Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2671/QFpvLcf1xn58Vsg13Zf7VPcgoSY.mft
File:                     QFpvLcf1xn58Vsg13Zf7VPcgoSY.mft (raw, json)
Hash identifier:          YjjIEY3PD1mChq+Fd/p1tN97b3NlpJ1UyR1SWmW0muk=
Subject key identifier:   98:AF:D9:DB:E4:2A:F4:E5:8C:AD:C3:0F:41:49:7E:19:85:8C:15:C8
Authority key identifier: 40:5A:6F:2D:C7:F5:C6:7E:7C:56:C8:35:DD:97:FB:54:F7:20:A1:26
Certificate issuer:       /CN=405A6F2DC7F5C67E7C56C835DD97FB54F720A126
Certificate serial:       0964
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QFpvLcf1xn58Vsg13Zf7VPcgoSY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/QFpvLcf1xn58Vsg13Zf7VPcgoSY.mft
Manifest number:          0963
Signing time:             Thu 26 May 2022 19:26:06 +0000
Manifest this update:     Thu 26 May 2022 19:26:06 +0000
Manifest next update:     Fri 27 May 2022 01:26:06 +0000
Files and hashes:         1: QFpvLcf1xn58Vsg13Zf7VPcgoSY.crl (hash: TvCuOLLjHjgBsNPX2/9xXCo24mal9qDwXEJXjVGOsFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404 (0x964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405A6F2DC7F5C67E7C56C835DD97FB54F720A126
        Validity
            Not Before: May 26 19:26:06 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=98AFD9DBE42AF4E58CADC30F41497E19858C15C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:72:f6:ee:58:16:3d:dc:d5:a4:93:4f:09:
                    88:26:34:90:24:a9:7f:0c:cf:81:19:22:f7:de:29:
                    f8:9f:8f:ac:ec:0c:8b:00:53:23:f9:72:a9:42:ee:
                    52:35:55:b6:3e:a4:10:a1:c6:a7:68:f2:03:55:7c:
                    ad:40:2b:90:49:90:82:cb:b9:e4:db:3b:e9:0b:f7:
                    4a:7e:27:2d:50:83:1a:76:a9:f4:1f:b2:1e:a9:30:
                    df:a4:30:ab:42:38:1a:b0:d0:85:6e:6f:3a:f9:4e:
                    36:e6:0f:ea:15:ce:ca:55:f5:f1:e3:f0:c6:a4:87:
                    ff:43:a0:6f:44:a7:3c:76:dc:df:e5:8a:ae:8d:86:
                    f8:1f:22:e4:ad:54:f3:75:77:c9:32:96:36:66:57:
                    bc:2a:d4:74:ee:1f:d9:dc:fb:da:36:a1:b9:56:5c:
                    9a:16:75:cf:0c:ff:2a:f0:81:4c:12:5b:f7:43:9e:
                    db:cc:6e:8c:92:0a:71:36:fd:e2:07:a8:b2:6d:e5:
                    6e:47:f0:81:5e:a1:2a:8c:24:72:fd:9b:8b:85:c9:
                    80:69:73:44:4a:f6:11:c1:85:db:87:79:3d:f0:99:
                    9b:57:92:9c:ec:26:35:e4:20:2e:62:e1:cd:b1:cc:
                    80:1b:11:08:eb:93:6b:d0:df:73:c3:71:be:7b:82:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AF:D9:DB:E4:2A:F4:E5:8C:AD:C3:0F:41:49:7E:19:85:8C:15:C8
            X509v3 Authority Key Identifier:
                keyid:40:5A:6F:2D:C7:F5:C6:7E:7C:56:C8:35:DD:97:FB:54:F7:20:A1:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/QFpvLcf1xn58Vsg13Zf7VPcgoSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QFpvLcf1xn58Vsg13Zf7VPcgoSY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/QFpvLcf1xn58Vsg13Zf7VPcgoSY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:58:5f:1b:2e:b7:3e:d0:6d:11:6c:72:f1:01:49:b2:71:e5:
         ae:2d:8b:0c:5d:ed:28:8d:12:f9:31:f3:b2:d6:08:88:cc:ed:
         7e:4e:e5:77:79:55:17:84:4a:78:0c:70:a6:5a:6c:0e:a8:2d:
         f5:39:0f:06:f8:0c:f4:d0:2b:f9:48:80:86:f9:f8:0d:d2:9d:
         9a:f4:f6:e3:66:e4:e6:2a:be:a6:07:19:92:aa:4b:19:f0:46:
         82:33:a1:67:d2:c7:d0:3f:ba:51:59:40:ac:7d:49:d9:0f:73:
         81:ac:f4:d4:85:d1:7a:b4:00:64:e6:ec:49:4b:15:7b:2d:9f:
         5b:82:eb:2c:2c:d7:4c:2b:ff:23:81:23:b5:21:9d:61:ed:36:
         b3:0b:0e:20:39:86:b4:9f:4f:4f:11:31:39:c9:e9:9c:19:d9:
         93:31:d2:72:ee:29:fa:40:1e:ab:fe:77:39:1e:e2:a7:9b:8a:
         ad:4d:5e:ec:8a:fa:a1:c8:d5:ea:78:03:a2:cd:eb:3b:48:51:
         f3:5a:79:0f:26:57:b3:2a:1b:fb:e6:e8:c5:92:b8:08:ad:01:
         8c:c1:be:33:d3:be:0b:75:23:61:8a:58:07:c3:ea:ed:9e:36:
         b3:ab:19:f6:e6:46:53:22:5b:8d:ad:82:91:ec:5e:9f:25:91:
         d3:9a:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----