Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2603/PKIXO81Ms3nc8VGItx0qkX1i_RA.mft
File:                     PKIXO81Ms3nc8VGItx0qkX1i_RA.mft (raw, json)
Hash identifier:          gmPJ7LE2IARmX8hSNCOj9VxjALWJ6xmmKYsefKh42hE=
Subject key identifier:   93:AA:2D:B5:E7:4C:E8:34:52:C2:1B:C2:E1:BB:54:EE:F5:FE:63:68
Authority key identifier: 3C:A2:17:3B:CD:4C:B3:79:DC:F1:51:88:B7:1D:2A:91:7D:62:FD:10
Certificate issuer:       /CN=3CA2173BCD4CB379DCF15188B71D2A917D62FD10
Certificate serial:       0706
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PKIXO81Ms3nc8VGItx0qkX1i_RA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/PKIXO81Ms3nc8VGItx0qkX1i_RA.mft
Manifest number:          0706
Signing time:             Thu 26 May 2022 19:00:22 +0000
Manifest this update:     Thu 26 May 2022 19:00:22 +0000
Manifest next update:     Fri 27 May 2022 01:00:22 +0000
Files and hashes:         1: PKIXO81Ms3nc8VGItx0qkX1i_RA.crl (hash: xxIuKly7DBML+atKThx6KADyp2RmEPe7EzSWQUcaLbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA2173BCD4CB379DCF15188B71D2A917D62FD10
        Validity
            Not Before: May 26 19:00:22 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=93AA2DB5E74CE83452C21BC2E1BB54EEF5FE6368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:f1:3f:79:be:58:82:f0:a0:4e:a2:a0:f5:
                    3b:59:73:8a:49:57:43:7e:4f:d1:06:43:97:1b:69:
                    9e:06:cf:fa:58:1a:67:80:c3:bb:99:66:58:93:f5:
                    4c:39:0f:25:e6:60:be:8a:91:ce:bc:59:e6:ca:76:
                    6a:b4:6c:0b:6a:36:d5:b6:a3:76:3d:f5:3e:5a:17:
                    3f:96:43:ee:d5:ef:68:d4:6c:66:b3:38:f7:04:5f:
                    f0:e1:f4:47:f2:68:56:40:23:94:3b:07:76:f7:5d:
                    ba:b2:6b:7a:5a:95:0d:42:2a:a1:03:70:0c:69:5a:
                    38:07:1e:6c:49:9d:c2:d3:1c:4c:f0:34:88:06:52:
                    50:e5:f6:ef:5e:81:e4:ec:7f:6c:96:af:31:56:18:
                    9b:f0:93:06:fb:d5:b3:a9:df:f8:f2:c6:fa:14:5a:
                    5f:99:09:3d:d3:c4:13:96:c9:7a:7f:a8:be:dd:fd:
                    cf:75:0a:83:58:4f:e0:b0:1e:55:47:5d:b4:3b:fb:
                    04:a9:18:d4:f8:03:24:bd:18:3c:0d:b0:26:00:51:
                    0d:9f:5b:09:e5:10:c0:0b:1b:b4:45:ee:c3:3b:1f:
                    4c:8f:87:8a:ac:f6:ef:b4:92:0c:1f:b5:4f:f6:9e:
                    41:16:1e:8b:49:22:ec:b8:46:e7:fc:c2:52:20:39:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:2D:B5:E7:4C:E8:34:52:C2:1B:C2:E1:BB:54:EE:F5:FE:63:68
            X509v3 Authority Key Identifier:
                keyid:3C:A2:17:3B:CD:4C:B3:79:DC:F1:51:88:B7:1D:2A:91:7D:62:FD:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/PKIXO81Ms3nc8VGItx0qkX1i_RA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PKIXO81Ms3nc8VGItx0qkX1i_RA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/PKIXO81Ms3nc8VGItx0qkX1i_RA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:2c:83:bc:d9:28:b9:0d:95:60:0d:66:a3:5e:36:b9:30:
         78:e9:e2:9a:ff:7d:a4:b8:d7:02:85:e7:36:d0:d9:8a:4d:4e:
         6f:8c:0f:58:2b:c0:08:33:94:37:f5:0d:c9:82:0e:42:89:6c:
         f1:d9:5c:16:aa:70:6c:75:28:1d:cc:fe:82:1d:39:a8:f0:25:
         f2:9c:ae:e4:69:1e:34:2d:98:51:c7:96:39:28:e5:78:e4:f1:
         e1:e7:00:0b:f5:4d:a2:ce:60:38:e7:33:48:a0:3b:5a:b8:b6:
         59:d7:d5:21:f2:39:cb:4b:eb:0b:ea:46:6b:0e:03:e4:32:24:
         69:49:d0:f7:80:44:8e:78:e1:3b:9b:c6:4a:05:a0:33:f9:62:
         58:15:e7:df:6e:b4:e5:49:38:fc:26:b8:88:e8:76:1b:59:39:
         b8:a7:43:34:2e:d9:3f:cc:d4:f8:b4:f7:cd:4a:f9:e3:4e:b9:
         b8:48:83:dc:80:62:98:3d:4b:2d:37:4f:ec:50:d0:7a:bd:44:
         17:1c:84:af:51:d8:db:5a:fc:43:65:e9:05:dc:25:6f:65:82:
         f8:6a:58:20:87:d7:39:d7:80:60:e9:4c:d7:0b:51:84:22:2a:
         36:ae:0f:76:5d:5e:9c:0e:50:18:3d:27:2e:77:22:6c:4d:fa:
         c9:6b:f1:b9
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NB
MjE3M0JDRDRDQjM3OURDRjE1MTg4QjcxRDJBOTE3RDYyRkQxMDAeFw0yMjA1MjYx
OTAwMjJaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDkzQUEyREI1RTc0Q0U4
MzQ1MkMyMUJDMkUxQkI1NEVFRjVGRTYzNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKf/E/eb5YgvCgTqKg9TtZc4pJV0N+T9EGQ5cbaZ4Gz/pYGmeA
w7uZZliT9Uw5DyXmYL6Kkc68WebKdmq0bAtqNtW2o3Y99T5aFz+WQ+7V72jUbGaz
OPcEX/Dh9EfyaFZAI5Q7B3b3Xbqya3palQ1CKqEDcAxpWjgHHmxJncLTHEzwNIgG
UlDl9u9egeTsf2yWrzFWGJvwkwb71bOp3/jyxvoUWl+ZCT3TxBOWyXp/qL7d/c91
CoNYT+CwHlVHXbQ7+wSpGNT4AyS9GDwNsCYAUQ2fWwnlEMALG7RF7sM7H0yPh4qs
9u+0kgwftU/2nkEWHotJIuy4Ruf8wlIgOZU1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUk6ottedM6DRSwhvC4btU7vX+Y2gwHwYDVR0jBBgwFoAUPKIXO81Ms3nc8VGI
tx0qkX1i/RAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYw
My9QS0lYTzgxTXMzbmM4VkdJdHgwcWtYMWlfUkEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1BLSVhPODFNczNuYzhWR0l0eDBxa1gxaV9SQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MDMvUEtJWE84MU1zM25j
OFZHSXR4MHFrWDFpX1JBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACuFLIO82Si5DZVgDWajXja5MHjp4pr/faS41wKF5zbQ2YpNTm+MD1grwAgz
lDf1DcmCDkKJbPHZXBaqcGx1KB3M/oIdOajwJfKcruRpHjQtmFHHljko5Xjk8eHn
AAv1TaLOYDjnM0igO1q4tlnX1SHyOctL6wvqRmsOA+QyJGlJ0PeARI544TubxkoF
oDP5YlgV599utOVJOPwmuIjodhtZObinQzQu2T/M1Pi0981K+eNOubhIg9yAYpg9
Sy03T+xQ0Hq9RBcchK9R2Nta/ENl6QXcJW9lgvhqWCCH1znXgGDpTNcLUYQiKjau
D3ZdXpwOUBg9Jy53ImxN+slr8bk=
-----END CERTIFICATE-----