Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1229/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.mft
File:                     Tb5rvdp-71BiXr0Xi4JSsWrs1-A.mft (raw, json)
Hash identifier:          a/JwD9clCSDyXZ+wZYy/VIFXzKvw9D8KxXPqpkTNMlI=
Subject key identifier:   AE:7E:A6:E4:C1:CC:21:73:A9:C9:9C:A6:71:EA:FB:44:BC:FA:A3:CA
Authority key identifier: 4D:BE:6B:BD:DA:7E:EF:50:62:5E:BD:17:8B:82:52:B1:6A:EC:D7:E0
Certificate issuer:       /CN=4DBE6BBDDA7EEF50625EBD178B8252B16AECD7E0
Certificate serial:       1ECB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.mft
Manifest number:          1ECB
Signing time:             Thu 26 May 2022 19:57:10 +0000
Manifest this update:     Thu 26 May 2022 19:57:10 +0000
Manifest next update:     Fri 27 May 2022 01:57:10 +0000
Files and hashes:         1: Tb5rvdp-71BiXr0Xi4JSsWrs1-A.crl (hash: ee4xAfHB4kdy1Vrs667NKtKzEioLKYDBzaitKkacVkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7883 (0x1ecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBE6BBDDA7EEF50625EBD178B8252B16AECD7E0
        Validity
            Not Before: May 26 19:57:10 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=AE7EA6E4C1CC2173A9C99CA671EAFB44BCFAA3CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:e1:49:88:5f:35:1e:ea:1e:87:03:b5:4b:
                    8e:08:5d:8c:58:2b:f3:6b:46:5b:0f:48:0f:45:68:
                    a2:b8:a1:73:b1:65:ba:27:44:2f:a2:75:13:f9:aa:
                    b2:d6:e8:ff:52:51:b9:87:3f:64:43:25:2a:d0:a8:
                    73:a9:1c:a6:63:67:57:38:1a:a1:2c:55:b2:b5:eb:
                    63:51:69:26:45:27:54:7f:39:f1:6e:04:8c:7a:e1:
                    a5:17:55:fd:d6:b3:32:c7:fd:ce:4e:24:9e:bf:7a:
                    17:30:57:4f:70:be:ac:0e:bb:90:14:a8:fa:d9:f2:
                    fc:02:4f:6a:2d:1a:ac:9c:ec:47:d3:2d:fc:56:ee:
                    9f:35:4d:02:33:1d:49:7e:89:67:b8:d2:30:55:50:
                    b1:0b:a3:88:c8:1f:e7:37:f7:e7:d1:44:b9:af:70:
                    8d:e3:a3:62:64:d6:cd:f2:a3:38:7c:e0:f1:8a:c1:
                    50:f4:d9:14:3a:05:27:63:b2:73:45:4e:df:80:29:
                    68:b9:d5:c6:5b:68:d4:43:df:c7:44:0f:e3:f2:25:
                    f6:e4:28:5d:bf:4e:d0:ea:a8:5b:ae:13:fd:ce:1d:
                    dc:fc:16:2a:4a:f9:4e:a2:05:0c:0d:be:25:aa:37:
                    5b:aa:bd:8d:18:05:b9:1a:19:f7:70:9d:69:51:19:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:A6:E4:C1:CC:21:73:A9:C9:9C:A6:71:EA:FB:44:BC:FA:A3:CA
            X509v3 Authority Key Identifier:
                keyid:4D:BE:6B:BD:DA:7E:EF:50:62:5E:BD:17:8B:82:52:B1:6A:EC:D7:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a2:c5:8b:df:09:73:73:03:34:05:87:d6:66:56:96:40:aa:
         66:48:41:38:91:34:ad:a8:2a:94:c0:6f:e2:67:be:0f:c0:a5:
         44:97:be:70:43:92:4b:af:ca:78:3a:1a:a8:ee:04:c1:46:42:
         02:bd:bf:e7:91:c1:54:4b:ed:c2:34:06:c6:38:1e:fe:c6:d7:
         5e:4e:37:61:bb:1c:ae:b3:79:25:a1:ca:8f:3b:ee:12:b7:5d:
         08:a2:03:6c:fa:05:16:d3:fd:33:ea:11:0d:66:59:48:ec:0d:
         01:8a:46:dc:a4:0d:68:05:f2:df:90:82:4f:a0:97:64:98:f6:
         91:36:2a:dd:b8:e3:96:a5:64:cc:47:6c:df:ad:f0:05:9f:55:
         25:28:f6:0c:50:80:34:6a:34:fd:e9:94:0b:ff:a8:9f:d9:51:
         60:c2:cb:73:68:d9:e0:a7:85:8e:46:97:0d:82:37:78:71:ee:
         7c:a5:e7:04:aa:dc:12:86:52:d8:7a:73:98:fc:19:1a:82:43:
         20:b9:38:af:33:7d:1e:f6:ef:fa:93:84:5c:84:78:6b:27:11:
         1e:fb:63:7c:a7:1a:10:3c:fd:d2:a2:47:f2:e7:b2:51:0d:0e:
         44:0c:88:c7:1c:d1:56:80:e8:ca:03:6a:cd:02:ee:43:84:b6:
         cd:b2:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----