Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2573/otJm8KHcSqSoUS9LymSUkt6ZXCk.mft
File:                     otJm8KHcSqSoUS9LymSUkt6ZXCk.mft (raw, json)
Hash identifier:          CBTdfzSsBjubJ1zyfE5827gaTTtzkxkSA+W5wpOJp+Q=
Subject key identifier:   18:A7:41:AC:2F:9F:A0:3B:37:04:BD:05:09:CC:5A:C7:C9:B3:59:28
Authority key identifier: A2:D2:66:F0:A1:DC:4A:A4:A8:51:2F:4B:CA:64:94:92:DE:99:5C:29
Certificate issuer:       /CN=A2D266F0A1DC4AA4A8512F4BCA649492DE995C29
Certificate serial:       0738
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/otJm8KHcSqSoUS9LymSUkt6ZXCk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/otJm8KHcSqSoUS9LymSUkt6ZXCk.mft
Manifest number:          0738
Signing time:             Thu 26 May 2022 19:00:40 +0000
Manifest this update:     Thu 26 May 2022 19:00:40 +0000
Manifest next update:     Fri 27 May 2022 01:00:40 +0000
Files and hashes:         1: otJm8KHcSqSoUS9LymSUkt6ZXCk.crl (hash: I/AaH+LKJ/aS4HFqqt5Z075d15R7as2snU5PpCe2kiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2D266F0A1DC4AA4A8512F4BCA649492DE995C29
        Validity
            Not Before: May 26 19:00:40 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=18A741AC2F9FA03B3704BD0509CC5AC7C9B35928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:43:2c:44:a5:55:19:8c:28:38:a8:c7:f2:
                    f9:c5:aa:94:18:bb:fc:bb:ab:db:10:04:3f:34:da:
                    b5:0c:4b:76:f0:3a:e3:b3:44:62:5e:93:cc:24:08:
                    fc:a5:e4:24:bb:0b:2d:67:a2:03:b3:d0:ac:28:62:
                    29:ba:a2:cf:0c:92:bb:0c:0a:4c:c7:60:97:47:f3:
                    88:0b:6e:a3:34:6d:a6:5c:bc:d4:c1:04:ac:ba:5b:
                    40:97:72:ec:31:8b:f6:90:9a:7e:7d:7b:2e:7a:3c:
                    71:83:81:bf:9c:c9:15:3f:c4:40:88:37:53:46:62:
                    4f:50:18:30:be:29:bc:39:e3:17:ba:e4:22:ff:b7:
                    b2:0f:5e:a2:2b:98:3b:c3:84:2e:8b:b2:4e:ff:fc:
                    63:b3:7a:f0:e0:a4:bd:18:9d:dc:71:48:ab:cb:79:
                    17:66:1a:05:72:4b:51:15:27:4a:67:66:2b:d8:e9:
                    b0:2c:3e:af:71:48:8c:ab:fc:11:69:41:68:75:bc:
                    62:3a:53:01:03:53:db:94:71:4e:1d:fb:f7:5e:80:
                    b0:38:83:17:48:6a:06:4f:03:0f:a5:b3:90:ae:b5:
                    3e:e2:aa:18:73:cb:77:68:09:6d:05:af:40:b4:b4:
                    76:54:2d:4e:df:1a:09:29:8b:92:e3:52:e0:49:cd:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A7:41:AC:2F:9F:A0:3B:37:04:BD:05:09:CC:5A:C7:C9:B3:59:28
            X509v3 Authority Key Identifier:
                keyid:A2:D2:66:F0:A1:DC:4A:A4:A8:51:2F:4B:CA:64:94:92:DE:99:5C:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/otJm8KHcSqSoUS9LymSUkt6ZXCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/otJm8KHcSqSoUS9LymSUkt6ZXCk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/otJm8KHcSqSoUS9LymSUkt6ZXCk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:98:a8:fd:3a:9d:7e:f4:8d:87:38:72:b8:4d:f2:06:84:a7:
         74:da:7d:5d:ec:8c:1f:82:0b:02:fb:b4:3d:d9:48:92:62:2b:
         7d:d9:63:85:06:71:15:f4:55:34:6a:7a:e0:48:20:bc:98:18:
         9c:73:9f:d7:5a:2f:17:77:2e:fb:71:cb:e9:2b:20:16:c6:7f:
         d2:a9:c9:4e:ec:7e:ce:d3:13:29:9a:09:b1:9d:02:47:b6:e9:
         60:de:99:a7:50:ee:bd:8f:4b:0c:a8:e1:e8:4d:68:f6:6c:18:
         cd:5b:72:4c:72:b4:d6:d5:d0:cc:e8:c1:6b:59:df:d8:5d:0c:
         25:e3:f1:67:fa:76:70:8f:50:55:dc:b6:31:09:68:2d:97:40:
         1c:3f:3f:76:91:16:aa:7a:db:f2:bd:ce:58:fa:c8:66:4e:f9:
         01:1d:d3:67:35:ab:59:4a:12:fe:c8:e8:a8:01:0f:99:19:02:
         be:4d:64:2c:8d:3a:d1:22:ed:0b:ae:5c:a5:48:da:92:7e:3d:
         6a:85:ed:6c:b6:02:7b:f4:f6:c4:c3:81:77:0b:b0:2a:5f:4e:
         9b:ba:6a:00:69:ad:68:5f:61:c7:a0:0a:06:0f:e7:3c:a5:5a:
         9b:2d:c0:43:5c:5c:69:2f:ad:15:7b:bf:ff:b6:18:c3:1c:0c:
         57:12:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----