Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
File:                     d3C3Obnvzri8H9oFYOR4VWHyvL8.mft (raw, json)
Hash identifier:          l9XMJVlf76dQYixJMQOtnXST3pTc4OFEEdsDSiGOhHU=
Subject key identifier:   DC:50:F8:90:5D:28:00:EE:25:08:55:78:0F:30:DE:49:36:05:5E:5B
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Certificate issuer:       /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial:       0A95
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
Manifest number:          0796
Signing time:             Fri 31 Jan 2025 18:25:34 +0000
Manifest this update:     Fri 31 Jan 2025 18:25:34 +0000
Manifest next update:     Sat 01 Feb 2025 00:25:34 +0000
Files and hashes:         1: -Iv332yT_1Ti1TQXXY81fOrFlps.roa (hash: QJCCYtb53J2eZfP9nMw4YT21OUVvIg4TlYFeOezcAek=)
                          2: 868PnKeI2o9h5o7kNxxzvCDu6lo.roa (hash: onWxCPF4YmLTJrvIOTXh5i8ATiEuFxuDQN49ZMPhLnk=)
                          3: BtA-Phj3i5DHzi7u_Ylen1k0pSU.roa (hash: rKBBnjVdYNT8On+j57xLW+YS9lbezquCvnRcA4cZPIw=)
                          4: I25fyOpbL_ONWZumFz7AA8wt4gQ.roa (hash: bufFh1uI/4xrO3+Z0kwYNSODHEXpj3iPA4+tiulUsfY=)
                          5: NC6cp5FlNuhMxl98NbnVGKmgfsA.roa (hash: sQpFELIc53aO8QrEclutIfv5DqrtG/MCyZtMGVNkFsg=)
                          6: UB58DBCHZOXI21eUv0wO5eKeu9M.roa (hash: UXrbGzqGg7RL9Tc4xM4+si3vx9laH51B9ksf9myIDjU=)
                          7: _wDMJnTXq8pSNUopZaTRf2ycZWQ.roa (hash: i3yGq40M57VuZ7Q1RR+vRV0zxBaa6pIWvf/v4bW24do=)
                          8: d3C3Obnvzri8H9oFYOR4VWHyvL8.crl (hash: OIopVruN+LMSwMFHfvKhul28bpedHap7sqHVGfA2sxw=)
                          9: fNe_BsODTjtu_X4fDnHMD4wWwQU.roa (hash: EZgyDLhFQUml2gR652E2g7HvUVMqYbTJiL0+RgZZYQ4=)
                          10: gqkXI3dKqi50Bi-LbLN9WzsZomc.roa (hash: IkzYnAylzoJXrcN4JUd/PjmUUx5tBOtxJ0fiTrAZwXs=)
                          11: qVkIqsEuxHwvg2h3lZ7CEiWp3K4.roa (hash: 1OIOz9NzjdnODdtydV03reS2waCcv3BsUd2TB0tPMwY=)
                          12: t7VjP2L5iWQauYtqk-ogt2nDRLs.roa (hash: dc/uXsgc0vptRH55uQb419n+2fbO1OAf2Is5+qBgPcs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2709 (0xa95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
        Validity
            Not Before: Jan 31 18:25:34 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=DC50F8905D2800EE250855780F30DE4936055E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:37:89:9e:9c:2d:b1:35:77:a5:ca:6a:8c:
                    9e:ef:0f:c7:5d:0c:1d:43:21:02:e4:1b:2b:b2:15:
                    a8:9e:79:80:54:51:0f:e9:20:15:f9:6f:8c:d9:e8:
                    7a:b6:24:c3:91:ac:e4:68:13:c8:a5:35:30:87:02:
                    e5:9d:35:e4:5b:eb:d7:fa:f1:23:06:16:eb:6a:60:
                    43:af:b2:a6:52:1d:d0:aa:f2:85:19:5c:ed:00:d2:
                    09:a7:37:80:77:96:e0:67:50:a5:fd:20:1f:0f:db:
                    18:b0:cc:95:9c:8b:6a:75:49:5a:cf:22:7c:f9:6e:
                    fd:f4:1d:2f:06:90:d2:44:b9:ac:fc:ff:aa:f1:77:
                    f3:e7:20:d3:01:1b:44:59:5b:1a:6e:5b:37:dd:3c:
                    b8:ef:35:c9:46:d7:77:35:9c:52:9a:e4:c2:8f:62:
                    3a:fe:f0:38:3c:6a:f9:40:d0:26:4a:ba:c0:2a:d5:
                    46:13:ca:87:73:b4:da:bd:b7:18:7a:17:e0:d1:bb:
                    26:ab:6e:9e:33:07:06:ea:ce:36:c7:9c:c7:02:a8:
                    22:04:f8:b8:2b:f2:0f:df:a5:77:7f:65:e4:50:f5:
                    3a:fc:29:d1:67:d4:75:fc:fc:4e:2d:4b:e7:ae:29:
                    92:84:95:d5:ff:00:28:c8:00:38:34:8d:a6:64:2a:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:50:F8:90:5D:28:00:EE:25:08:55:78:0F:30:DE:49:36:05:5E:5B
            X509v3 Authority Key Identifier:
                keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7a:61:60:b2:a1:65:c1:27:0c:c4:95:fe:79:b6:7f:d6:95:
         0c:28:d9:83:99:48:dc:66:5e:46:c5:7b:e1:3a:fc:7b:42:e6:
         4b:37:df:a9:6f:26:9a:f5:9d:4f:01:d2:b4:c4:05:d7:ea:08:
         47:92:3e:35:27:61:0f:39:83:5f:5a:fb:fe:0b:03:9e:f0:48:
         76:36:74:38:f6:57:74:26:ec:6e:58:f1:9f:a5:8b:82:b5:d7:
         c8:af:31:e8:b9:ba:04:a8:2d:87:38:25:58:46:3b:d2:90:77:
         44:89:8e:75:cf:21:03:bc:e3:2b:25:dc:a8:cc:76:bc:6e:60:
         21:00:6d:85:9a:de:8b:42:8e:6c:ca:3f:e8:a7:a2:0c:c1:4b:
         b9:9e:12:fe:c4:de:a9:14:35:7b:36:ed:af:ca:16:ff:6c:37:
         10:fe:57:2f:db:96:69:c5:74:b2:47:29:eb:97:fb:0e:13:cd:
         6f:a0:e2:67:1a:62:3b:85:29:97:08:22:73:31:17:7b:c2:18:
         6b:da:1f:e5:da:a1:bd:44:bf:fd:b8:20:68:bf:5d:ed:32:31:
         42:18:5d:b9:2a:d9:d5:ae:1b:24:2e:4d:ec:44:5f:cb:70:03:
         cd:0e:5a:15:a3:02:23:d6:7d:ce:2a:bf:3f:f9:50:2f:1c:c6:
         99:0a:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----