Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.mft
File:                     7z6j5ovlIQHmUZX6cIQJVc858dU.mft (raw, json)
Hash identifier:          hVGvNClT10Bb1xu3r8UI/aw4epMxz0jHldyBbW3ovW8=
Subject key identifier:   56:D2:F8:E0:7A:75:B5:2C:4A:46:86:39:F3:D3:74:F6:38:A1:80:18
Authority key identifier: EF:3E:A3:E6:8B:E5:21:01:E6:51:95:FA:70:84:09:55:CF:39:F1:D5
Certificate issuer:       /CN=EF3EA3E68BE52101E65195FA70840955CF39F1D5
Certificate serial:       081C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7z6j5ovlIQHmUZX6cIQJVc858dU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.mft
Manifest number:          081C
Signing time:             Mon 28 Aug 2023 00:07:01 +0000
Manifest this update:     Mon 28 Aug 2023 00:07:01 +0000
Manifest next update:     Mon 28 Aug 2023 06:07:01 +0000
Files and hashes:         1: 7z6j5ovlIQHmUZX6cIQJVc858dU.crl (hash: rc5L7950PhV5N/8qnATesqdgmJB676mCHDzIuooly5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3EA3E68BE52101E65195FA70840955CF39F1D5
        Validity
            Not Before: Aug 28 00:07:01 2023 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=56D2F8E07A75B52C4A468639F3D374F638A18018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:d1:2d:47:74:f3:02:1c:a4:3d:30:1a:50:
                    a4:2f:3d:21:0f:bb:b8:9a:7d:e2:dd:e9:3a:42:a9:
                    7f:3e:82:d1:11:75:99:39:48:8b:56:b6:6f:a1:95:
                    19:59:0b:2c:fc:06:94:c4:b5:84:6c:e9:43:70:3f:
                    33:ee:1b:da:65:dd:00:c3:f9:fe:68:a8:a5:2f:99:
                    15:5a:6b:2e:b4:83:a2:3b:38:ae:4d:43:3e:52:28:
                    ca:b9:cc:1f:be:25:04:37:fd:1a:57:e7:ba:2b:e2:
                    ad:cf:98:2a:e4:9e:01:16:9a:b2:d6:44:ba:54:eb:
                    c4:dd:6c:f6:9e:87:ce:c2:08:ed:db:80:4c:e6:17:
                    f3:a1:a8:64:d7:42:c8:b0:d4:f5:27:74:64:ff:42:
                    6e:df:1c:8d:ee:e8:c6:41:6b:50:b5:bd:38:79:81:
                    16:31:7c:87:09:91:24:01:81:b0:81:0b:5d:6c:45:
                    bf:94:dd:86:28:c2:66:75:b8:5c:a1:9d:e0:ea:8f:
                    0c:6c:6e:53:55:be:86:7f:a9:fd:bb:60:60:d0:73:
                    92:ba:a1:cb:0c:5f:cf:68:56:47:ad:6d:64:c9:aa:
                    33:7d:d2:9f:fb:88:4c:e9:69:a9:45:b9:19:1d:6d:
                    5f:3f:27:7c:7a:4d:08:30:3e:ed:51:58:23:04:95:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:F8:E0:7A:75:B5:2C:4A:46:86:39:F3:D3:74:F6:38:A1:80:18
            X509v3 Authority Key Identifier:
                keyid:EF:3E:A3:E6:8B:E5:21:01:E6:51:95:FA:70:84:09:55:CF:39:F1:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7z6j5ovlIQHmUZX6cIQJVc858dU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:5f:8d:40:fb:3d:db:65:48:33:df:7d:80:d4:1d:ae:3e:
         10:c7:3e:ec:80:d5:30:e3:e3:86:bb:92:4f:b9:cf:64:87:2c:
         f8:61:aa:6f:8c:8f:ba:ad:f7:92:63:c4:48:80:a6:f2:60:a3:
         fc:95:4a:43:d8:41:25:d0:0a:69:9b:88:ce:5b:20:bd:67:6d:
         49:0e:c3:03:d6:d3:a7:98:e0:d2:bd:a6:8b:d0:ce:e2:f3:fd:
         ef:8e:53:71:48:7f:7b:81:ee:12:8e:09:99:e1:93:e4:26:eb:
         a9:2b:25:8b:5a:86:27:59:27:a5:9b:90:2d:21:57:f3:25:41:
         cf:10:26:ba:02:4e:e4:be:0e:b3:67:71:61:58:34:e6:90:89:
         8e:ff:62:b3:9e:e4:c9:21:41:ed:e6:02:8e:2d:4a:12:63:c2:
         a0:62:12:c4:4b:37:41:a1:2a:aa:09:d7:be:ce:8d:62:9e:fc:
         8d:a0:ce:6b:3a:62:fd:20:68:87:2f:a3:97:cf:d0:8c:e7:5c:
         2d:66:36:6d:ba:59:57:6f:bd:f3:79:7b:5d:ca:e2:8b:28:ad:
         c8:52:32:a0:b0:6e:91:77:d8:ce:62:2e:7d:37:d9:d2:15:22:
         b8:40:50:c9:51:07:9c:f5:47:3f:17:5c:59:f2:24:6b:5b:19:
         9c:a9:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----