Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
File:                     bpDPw0IBYTZGvwABiMWUyGrjN48.mft (raw, json)
Hash identifier:          eFIPVnh46Dyfl4o0xqf2tGGKvL/wG1XjWpjgBnYDk+c=
Subject key identifier:   1C:25:79:D7:7E:6C:DA:9A:7D:74:1D:D6:4C:1C:CB:8C:39:53:92:DC
Authority key identifier: 6E:90:CF:C3:42:01:61:36:46:BF:00:01:88:C5:94:C8:6A:E3:37:8F
Certificate issuer:       /CN=6E90CFC34201613646BF000188C594C86AE3378F
Certificate serial:       517F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
Manifest number:          517F
Signing time:             Mon 28 Apr 2025 19:40:23 +0000
Manifest this update:     Mon 28 Apr 2025 19:40:23 +0000
Manifest next update:     Tue 29 Apr 2025 01:40:23 +0000
Files and hashes:         1: bpDPw0IBYTZGvwABiMWUyGrjN48.crl (hash: szfWjHNL63H8YA33vlqQDEFnagbquRgJiw2WJIC5Wqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20863 (0x517f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E90CFC34201613646BF000188C594C86AE3378F
        Validity
            Not Before: Apr 28 19:40:23 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=1C2579D77E6CDA9A7D741DD64C1CCB8C395392DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:14:26:0e:e7:a2:e4:a1:12:d7:67:27:7a:
                    8f:a2:dc:f9:0e:99:0e:f7:6f:9c:58:ad:27:47:5d:
                    72:5f:75:86:a2:14:1d:4a:77:da:4a:10:4c:1a:95:
                    2c:d2:ca:96:50:35:17:ef:3b:a4:b4:df:51:e6:54:
                    69:df:d4:00:97:fa:d8:7e:f4:0d:ea:05:1b:63:c0:
                    ec:2f:ab:ec:9d:37:7e:74:18:e5:9b:63:49:8a:10:
                    19:60:ba:a3:5a:25:b1:08:46:91:f1:df:95:64:55:
                    61:bd:a7:2d:fc:dc:6f:07:d2:90:18:a5:7e:d9:c6:
                    2e:36:cf:6d:2d:52:9f:19:2c:40:a9:33:4b:fe:9c:
                    2d:ce:06:59:15:41:60:9c:60:02:12:09:0e:2f:9d:
                    4d:e7:d8:2a:d8:cc:51:16:88:cb:68:dc:51:4e:6f:
                    cc:a4:81:b2:c0:5f:61:46:e2:73:4d:cf:85:37:f1:
                    45:3a:44:c2:7b:1a:53:a0:21:a1:7c:e1:a6:35:2e:
                    cb:94:42:f4:61:7d:83:94:19:6e:c0:92:53:c5:32:
                    7a:b5:b3:3d:18:7a:3d:73:15:fa:03:a5:a6:29:67:
                    bf:c6:14:92:c5:e0:d8:21:da:a6:79:6d:64:5a:72:
                    f8:19:b7:45:d5:03:da:00:f7:a9:b7:58:67:14:71:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:79:D7:7E:6C:DA:9A:7D:74:1D:D6:4C:1C:CB:8C:39:53:92:DC
            X509v3 Authority Key Identifier:
                keyid:6E:90:CF:C3:42:01:61:36:46:BF:00:01:88:C5:94:C8:6A:E3:37:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bpDPw0IBYTZGvwABiMWUyGrjN48.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/bpDPw0IBYTZGvwABiMWUyGrjN48.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:63:4a:f7:ae:03:f2:57:34:55:45:33:9c:55:1d:2c:79:fc:
         66:16:ec:6a:b3:cd:2a:b0:5b:5f:59:ca:1e:6d:74:28:f0:94:
         96:db:1c:72:8f:bb:ec:b4:dd:e5:0e:f9:ce:38:30:e0:1a:bc:
         a6:5c:99:54:53:2e:6c:d4:74:a2:3d:64:ca:d2:1e:2d:6e:e0:
         3a:c9:43:55:2a:3e:7e:e5:a0:aa:ef:05:e3:29:db:1e:06:66:
         c7:e1:8a:1b:8e:e4:d8:9b:56:c5:3c:0e:dc:e3:32:9c:8f:3f:
         2e:e0:57:6e:4a:0e:a9:3a:5b:a2:34:ad:05:96:26:33:8c:c3:
         8c:8b:36:ac:d1:34:34:25:6a:cd:d6:91:31:c4:78:b8:79:a0:
         d3:ba:a8:7a:08:32:c2:2e:f6:c9:72:1f:e5:64:e9:ac:d8:3e:
         69:38:97:28:fd:2a:1a:fe:92:b2:8e:6d:8b:33:9e:61:6e:76:
         0d:46:97:4f:a1:df:a4:b5:ec:68:9f:ec:86:74:93:6b:0f:2b:
         bb:b7:9c:04:de:1f:e4:9f:92:cb:a9:cd:d6:63:a3:f2:44:78:
         43:04:c9:8c:8a:02:5a:fa:8a:90:22:90:90:78:8f:46:59:c7:
         11:09:30:9e:db:71:1a:a9:bc:50:4c:6c:54:95:a5:f9:9f:84:
         70:33:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----