Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
File:                     89605Z7lMyYp7F4LaGZtNuKXN2s.mft (raw, json)
Hash identifier:          NEFtQjvPItVrnzHZq52KwyEaCtRXZ0pd+tQAVrsnrmg=
Subject key identifier:   52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1
Authority key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B
Certificate issuer:       /CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B
Certificate serial:       03E8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
Manifest number:          03E8
Signing time:             Mon 28 Apr 2025 19:40:52 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:52 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:52 +0000
Files and hashes:         1: 89605Z7lMyYp7F4LaGZtNuKXN2s.crl (hash: sPsEipMNq/QweA/HpCGe++YGml8n0w3a1O0Qd1PCpyQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B
        Validity
            Not Before: Apr 28 19:40:52 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=52797665E566FA8A9E8ACF2100B20A2E63FDF8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:22:b1:13:d3:08:92:e7:1f:ab:59:2f:b3:
                    a1:ea:34:eb:d1:89:c7:1a:14:19:ec:00:38:d6:36:
                    20:7b:1c:77:cf:d1:60:76:50:d9:4e:84:9d:1c:c2:
                    be:ca:bf:9a:fe:a3:af:dc:26:2f:87:5a:4c:2f:23:
                    1a:95:b3:31:ce:5c:69:04:ba:33:d5:cf:1a:82:e0:
                    f2:44:9c:fc:6d:7e:a8:9c:46:1f:69:b6:3b:a0:0c:
                    15:9e:82:1c:71:23:fb:0c:7e:e4:95:12:bf:c0:11:
                    3b:56:e2:0d:f2:71:72:b0:b5:cb:4c:0c:bf:7c:42:
                    80:92:a8:63:cb:c0:9a:e1:62:85:35:3d:03:56:b5:
                    ef:74:cf:d6:e3:bc:30:be:e2:f0:57:a0:49:55:74:
                    0a:5c:4a:d7:1c:c8:4c:24:ed:51:a6:36:1c:0c:db:
                    a1:7c:9f:d0:d5:54:e7:26:70:b1:63:f6:4f:a9:ca:
                    70:0a:bb:d9:f8:d2:ee:f7:94:4c:c9:05:f1:03:34:
                    2a:4e:37:8e:ea:08:58:da:3d:2d:42:10:3c:5b:26:
                    f0:2f:5c:06:cc:ca:d8:7b:4b:09:f8:5f:c7:25:fd:
                    5f:8a:38:50:bc:b6:c3:ff:3a:76:f6:dc:c0:41:76:
                    b6:dc:68:54:1d:1c:46:17:ac:eb:3c:26:e7:c3:5c:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:79:76:65:E5:66:FA:8A:9E:8A:CF:21:00:B2:0A:2E:63:FD:F8:B1
            X509v3 Authority Key Identifier:
                keyid:F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:3e:8c:12:19:51:1c:2a:d5:54:59:d0:d3:50:dd:40:44:0f:
         d9:39:ae:ab:61:cf:9c:ad:46:d7:86:fb:bc:81:04:5a:32:5c:
         61:53:c1:fb:3a:8f:93:87:e2:37:6c:f5:9f:d8:52:21:ca:f5:
         77:d7:c9:ee:d8:eb:45:9f:2d:ca:20:cf:63:40:53:d7:36:40:
         35:b2:f2:b4:e0:88:f3:e2:53:f2:39:8b:73:a4:4a:41:85:b7:
         e6:91:4a:f8:c2:99:51:ee:89:42:37:11:e3:9f:ea:9b:cd:10:
         97:89:05:0a:52:6b:03:3a:1c:75:ce:5b:ff:36:e5:25:2c:62:
         48:26:20:41:49:72:c2:05:56:ae:e6:57:c7:8d:de:33:7b:2d:
         69:db:9c:aa:b9:d9:73:b9:3c:78:e0:5b:6b:dc:ed:6d:53:f0:
         21:6c:eb:e1:4d:ee:79:64:11:83:1f:c8:19:2a:e7:59:3b:54:
         5e:6c:23:52:b0:83:9b:3e:4f:eb:06:a5:35:17:82:8c:e1:8f:
         5c:e5:9b:80:ef:08:21:dc:7b:24:9a:94:75:dc:30:73:a1:55:
         47:64:62:2d:9e:fd:40:ac:ff:15:36:25:d6:31:8e:84:9a:de:
         de:02:8a:33:8d:c2:86:67:a5:b6:68:a8:a3:e1:ca:d0:42:2f:
         97:ac:94:c7
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjNE
RUI0RTU5RUU1MzMyNjI5RUM1RTBCNjg2NjZEMzZFMjk3Mzc2QjAeFw0yNTA0Mjgx
OTQwNTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUyNzk3NjY1RTU2NkZB
OEE5RThBQ0YyMTAwQjIwQTJFNjNGREY4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpJiKxE9MIkucfq1kvs6HqNOvRiccaFBnsADjWNiB7HHfP0WB2
UNlOhJ0cwr7Kv5r+o6/cJi+HWkwvIxqVszHOXGkEujPVzxqC4PJEnPxtfqicRh9p
tjugDBWeghxxI/sMfuSVEr/AETtW4g3ycXKwtctMDL98QoCSqGPLwJrhYoU1PQNW
te90z9bjvDC+4vBXoElVdApcStccyEwk7VGmNhwM26F8n9DVVOcmcLFj9k+pynAK
u9n40u73lEzJBfEDNCpON47qCFjaPS1CEDxbJvAvXAbMyth7Swn4X8cl/V+KOFC8
tsP/Onb23MBBdrbcaFQdHEYXrOs8JufDXGmRAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUUnl2ZeVm+oqeis8hALIKLmP9+LEwHwYDVR0jBBgwFoAU89605Z7lMyYp7F4L
aGZtNuKXN2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx
OS84OTYwNVo3bE15WXA3RjRMYUdadE51S1hOMnMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzg5NjA1WjdsTXlZcDdGNExhR1p0TnVLWE4ycy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTkvODk2MDVaN2xNeVlw
N0Y0TGFHWnROdUtYTjJzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAL4+jBIZURwq1VRZ0NNQ3UBED9k5rqthz5ytRteG+7yBBFoyXGFTwfs6j5OH
4jds9Z/YUiHK9XfXye7Y60WfLcogz2NAU9c2QDWy8rTgiPPiU/I5i3OkSkGFt+aR
SvjCmVHuiUI3EeOf6pvNEJeJBQpSawM6HHXOW/825SUsYkgmIEFJcsIFVq7mV8eN
3jN7LWnbnKq52XO5PHjgW2vc7W1T8CFs6+FN7nlkEYMfyBkq51k7VF5sI1Kwg5s+
T+sGpTUXgozhj1zlm4DvCCHceySalHXcMHOhVUdkYi2e/UCs/xU2JdYxjoSa3t4C
ijONwoZnpbZoqKPhytBCL5eslMc=
-----END CERTIFICATE-----