Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.mft
File:                     MokcWC43Z0eV6WkKukB_xnbsoeE.mft (raw, json)
Hash identifier:          yGAFyAT7AeIElsfahpOrHkJvw5APMwXELJqnygU3XK4=
Subject key identifier:   3C:BA:FB:EB:ED:91:71:29:25:D3:D2:50:F0:D5:CA:A4:A2:6D:5E:D7
Authority key identifier: 32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
Certificate issuer:       /CN=32891C582E37674795E9690ABA407FC676ECA1E1
Certificate serial:       073D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.mft
Manifest number:          0739
Signing time:             Thu 26 May 2022 19:00:11 +0000
Manifest this update:     Thu 26 May 2022 19:00:11 +0000
Manifest next update:     Fri 27 May 2022 01:00:11 +0000
Files and hashes:         1: DV2rK4_e8xsDC_YeQkxXMGfvo3o.roa (hash: BIW2hyWufIrNUbxb2kxtxy1y7cP/QvDQZXIVYWheLOg=)
                          2: H4JZUfHNmdnIeku_mp4NkbpT_C0.roa (hash: 8rH9yyyIC4G3jtq/IMvi2R9YB9+89F1CHTW8m2KCf2Q=)
                          3: J_AuOfjvrf7nDFVxo0yts5YgSbA.roa (hash: FaYPhFNgg2/oXZqspqNIdppnrZzCnDDWp37fAuYeg/g=)
                          4: MokcWC43Z0eV6WkKukB_xnbsoeE.crl (hash: Cn0BTxiR41pnjCtF3emFIZSywfb/+i6WM/EjK6LBJbE=)
                          5: mCez-PC3FGUD2R8Z9t199jHCiuQ.roa (hash: YfxfUq7oIuHQ1+WTHmv/kXndP8eyr4Q8lHcOS078l4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32891C582E37674795E9690ABA407FC676ECA1E1
        Validity
            Not Before: May 26 19:00:11 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3CBAFBEBED91712925D3D250F0D5CAA4A26D5ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:47:c2:38:3b:2f:52:b5:51:4f:9d:c5:ac:
                    18:49:d6:32:b6:0d:a5:cf:81:fc:1c:56:2a:f8:5e:
                    11:c0:3f:de:6d:28:31:8e:17:b9:08:17:9b:d8:8f:
                    9f:87:2c:cc:53:8a:3b:2b:ba:db:bd:7f:05:2a:0c:
                    7c:3d:34:b6:72:6f:ae:86:cd:98:57:58:73:f9:48:
                    11:e3:f0:29:94:00:23:ad:7b:14:d5:46:e8:21:7a:
                    a0:d3:e9:79:fd:6d:15:bc:3e:fc:40:8c:cd:19:89:
                    a2:2b:11:2f:08:c3:1a:69:5b:0c:78:0a:4f:a7:92:
                    4d:d1:12:f7:17:2f:ce:aa:61:18:77:dc:e6:1a:23:
                    f7:dc:a8:18:75:95:8f:74:42:43:d8:0b:f6:67:07:
                    b4:3b:88:b9:1a:6b:d3:7d:10:b0:76:5b:96:e3:86:
                    7a:08:e9:34:ad:ae:d7:14:25:b2:39:7b:7d:e4:b5:
                    9c:8b:44:55:92:b5:d7:15:26:64:71:c3:39:df:ae:
                    f0:c8:85:9f:ac:40:05:13:96:27:65:7f:b4:9d:aa:
                    f9:3d:5a:f9:af:53:c5:4f:db:14:a3:ed:a6:97:e5:
                    ec:4c:3d:f4:e1:ca:2d:90:1f:47:f0:f0:b8:e7:fa:
                    27:7a:27:4f:5b:6f:b3:d6:3a:f8:59:7f:9e:e7:8f:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BA:FB:EB:ED:91:71:29:25:D3:D2:50:F0:D5:CA:A4:A2:6D:5E:D7
            X509v3 Authority Key Identifier:
                keyid:32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:6b:58:3d:d2:34:f1:28:c9:96:50:61:eb:0d:b1:22:15:
         10:17:92:8a:e0:a4:34:d5:17:09:83:ff:05:8c:a2:eb:e8:85:
         81:12:5e:e4:cc:ee:3b:8e:4f:cb:c5:77:ef:80:b3:f8:24:a3:
         db:1d:95:7c:ba:86:dd:ad:46:16:a9:43:03:c6:09:85:9c:a7:
         ad:86:57:6d:ca:f9:18:d1:28:9e:78:f8:ba:50:bb:b3:6f:8d:
         a0:b9:30:e6:dc:aa:3c:77:a8:2b:62:2b:10:52:f1:40:a7:1a:
         fa:71:0f:31:01:48:38:bc:32:4b:b7:be:c3:3c:94:b0:0f:20:
         f4:ba:49:35:6c:35:6d:d8:80:6e:92:54:5f:60:05:79:17:06:
         6b:d0:7c:3c:8a:54:95:87:28:6f:28:4b:2e:06:b8:ad:0d:1a:
         3e:d6:e3:26:c1:0f:3c:15:f7:39:6c:71:cb:3f:12:78:aa:d3:
         e7:5a:6a:3c:90:dd:09:ce:bd:f4:20:28:f9:5b:c0:f2:0a:26:
         f9:2d:db:df:52:fe:54:c2:5d:7f:c1:10:3e:20:28:11:b5:6d:
         a8:6b:17:5a:67:d6:18:e4:4f:4e:f2:dd:53:56:7c:db:dd:62:
         0a:cd:d7:6f:4f:f4:63:a1:45:9f:bc:81:dd:f9:ca:ce:64:cc:
         6e:ef:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----