Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
File:                     bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json)
Hash identifier:          GPhrN/UDJkSkVfGNnUtkFyB79RIDSU36vY/tqTolI1Y=
Subject key identifier:   EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D
Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE
Certificate issuer:       /CN=6C7185696188085985206B5BC3C453E127ED0FDE
Certificate serial:       02F7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
Manifest number:          02F7
Signing time:             Mon 28 Apr 2025 19:40:30 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:30 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:30 +0000
Files and hashes:         1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: X0Rft+CAlItLcAmjiuoTFt3CE1Sj9WXPtNKM5U8UXM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE
        Validity
            Not Before: Apr 28 19:40:30 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85:
                    81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db:
                    0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14:
                    70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2:
                    0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6:
                    90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d:
                    de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1:
                    97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b:
                    d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00:
                    4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4:
                    9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59:
                    fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1:
                    e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9:
                    ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14:
                    06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85:
                    c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f:
                    1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D
            X509v3 Authority Key Identifier:
                keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:6a:50:fe:ae:02:da:7d:f4:e3:80:5e:1c:e1:b9:6d:04:
         ba:9a:c9:fc:48:c9:74:53:90:d2:f8:66:c9:42:e6:67:e7:27:
         77:a0:cb:89:96:e9:a1:22:9e:c2:33:74:31:a7:bb:be:a5:86:
         c2:86:1c:77:9f:0c:ef:f7:75:3b:29:b9:cd:a3:b7:33:0c:21:
         ac:b3:44:16:2e:09:33:54:41:d3:a4:58:81:13:76:64:70:58:
         e0:84:17:da:b7:99:a2:f3:1e:86:4f:cb:91:3c:1b:1a:07:84:
         48:10:89:64:06:5e:0a:10:35:c9:02:56:62:10:8e:84:90:4b:
         1c:bb:1b:c6:14:37:35:77:ac:f7:db:84:68:a2:61:03:f1:03:
         66:82:6b:a8:42:f8:47:c5:27:32:3c:b7:e2:5a:82:8b:52:a7:
         97:e3:8d:96:85:46:0d:95:7e:ac:bc:f3:98:41:7d:1e:35:60:
         f7:d3:db:29:e5:d8:fe:fd:35:49:99:e1:f6:f8:54:ab:52:38:
         43:d0:c8:9d:0d:d0:60:ff:d2:97:ed:43:3b:a2:29:e3:28:e7:
         58:e8:39:83:76:b7:80:13:70:f0:18:0e:62:70:aa:41:aa:02:
         e0:c3:d6:15:ba:25:8d:45:87:6b:7a:ba:80:c5:3e:6e:04:5f:
         21:18:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----