Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1629/5xtQq87zzsP3Elw6TezBPYqFBpE.mft
File:                     5xtQq87zzsP3Elw6TezBPYqFBpE.mft (raw, json)
Hash identifier:          pM25tsyBLBUbGW/0Nca55VXSD4cljeB27YlDByVwhVI=
Subject key identifier:   82:0E:5B:4D:38:FD:DC:79:4F:42:F5:C6:54:A9:5E:C7:C2:AB:CE:EE
Authority key identifier: E7:1B:50:AB:CE:F3:CE:C3:F7:12:5C:3A:4D:EC:C1:3D:8A:85:06:91
Certificate issuer:       /CN=E71B50ABCEF3CEC3F7125C3A4DECC13D8A850691
Certificate serial:       38A8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5xtQq87zzsP3Elw6TezBPYqFBpE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/5xtQq87zzsP3Elw6TezBPYqFBpE.mft
Manifest number:          380A
Signing time:             Thu 26 May 2022 21:26:15 +0000
Manifest this update:     Thu 26 May 2022 21:26:15 +0000
Manifest next update:     Fri 27 May 2022 03:26:15 +0000
Files and hashes:         1: 5xtQq87zzsP3Elw6TezBPYqFBpE.crl (hash: rP+8o7yZZ3PZVizY8PTdqWCUwH7Uk4k/v16Zvv3kzmQ=)
                          2: zK3b_kOrPQCb0OHCbp9f12uGpLE.roa (hash: /YDZGr/eL1f2S8TA208R6T3spX2epw4x3nW3khijAI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14504 (0x38a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E71B50ABCEF3CEC3F7125C3A4DECC13D8A850691
        Validity
            Not Before: May 26 21:26:15 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=820E5B4D38FDDC794F42F5C654A95EC7C2ABCEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:af:05:91:13:f5:13:b3:1f:ae:00:ff:78:a6:
                    d4:e9:9a:f9:84:d3:ae:95:b1:20:93:b7:9b:c5:76:
                    4d:1e:7b:d0:64:20:5c:78:89:8c:53:0d:18:5f:d1:
                    6f:73:21:4b:3d:5a:9d:6e:d7:39:84:c3:a0:5f:96:
                    93:c4:d2:27:3a:d1:cc:14:29:8d:9d:f2:ef:fe:2e:
                    ba:17:a6:59:b7:e9:30:c1:70:1e:d3:fb:0b:cc:9d:
                    91:db:2c:3a:50:5e:32:b4:f2:8d:ce:84:23:2b:b3:
                    10:b8:26:35:4b:04:73:04:fb:46:de:05:c0:e1:c6:
                    be:78:63:c0:ce:78:e8:b7:35:e9:1a:a2:20:20:18:
                    b9:30:33:de:e0:17:2b:ca:01:5e:fb:15:b9:db:b4:
                    41:73:c2:32:c7:8b:21:85:bf:18:ab:91:09:57:16:
                    9b:8c:b7:d5:d9:75:b4:a8:b5:67:92:ab:23:7e:9b:
                    61:c6:da:c3:1b:84:b7:d5:86:df:fe:12:1c:6b:6f:
                    c2:f0:b5:f6:e4:84:d1:4b:77:83:e0:1b:2e:44:02:
                    62:93:1b:a6:5a:bf:20:81:61:5d:3e:98:c8:fe:37:
                    f6:61:5e:6f:12:2f:61:b8:e8:9a:46:30:05:ea:ca:
                    cf:01:d0:eb:e3:2b:b0:eb:ba:bf:91:09:6d:73:6b:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0E:5B:4D:38:FD:DC:79:4F:42:F5:C6:54:A9:5E:C7:C2:AB:CE:EE
            X509v3 Authority Key Identifier:
                keyid:E7:1B:50:AB:CE:F3:CE:C3:F7:12:5C:3A:4D:EC:C1:3D:8A:85:06:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/5xtQq87zzsP3Elw6TezBPYqFBpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5xtQq87zzsP3Elw6TezBPYqFBpE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/5xtQq87zzsP3Elw6TezBPYqFBpE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:90:d7:5c:0f:e0:8a:a3:8c:c0:29:a5:5c:70:d7:3e:19:41:
         7e:48:86:e1:74:18:a2:60:e6:17:13:2f:01:ad:07:be:df:00:
         c2:7a:9f:fb:ae:4a:14:12:ec:c0:17:44:04:b8:1d:54:5b:e5:
         7d:56:42:cf:ba:1d:9a:0b:fd:01:fd:35:c0:fa:9e:b7:d9:97:
         32:48:ff:dd:1c:34:c2:51:ed:c1:79:5e:0e:6c:30:b1:0b:69:
         b3:50:99:9c:87:a5:01:d6:eb:9f:74:ed:21:13:fa:9b:3e:6e:
         62:b2:40:13:26:12:0d:bb:09:f6:af:59:fb:d8:3a:58:54:df:
         93:d1:e8:99:2d:11:54:e5:e6:af:1f:16:49:bc:a4:db:7c:3f:
         04:f8:58:cc:87:4e:b0:1a:69:b3:04:ab:d2:6a:25:7a:66:62:
         1f:a8:fd:50:95:0e:91:73:65:e1:ec:64:50:a9:e9:ae:04:71:
         1b:e3:8c:77:0d:ff:b0:ef:a7:9d:b7:6c:af:8b:f5:f8:2a:13:
         b7:75:22:a1:f7:27:24:5c:62:14:2e:8a:9c:e8:c6:1c:61:f5:
         36:e4:d6:fc:cd:da:94:03:f1:a4:82:1e:c0:50:03:21:8a:18:
         62:49:3b:a7:cb:cf:f1:55:29:72:03:57:58:44:96:35:ee:72:
         79:40:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----