Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
File:                     8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft (raw, json)
Hash identifier:          6DBDTxnAaaVZr4c6veNp0f8vwFagwmWRTLdl5IcJcto=
Subject key identifier:   64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC
Authority key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F
Certificate issuer:       /CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F
Certificate serial:       1DA7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
Manifest number:          1DA7
Signing time:             Mon 28 Apr 2025 19:36:46 +0000
Manifest this update:     Mon 28 Apr 2025 19:36:46 +0000
Manifest next update:     Tue 29 Apr 2025 01:36:46 +0000
Files and hashes:         1: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl (hash: /fD4N4zH1wD+7gbldQpQdJ+omB65xrnAK4GEOei/Ymk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7591 (0x1da7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F
        Validity
            Not Before: Apr 28 19:36:46 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=642E96922B46BF24EF102575A5DAA715488004CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a3:78:97:a8:9d:3f:e3:16:18:d4:df:23:a0:
                    92:64:4b:c9:36:9c:fd:be:09:98:fc:24:f7:23:77:
                    54:1b:52:12:55:f3:cc:82:81:53:99:fd:b4:ad:74:
                    6c:c6:fe:5b:df:bf:95:4d:77:68:71:a6:28:2a:b7:
                    84:3c:ec:50:d3:53:fe:7e:10:03:0a:87:7c:92:a4:
                    ba:0e:5d:78:29:a5:54:dc:5b:a7:5a:95:3e:2e:d4:
                    da:70:91:e6:1c:7b:c5:cf:fe:e0:5e:01:8a:69:9c:
                    b0:30:55:0c:66:67:55:72:1f:69:14:9e:7f:50:fc:
                    ba:99:d6:ad:d0:48:bb:0b:be:95:2d:06:30:d0:37:
                    c7:db:13:86:aa:bf:d9:88:6c:a4:2a:d0:97:ec:32:
                    86:d1:48:b2:e6:5c:87:a9:10:06:89:62:df:52:67:
                    64:92:2b:8c:f5:77:4a:2d:5c:68:ef:4a:08:d6:ec:
                    bf:1c:50:24:71:90:13:6a:95:6b:2b:63:72:d3:02:
                    f3:16:b3:dd:62:33:75:5b:d6:63:34:fb:db:d5:96:
                    3c:04:22:89:a3:be:a5:6b:11:81:fe:30:13:b4:0e:
                    7b:be:b4:06:b2:be:81:01:24:51:96:9a:a9:f3:57:
                    c2:20:d1:18:ce:e3:9b:0d:97:33:a9:23:51:e0:e6:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:96:92:2B:46:BF:24:EF:10:25:75:A5:DA:A7:15:48:80:04:CC
            X509v3 Authority Key Identifier:
                keyid:F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:5c:3b:2e:8f:c8:9a:78:8c:e8:de:2a:01:f8:5d:2d:70:1c:
         67:f8:ce:7b:8a:b8:f2:87:1f:b5:70:50:05:1e:11:4d:46:36:
         64:f3:66:bb:7f:c2:d5:1e:9e:ee:ea:c0:a3:c0:e5:16:d3:fd:
         e8:93:de:b3:21:69:e3:50:96:29:00:81:6c:b8:f5:64:77:63:
         b3:2f:1e:88:42:5e:aa:11:1a:c9:c8:18:f3:b2:4c:3f:e4:e1:
         dc:56:40:13:52:4e:2d:15:6c:8c:b7:94:27:55:7f:29:f6:29:
         c6:c4:f6:ca:f9:c9:5e:64:19:a3:f3:e7:a5:6a:dd:31:41:ae:
         f7:c6:0d:86:67:d6:86:e1:ad:83:fa:ff:1d:4d:76:c3:34:3d:
         a8:ab:59:9f:02:62:90:14:e3:ea:fc:e6:db:f3:5c:88:d3:dc:
         bc:df:88:01:50:24:fc:0f:1e:66:9e:13:d7:5e:6f:aa:76:d5:
         dc:be:01:3e:f9:4d:49:df:ce:17:56:bd:62:95:de:be:45:ad:
         44:26:3a:82:cd:95:45:55:e0:f8:fd:9a:c3:8f:b7:06:b0:7b:
         22:af:65:ea:46:3b:9a:35:a4:c6:3d:21:eb:63:18:97:40:30:
         83:5d:21:b2:6d:74:23:b5:4e:20:22:29:50:cb:73:59:45:1c:
         3e:b8:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----