Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft
File:                     Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft (raw, json)
Hash identifier:          /vQU+403NdbJRajwP/D6GxZ5MnYGhxbwLHc6c9/fDWU=
Subject key identifier:   BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7
Authority key identifier: 1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA
Certificate issuer:       /CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA
Certificate serial:       03D8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft
Manifest number:          03D8
Signing time:             Mon 28 Apr 2025 19:40:53 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:53 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:53 +0000
Files and hashes:         1: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl (hash: TUbYc6abvCNecIEIkfzY+tZBgRxhVcKqGQjBVOev/cE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA
        Validity
            Not Before: Apr 28 19:40:53 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=BF7821F78FFC418D66ABC2C904523A53F50E1AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:f6:2f:ee:1a:47:a8:a0:29:f3:cf:46:70:
                    8f:f3:f1:6a:c8:f5:d0:a5:56:7d:e1:dc:f9:f8:60:
                    61:a1:07:60:57:c0:44:0b:ec:63:1e:9b:05:27:4e:
                    9f:de:07:ae:49:55:1d:20:94:37:27:c2:dc:e0:80:
                    30:b2:af:71:d5:69:62:b3:e0:1d:d8:e0:5d:86:ef:
                    5c:aa:fe:bb:7c:7a:d5:63:33:89:d9:49:28:7a:4f:
                    c5:fb:91:b2:48:6d:7b:09:e0:dd:a1:23:d1:92:f6:
                    21:e7:6e:d6:92:5e:71:e6:0b:e2:35:80:dc:c8:a3:
                    51:ad:06:4f:0d:51:00:d9:6f:eb:04:82:ec:a4:07:
                    e5:af:06:44:95:6d:12:68:20:5d:f6:1f:00:83:11:
                    65:25:e0:01:ce:0d:ad:cc:28:7e:d2:8d:da:62:61:
                    89:ba:7f:b3:e6:09:6e:03:f0:49:67:b6:5c:68:01:
                    c7:54:40:58:58:b1:4d:28:64:27:38:56:f8:f4:f9:
                    c9:d3:ea:64:e9:2d:f1:ac:4c:27:84:b4:e1:40:0a:
                    df:39:65:80:3a:1f:ca:84:bc:46:55:fd:89:2e:97:
                    27:a5:4a:ff:3d:99:8e:b7:0a:e5:78:0f:2c:d9:12:
                    3f:c1:a8:c5:14:cd:24:f1:a3:60:50:08:e0:09:19:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7
            X509v3 Authority Key Identifier:
                keyid:1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:8b:d5:e6:71:8a:64:d5:84:d1:42:7e:c3:28:74:c7:f6:
         c9:5f:d1:5e:91:3d:65:e4:d9:33:9c:51:f4:49:46:d0:74:1d:
         73:ad:1f:03:03:14:ce:98:1c:d5:f7:a4:b9:cd:0f:c0:62:5b:
         2c:fa:46:76:a6:0c:ed:8d:ae:9b:30:62:82:e1:96:81:7c:1b:
         81:a1:75:92:1d:9a:a5:93:3f:c3:c9:a6:6b:56:34:74:92:a3:
         c6:d5:a9:26:2a:04:ed:8f:d0:54:35:1c:fb:64:a0:0a:e1:0c:
         41:1a:0a:9c:8c:ca:be:94:61:35:30:fe:ab:02:8d:6a:e5:02:
         d9:89:99:51:eb:dc:48:24:e0:0d:9f:cb:b6:2f:6b:e9:b7:85:
         28:b4:0b:ae:05:5d:10:b6:1b:09:46:95:ff:4c:51:5c:10:16:
         02:49:41:11:d7:15:37:8f:8a:8a:de:f7:b9:5d:32:0e:87:a2:
         c9:e8:75:ff:ad:ff:a7:3e:08:ce:fe:58:69:9b:c4:18:da:4f:
         dc:87:22:27:84:cb:31:1e:88:bb:71:59:98:00:2f:11:32:1a:
         b2:9e:aa:5e:1f:bf:1e:96:71:d1:2d:7e:cf:93:5b:ea:b3:81:
         0d:3a:eb:a1:bc:71:de:e8:8d:f2:db:c2:5d:89:6a:d1:d6:b2:
         84:14:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----