Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft
File:                     jm3DpYneR53ZjpODO_zBYddCgiQ.mft (raw, json)
Hash identifier:          yM6Oqh3sRv3yP4FH4VtnkLTy4wV8fqxYErcsLUdxFcg=
Subject key identifier:   D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31
Authority key identifier: 8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24
Certificate issuer:       /CN=8E6DC3A589DE479DD98E93833BFCC161D7428224
Certificate serial:       1DDB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft
Manifest number:          1DDB
Signing time:             Mon 28 Apr 2025 19:40:32 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:32 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:32 +0000
Files and hashes:         1: jm3DpYneR53ZjpODO_zBYddCgiQ.crl (hash: rr/wYIOPj1or9LLJ2/FHYembFv2ye+6ys60R5k2Ir/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7643 (0x1ddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6DC3A589DE479DD98E93833BFCC161D7428224
        Validity
            Not Before: Apr 28 19:40:32 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=D75FB06620B70BA3A0FF0F4FA2329D1AAC8F2131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:79:5d:b6:9a:ea:98:0e:97:0d:79:e7:b8:
                    2b:a6:e9:eb:40:e9:2f:31:d5:3b:8f:4e:74:ce:64:
                    c0:8c:71:e7:75:d1:44:47:5b:88:d6:d8:32:2a:e6:
                    7c:56:0e:f3:a6:89:10:14:70:4d:fa:7f:9b:c0:26:
                    19:d7:c2:9a:c2:cf:74:26:90:25:69:0c:4a:26:63:
                    86:10:65:78:e9:60:7f:5e:61:10:75:cf:b6:b2:d7:
                    d0:72:52:5d:16:61:7d:00:be:18:f4:0d:04:ea:13:
                    89:9b:74:56:b7:c4:8c:20:81:27:ef:e6:e7:35:fe:
                    fe:3e:b4:c0:fa:1d:d1:d7:60:3c:56:1d:bc:b9:92:
                    44:47:27:a4:5a:12:9e:4f:c4:72:01:d7:be:48:ca:
                    43:a8:a0:19:4e:e6:07:a8:13:39:26:20:61:5b:ed:
                    6f:6d:a3:d1:da:64:5d:1b:6e:9d:dc:ba:b5:38:09:
                    a7:f4:49:a6:b0:49:3f:ef:57:81:0c:13:a8:2f:58:
                    50:38:45:90:74:3a:4b:5a:b3:f3:b3:01:05:e7:07:
                    01:85:24:71:76:f1:6a:37:36:d5:d1:3d:82:65:51:
                    c8:66:93:fa:12:7d:57:c7:a3:8c:86:e7:51:f9:73:
                    1f:ba:a8:db:d5:2a:10:d4:e6:dd:cd:e7:e4:8d:9b:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5F:B0:66:20:B7:0B:A3:A0:FF:0F:4F:A2:32:9D:1A:AC:8F:21:31
            X509v3 Authority Key Identifier:
                keyid:8E:6D:C3:A5:89:DE:47:9D:D9:8E:93:83:3B:FC:C1:61:D7:42:82:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jm3DpYneR53ZjpODO_zBYddCgiQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/jm3DpYneR53ZjpODO_zBYddCgiQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fa:29:82:b0:12:30:73:9b:0d:f5:b0:5d:9e:09:53:3a:c3:
         59:d0:78:6e:58:b6:22:74:93:17:4c:33:52:c8:dc:9e:90:af:
         18:29:35:86:08:0f:32:a0:dd:94:24:7d:c5:8c:c4:44:bd:51:
         58:53:09:71:02:14:b3:e6:1b:09:0f:32:1c:63:9e:63:42:4f:
         ac:3d:5e:8f:bc:63:e3:c0:d7:2f:fe:24:32:48:64:78:71:b9:
         93:10:ee:4e:60:b1:d5:52:bb:e4:fb:1c:56:9f:c1:38:76:77:
         a5:b3:66:9c:8e:00:75:98:05:54:40:90:70:53:ca:6f:2e:5c:
         91:fb:d2:70:34:06:19:65:49:b2:6f:48:02:ad:fb:61:be:89:
         60:4b:a2:cd:58:2a:5d:07:be:f9:7b:bd:71:0e:b7:82:ae:5d:
         32:ba:66:1f:1e:9b:93:f2:e6:d2:94:91:5c:35:b0:da:5d:65:
         0a:75:93:0a:ba:cb:ef:b8:7a:86:1a:d1:02:f2:04:4c:bf:c3:
         77:0c:d2:43:e2:58:17:62:51:b9:36:78:55:18:9e:d9:91:bd:
         a4:af:ec:b1:ce:3a:57:d3:88:87:0b:3b:67:15:f2:95:4d:75:
         1f:be:58:36:4d:23:0c:11:4c:43:d9:c2:1c:b5:47:9c:01:c6:
         9b:8c:20:c5
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICHdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEU2
REMzQTU4OURFNDc5REQ5OEU5MzgzM0JGQ0MxNjFENzQyODIyNDAeFw0yNTA0Mjgx
OTQwMzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ3NUZCMDY2MjBCNzBC
QTNBMEZGMEY0RkEyMzI5RDFBQUM4RjIxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVg3ldtprqmA6XDXnnuCum6etA6S8x1TuPTnTOZMCMced10URH
W4jW2DIq5nxWDvOmiRAUcE36f5vAJhnXwprCz3QmkCVpDEomY4YQZXjpYH9eYRB1
z7ay19ByUl0WYX0Avhj0DQTqE4mbdFa3xIwggSfv5uc1/v4+tMD6HdHXYDxWHby5
kkRHJ6RaEp5PxHIB175IykOooBlO5geoEzkmIGFb7W9to9HaZF0bbp3curU4Caf0
SaawST/vV4EME6gvWFA4RZB0Oktas/OzAQXnBwGFJHF28Wo3NtXRPYJlUchmk/oS
fVfHo4yG51H5cx+6qNvVKhDU5t3N5+SNm27rAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQU11+wZiC3C6Og/w9PojKdGqyPITEwHwYDVR0jBBgwFoAUjm3DpYneR53ZjpOD
O/zBYddCgiQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1
L2ptM0RwWW5lUjUzWmpwT0RPX3pCWWRkQ2dpUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvam0zRHBZbmVSNTNaanBPRE9fekJZZGRDZ2lRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTI1L2ptM0RwWW5lUjUzWmpw
T0RPX3pCWWRkQ2dpUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAz+imCsBIwc5sN9bBdnglTOsNZ0HhuWLYidJMXTDNSyNyekK8YKTWGCA8yoN2U
JH3FjMREvVFYUwlxAhSz5hsJDzIcY55jQk+sPV6PvGPjwNcv/iQySGR4cbmTEO5O
YLHVUrvk+xxWn8E4dnels2acjgB1mAVUQJBwU8pvLlyR+9JwNAYZZUmyb0gCrfth
volgS6LNWCpdB775e71xDreCrl0yumYfHpuT8ubSlJFcNbDaXWUKdZMKusvvuHqG
GtEC8gRMv8N3DNJD4lgXYlG5NnhVGJ7Zkb2kr+yxzjpX04iHCztnFfKVTXUfvlg2
TSMMEUxD2cIctUecAcabjCDF
-----END CERTIFICATE-----