Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/iylQ_bUU9_JNRWmODyjaE_xVGQg.mft
File:                     iylQ_bUU9_JNRWmODyjaE_xVGQg.mft (raw, json)
Hash identifier:          k2Ya0I0M8kYgx48PKsfJJVtEC3ruWLwGDyBPiUETyOg=
Subject key identifier:   02:A0:E7:D6:CA:64:F2:4F:9A:E0:73:3A:C0:5F:5F:D8:9F:B0:B7:F8
Authority key identifier: 8B:29:50:FD:B5:14:F7:F2:4D:45:69:8E:0F:28:DA:13:FC:55:19:08
Certificate issuer:       /CN=8B2950FDB514F7F24D45698E0F28DA13FC551908
Certificate serial:       0B32
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iylQ_bUU9_JNRWmODyjaE_xVGQg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/iylQ_bUU9_JNRWmODyjaE_xVGQg.mft
Manifest number:          0B30
Signing time:             Thu 26 May 2022 19:56:55 +0000
Manifest this update:     Thu 26 May 2022 19:56:55 +0000
Manifest next update:     Fri 27 May 2022 01:56:55 +0000
Files and hashes:         1: iylQ_bUU9_JNRWmODyjaE_xVGQg.crl (hash: uSGLO2qZXKzRabJcM1r7jKIzJsrQDm0MSeDHKdz4RcM=)
                          2: rfuoTrPY0wFvOZ0DEE9CxjWz4sk.roa (hash: iBV7KFGqDDgCa3FHV8/zCTijQWgoJ/UootxZypF7k5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2866 (0xb32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2950FDB514F7F24D45698E0F28DA13FC551908
        Validity
            Not Before: May 26 19:56:55 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=02A0E7D6CA64F24F9AE0733AC05F5FD89FB0B7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:d2:6f:1e:1a:36:d5:b6:24:ac:eb:55:de:
                    d1:53:aa:34:95:2e:84:a3:11:7b:d3:49:b2:53:38:
                    ef:b5:13:5c:0f:85:48:8c:f9:ec:2d:15:e2:22:c5:
                    53:bd:3a:80:71:ee:9d:be:ff:63:7a:ee:6f:ee:33:
                    3f:ab:8a:10:cd:a9:b5:e1:d6:e8:4a:22:95:42:f5:
                    90:bc:c6:5f:e2:af:06:4e:f6:bb:0b:90:c6:29:3b:
                    1c:12:c7:7f:17:da:91:99:7f:f5:5d:04:5a:9a:69:
                    6c:74:fb:ee:36:5e:00:5b:d2:48:6a:2d:7c:d8:8f:
                    8a:f1:1b:86:c4:e9:8c:c6:77:27:cc:93:34:c0:30:
                    70:ff:87:db:c9:55:24:60:c5:10:0c:d6:00:bc:af:
                    c5:e5:99:76:5e:de:67:ef:06:2a:6a:f3:c6:53:22:
                    63:be:39:bb:26:fa:b9:a3:3a:b1:87:ab:05:69:de:
                    76:4d:d5:12:d3:1b:ff:b0:35:1c:45:09:db:f3:6c:
                    8b:d7:59:8c:20:db:0e:f5:42:07:81:bf:20:f0:f3:
                    4f:ae:ed:cb:81:3b:10:66:40:3e:fb:0d:fd:da:fb:
                    e7:05:1d:da:cc:3b:d7:8a:96:6a:5d:53:d6:d3:a8:
                    93:aa:35:84:81:ab:0b:33:a0:c9:c6:e9:5d:ec:75:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A0:E7:D6:CA:64:F2:4F:9A:E0:73:3A:C0:5F:5F:D8:9F:B0:B7:F8
            X509v3 Authority Key Identifier:
                keyid:8B:29:50:FD:B5:14:F7:F2:4D:45:69:8E:0F:28:DA:13:FC:55:19:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/iylQ_bUU9_JNRWmODyjaE_xVGQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iylQ_bUU9_JNRWmODyjaE_xVGQg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/iylQ_bUU9_JNRWmODyjaE_xVGQg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:46:9e:b1:4e:f7:f4:8e:b5:94:5a:b2:b2:d4:b3:e6:af:e9:
         0c:f6:94:7f:81:ac:23:7b:ae:d6:51:7d:04:1a:bd:f9:70:80:
         06:52:9e:00:7d:96:04:42:a2:03:7e:aa:86:ca:80:42:b3:bc:
         38:39:ff:2f:41:0b:b9:7c:c1:09:3f:3f:32:1c:c0:f3:fd:a2:
         99:c7:73:7f:a8:54:79:45:19:37:f9:fc:43:9a:8c:9b:38:d9:
         27:e0:aa:85:fb:f1:1e:c2:6a:ed:18:26:d9:78:86:bd:78:8f:
         d7:f7:28:5d:d8:58:96:e3:a4:b8:d5:9c:75:21:11:6b:fc:9e:
         21:98:41:c2:08:dc:1a:88:92:e5:a3:c8:53:2e:10:ab:97:cc:
         d1:df:08:d7:b3:bb:b0:ca:bd:86:8c:fd:d6:41:5c:a2:4c:34:
         f3:b5:4b:f8:54:c7:65:e9:4f:c4:7e:a4:a0:58:17:74:b8:16:
         f7:30:4e:fe:26:22:05:6d:b0:c1:b2:1c:d5:cd:33:df:4a:59:
         d5:d5:22:c1:ec:5a:a7:a7:36:6f:88:b9:f2:60:6d:3f:8d:e0:
         2d:d3:65:02:90:eb:68:13:4b:c3:fd:7b:50:07:c5:b4:70:38:
         f3:4a:14:3e:d6:bf:b7:c1:8e:2d:d0:2c:29:f1:ff:03:19:fb:
         2d:0e:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----