Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
File:                     qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft (raw, json)
Hash identifier:          oIwma2Bu2Qci1azVsF3HgFKUullS1G3alTd9BS5HapQ=
Subject key identifier:   BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Certificate issuer:       /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial:       1C19
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
Manifest number:          1BF9
Signing time:             Fri 31 Jan 2025 15:26:50 +0000
Manifest this update:     Fri 31 Jan 2025 15:26:50 +0000
Manifest next update:     Fri 31 Jan 2025 21:26:50 +0000
Files and hashes:         1: 5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa (hash: 1G9TvIGpOI19k+vNY2vWqyAcGnf/NgnyIFlBuchbsrU=)
                          2: ERGuAEO4hc2K_QNhDs0oPd2Ovhs.roa (hash: /xveDAj10Cqwa30t8+mVrd6NxA4uKtlsdoO1YjXjPOM=)
                          3: GRQWmU7kj2MtZz8P0rhABLNxJmo.roa (hash: xODLseQ5OuG7zJVn2IeWVbKpN/ynDTW7X462XK2DiW0=)
                          4: ME9y6iE9_arWH9Fs4BYwAi0vlDo.roa (hash: ccNS9q/DL6E/wtDUgZtIMTYW86d7GQqpLSA3TKwdwhY=)
                          5: UYYH8nf7t3pHRtHfYdrj9_du1LI.roa (hash: TaRSS1gmX2lvWtqnWK7fdhRVGpVjUSEIVC9l9749sHc=)
                          6: b_xJrKXfr9iR-P1PshZUFr11DEI.roa (hash: KEtj9jXlsW8crqkjMlm5YVVy0ObCZcEDc+GqHIOmI/M=)
                          7: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl (hash: t+TsxVk1eVWQqGV7+KAdJB7X+ZDbYxJ9JSKUs/6cJVg=)
                          8: tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa (hash: SXZrx4Q4IxBEYib/DtnwGYISea4XlmC7x5pSx7JcMyc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7193 (0x1c19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
        Validity
            Not Before: Jan 31 15:26:50 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=BC98CFDBBC48A5E94B32F2C4A7540E5F24A8CB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:30:f2:4e:46:12:02:76:42:18:3c:5d:8e:
                    31:65:87:a0:0d:ff:4f:b1:92:64:8f:82:6b:c2:ed:
                    f0:b4:e2:0d:6d:f9:a5:5a:43:8b:59:f8:d5:7b:7d:
                    82:49:71:66:82:77:32:de:84:c8:ba:63:fa:01:c6:
                    b1:e4:eb:94:47:b9:b8:2e:f2:f6:59:4a:46:a3:87:
                    86:b4:f0:0f:25:0a:f4:a3:00:0b:94:1b:a3:43:89:
                    a9:80:20:c7:4a:85:12:dc:ac:4e:f5:15:80:9f:9b:
                    d4:91:25:7b:15:e9:8b:51:41:dd:93:e0:f0:74:4a:
                    c4:1f:76:72:46:0e:29:b2:97:07:00:bc:cd:e5:a4:
                    fe:e1:38:19:54:9f:85:b8:70:57:2d:8c:fe:bb:ca:
                    56:bb:0c:d0:9e:d9:1e:a1:97:16:e3:fc:99:94:e9:
                    34:1e:0f:69:f8:6d:63:04:91:30:64:ac:46:3e:1c:
                    eb:be:f4:d2:2c:fd:e3:ca:12:fe:19:e5:0e:02:b2:
                    2a:41:bf:f7:cb:1a:03:e1:e5:4a:53:1b:06:9e:cd:
                    ed:8e:1d:8e:80:0c:98:57:83:52:43:98:ee:bf:8f:
                    ec:eb:a3:c9:15:a0:c0:49:30:de:e0:f7:00:60:0a:
                    cc:89:58:dd:d4:23:84:45:78:2d:50:fc:f7:54:0f:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
            X509v3 Authority Key Identifier:
                keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:26:74:46:2d:bd:35:6d:d4:25:c7:00:cf:4e:96:65:14:
         d8:b3:cc:7b:de:36:a7:ef:e2:ad:b7:0e:b0:6a:6d:38:35:29:
         2b:69:30:5e:1d:33:f7:ec:90:92:67:8b:51:fc:7d:2c:c6:17:
         d6:42:be:0c:16:b5:c0:8f:75:ae:73:d1:04:6e:bf:c3:56:df:
         8a:70:d3:a3:59:58:73:35:68:d4:75:4f:44:9d:e0:88:29:26:
         3c:2c:5e:91:07:06:b4:bf:6b:12:3a:c5:36:3a:ee:c2:83:18:
         81:b0:a7:d5:9a:6a:ca:58:94:1e:27:0b:93:c3:d3:d9:65:94:
         ed:26:b5:a9:5a:70:5d:dd:75:9a:d9:2f:da:2a:07:6a:c7:39:
         ae:08:f1:c4:9f:35:be:70:c7:d0:c1:12:99:4b:f5:78:ef:40:
         a3:da:c9:3e:71:78:5d:32:71:6a:83:8a:c9:24:f2:cf:00:d0:
         8b:44:ae:27:71:d2:74:eb:a7:9e:ff:bc:06:f4:3c:2f:f0:0a:
         70:39:70:11:67:0f:4e:e9:a7:d3:65:49:a3:13:94:69:02:51:
         c7:ea:db:f9:db:e1:92:21:d2:9c:df:37:76:8a:23:03:11:67:
         eb:37:42:ce:ad:d2:4f:f0:65:33:d5:34:06:89:4c:f6:49:bc:
         59:91:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----