d4:8e:c8:0a:
         4a:fe:7b:8b:cf:a8:0e:bf:c1:18:91:09:b0:22:5d:5e:2e:27:
         be:93:d9:ac:b5:79:03:b8:19:16:f9:5a:e5:39:96:b7:97:4f:
         07:7e:ad:f3:ce:0f:ca:a9:7c:2c:bb:a6:fc:eb:34:62:00:57:
         e4:80:e2:43:6e:22:96:38:f4:a4:a9:0a:fb:c5:2f:59:b3:58:
         93:9c:b5:21:94:24:2f:c2:d3:11:91:48:92:5b:9b:e6:0b:50:
         bf:60:e9:4f:dc:02:cd:08:d0:63:a1:1a:4f:ae:2b:9e:1f:c4:
         fd:39:85:7e:97:cf:5c:ea:78:f5:f7:2f:f4:29:ed:10:99:58:
         7f:6f:d2:38:ba:47:ed:da:0e:a3:37:c0:ce:71:0e:10:3f:3e:
         05:8c:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----