Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/DOxfTraMvSy_izZ5OhVltYZk_rY.mft
File:                     DOxfTraMvSy_izZ5OhVltYZk_rY.mft (raw, json)
Hash identifier:          cSNIpnN60V0XtDQ/YEIPaFQR8/eHSAwcmFp27I8kcsQ=
Subject key identifier:   57:28:DE:48:9C:32:95:AB:5E:91:99:2F:B4:32:CC:E0:F3:DE:82:43
Authority key identifier: 0C:EC:5F:4E:B6:8C:BD:2C:BF:8B:36:79:3A:15:65:B5:86:64:FE:B6
Certificate issuer:       /CN=0CEC5F4EB68CBD2CBF8B36793A1565B58664FEB6
Certificate serial:       0A7E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DOxfTraMvSy_izZ5OhVltYZk_rY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/DOxfTraMvSy_izZ5OhVltYZk_rY.mft
Manifest number:          08C8
Signing time:             Thu 26 May 2022 21:56:49 +0000
Manifest this update:     Thu 26 May 2022 21:56:49 +0000
Manifest next update:     Fri 27 May 2022 03:56:49 +0000
Files and hashes:         1: DOxfTraMvSy_izZ5OhVltYZk_rY.crl (hash: Xos2UUsGA19CPcmOFJ1DyUn9O0nViaArgjFuskbKf9A=)
                          2: MfMHKuEnO5Sf66kSXOsE7OODx1M.roa (hash: QJdiNYnMMJSrVcJexg5xIppe82eXRg02zn8M6lyg5+0=)
                          3: kQZ75xcb-_ceALhqb7WcCZ67th8.roa (hash: BbdOaSvxUTgip+cpEoJHZ2dWK4AdoRmEzbe5j12dhxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686 (0xa7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CEC5F4EB68CBD2CBF8B36793A1565B58664FEB6
        Validity
            Not Before: May 26 21:56:49 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5728DE489C3295AB5E91992FB432CCE0F3DE8243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:b1:1b:92:f2:bc:24:b6:4d:e8:2e:18:e3:
                    2b:98:ea:56:db:43:47:50:7d:3d:bf:8b:95:26:a4:
                    fb:e0:28:6d:81:80:69:54:d4:4d:b2:25:5a:8b:d2:
                    0a:bf:e7:e7:95:50:c4:8d:77:74:23:2d:82:8d:ae:
                    7f:eb:bd:24:bb:86:fe:5d:4d:e5:27:fe:f8:6d:49:
                    c1:23:c2:96:07:4c:a7:34:33:37:ce:48:40:7d:83:
                    c3:0d:79:c7:71:12:a1:be:72:9c:05:62:2a:8e:30:
                    2e:6c:09:7b:75:26:9e:1c:44:51:67:77:3e:61:71:
                    29:59:30:52:63:f3:67:2c:bd:04:61:e7:82:4f:39:
                    5c:81:16:88:2e:11:58:4c:da:f3:e8:f4:82:73:54:
                    a9:72:37:5b:a9:05:5e:7b:d1:2e:8a:d8:02:93:32:
                    ca:99:9e:a5:64:11:c3:2f:b8:c5:a0:6e:53:f1:1e:
                    98:55:0a:3a:dd:a6:8a:f9:be:96:c1:2f:36:d3:2d:
                    92:1f:b3:a7:8f:d6:c3:f8:ca:b7:85:b9:9c:33:5e:
                    b7:09:86:91:d3:27:5f:17:b4:0b:25:20:1e:28:90:
                    90:6d:0c:66:ac:75:f8:42:bb:88:2f:3f:c0:eb:67:
                    b4:98:37:3a:fa:44:2a:b0:8d:09:d3:64:5a:35:43:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:DE:48:9C:32:95:AB:5E:91:99:2F:B4:32:CC:E0:F3:DE:82:43
            X509v3 Authority Key Identifier:
                keyid:0C:EC:5F:4E:B6:8C:BD:2C:BF:8B:36:79:3A:15:65:B5:86:64:FE:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/DOxfTraMvSy_izZ5OhVltYZk_rY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DOxfTraMvSy_izZ5OhVltYZk_rY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/DOxfTraMvSy_izZ5OhVltYZk_rY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:ea:02:cd:d4:90:8c:22:0d:d7:25:5f:1b:dc:fd:db:81:
         97:c0:2f:bb:bb:75:e8:57:88:55:5d:4c:da:91:4c:3d:9b:f5:
         be:0b:d3:b3:df:f3:62:6b:40:9f:f2:27:bc:6e:41:10:0b:f2:
         8b:af:b7:ec:8d:9c:84:53:74:d7:37:f0:a8:c9:73:a9:e8:ba:
         8d:3a:cf:b5:6d:dc:47:86:99:07:93:1e:de:16:53:3a:a7:af:
         2a:00:2d:d8:db:6a:d4:88:8f:79:b7:cb:b9:98:d4:c4:25:52:
         3c:3c:4b:d9:ff:a3:44:75:6e:c7:ab:2d:e1:44:90:e3:93:b3:
         0b:df:bb:05:df:ed:86:4d:dd:8f:e4:7e:c2:66:19:53:b1:12:
         0e:8b:44:58:5c:42:88:27:2c:15:ea:bf:1d:a9:3d:8e:ff:d5:
         ef:fd:e5:4c:dc:8a:34:fd:75:13:91:d8:6b:2e:41:5d:d4:35:
         3d:b7:37:aa:1a:26:2b:55:ff:db:bc:d6:97:cb:6d:40:fa:47:
         5e:7a:86:16:bc:7a:16:d8:db:95:a1:22:4c:1f:d4:b7:2d:6c:
         64:1d:c7:cd:1c:67:61:de:da:cf:bc:35:4e:ac:99:66:7b:2a:
         e3:ef:90:48:46:11:b7:96:94:60:9f:38:93:d4:b1:40:77:25:
         4b:f5:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----