Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
File:                     HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft (raw, json)
Hash identifier:          I8fVTR+9aMa9efMai7aTqNs3joZOdUMd3OLaDO7XinQ=
Subject key identifier:   41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D
Authority key identifier: 1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79
Certificate issuer:       /CN=1C6595A42ACE3853C7876704E65BE85F5C185279
Certificate serial:       02D7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
Manifest number:          02D7
Signing time:             Mon 28 Apr 2025 19:39:25 +0000
Manifest this update:     Mon 28 Apr 2025 19:39:25 +0000
Manifest next update:     Tue 29 Apr 2025 01:39:25 +0000
Files and hashes:         1: HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl (hash: qHOCrIbDujevuIMe5MEZbp6cw9VM5J7GSh7Bj2a1RpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6595A42ACE3853C7876704E65BE85F5C185279
        Validity
            Not Before: Apr 28 19:39:25 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=41C0BC01D3A531043842939AB41FF3CCBF84D82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:55:27:89:99:f7:37:b9:b9:5e:cf:49:bb:
                    94:59:c4:73:e2:c1:71:d4:3f:31:0c:b0:17:3d:ba:
                    4d:69:ae:dd:e1:76:d1:d9:e2:59:01:3c:cf:10:37:
                    b1:a9:2a:c7:65:16:bb:f7:e8:79:da:9c:65:0d:9f:
                    88:00:b4:f9:07:f9:48:81:b2:53:45:36:10:ba:af:
                    1f:06:98:d4:69:77:37:67:f5:30:2b:f7:42:3a:2e:
                    a0:03:cf:8e:52:ae:28:e3:13:65:a3:e2:0e:ff:7e:
                    ab:9a:9f:e5:00:ff:b7:e4:93:12:a7:8c:82:a4:89:
                    ae:15:5e:72:b1:5f:ea:2c:be:e2:15:55:2f:32:ca:
                    3d:d1:ab:cb:51:6d:3d:d4:9f:56:07:1d:d1:16:89:
                    73:a3:2b:09:61:16:3c:af:ee:b7:01:98:d3:4e:d3:
                    d9:fd:6f:e8:66:7d:3c:97:d2:a7:bc:70:7b:63:d8:
                    60:60:4f:09:08:cb:c0:f0:f6:99:be:a3:43:f6:5e:
                    b8:18:f3:fd:fe:f2:67:af:8d:e1:3c:46:8e:b8:0c:
                    e9:6f:23:8a:c3:38:92:47:98:6e:14:6f:7e:52:4c:
                    93:7b:3b:e3:35:bc:6b:40:2a:26:fb:79:94:39:57:
                    4b:ab:1e:e2:e2:71:dc:57:c3:b0:15:35:52:2a:7f:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C0:BC:01:D3:A5:31:04:38:42:93:9A:B4:1F:F3:CC:BF:84:D8:2D
            X509v3 Authority Key Identifier:
                keyid:1C:65:95:A4:2A:CE:38:53:C7:87:67:04:E6:5B:E8:5F:5C:18:52:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HGWVpCrOOFPHh2cE5lvoX1wYUnk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/HGWVpCrOOFPHh2cE5lvoX1wYUnk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:82:89:ab:a2:be:1f:62:c8:e5:64:cb:79:3a:32:6c:23:77:
         01:a7:75:6c:84:00:60:e9:d8:12:14:42:dc:41:b5:74:2e:c4:
         3c:59:e3:20:ab:78:32:36:85:10:21:db:73:26:26:74:aa:b3:
         41:c2:a6:ef:57:c3:5c:2b:51:2b:60:93:fd:5b:0d:1c:6d:80:
         3a:70:b9:b3:8c:16:ea:07:b5:8b:95:4b:a2:01:1d:56:ad:4e:
         b5:46:71:1d:7e:73:c9:c0:e7:f7:06:78:97:96:c7:f0:e3:a9:
         03:b0:6b:00:68:be:99:8f:f8:bf:87:08:7b:d3:5b:91:25:86:
         4d:8f:2c:03:c4:13:01:89:cd:df:a7:7c:61:c2:d8:40:f2:b9:
         3f:35:7e:be:6a:53:3a:0a:7e:25:23:3e:0c:e2:6c:09:05:d9:
         8a:a3:c6:c5:45:1c:ba:86:a4:bb:12:c2:ad:86:2b:3b:2b:41:
         b1:af:63:ba:59:eb:b1:d4:c3:19:5e:d8:14:06:7f:3b:e9:a2:
         ec:16:10:eb:e9:df:ad:01:ee:f5:4f:be:13:da:86:e5:c3:8d:
         27:0b:fa:19:94:8b:c2:22:7a:54:a4:26:d2:32:d4:5a:b2:fd:
         0a:de:96:70:2a:64:b4:0b:bd:58:9e:da:63:4a:12:f3:84:2b:
         1e:18:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----