Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2723/C4jEXgIhQ2rlqsmnFJI9wQNL5eU.mft
File:                     C4jEXgIhQ2rlqsmnFJI9wQNL5eU.mft (raw, json)
Hash identifier:          qhHU5yxKGdynMQmCAcsZs+8OJKd0BcQ3JLHeiWtejdc=
Subject key identifier:   F5:A9:E2:12:73:66:7B:51:85:CC:3D:4E:EA:D8:22:4F:FC:1D:13:D2
Authority key identifier: 0B:88:C4:5E:02:21:43:6A:E5:AA:C9:A7:14:92:3D:C1:03:4B:E5:E5
Certificate issuer:       /CN=0B88C45E0221436AE5AAC9A714923DC1034BE5E5
Certificate serial:       0742
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C4jEXgIhQ2rlqsmnFJI9wQNL5eU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/C4jEXgIhQ2rlqsmnFJI9wQNL5eU.mft
Manifest number:          0742
Signing time:             Thu 26 May 2022 19:56:00 +0000
Manifest this update:     Thu 26 May 2022 19:56:00 +0000
Manifest next update:     Fri 27 May 2022 01:56:00 +0000
Files and hashes:         1: C4jEXgIhQ2rlqsmnFJI9wQNL5eU.crl (hash: W7D/jM24ogFckvxutBdlaHidkiI15fL4yoxv9txraJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B88C45E0221436AE5AAC9A714923DC1034BE5E5
        Validity
            Not Before: May 26 19:56:00 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F5A9E21273667B5185CC3D4EEAD8224FFC1D13D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:0d:a4:ad:fc:34:6d:3c:b4:ab:77:89:c4:
                    d0:ff:82:cd:b9:1e:47:7a:64:e2:29:46:a4:72:fb:
                    c7:82:41:8d:56:ad:97:b3:70:d9:01:d9:13:37:84:
                    f6:4a:d9:e4:59:01:da:5d:ea:dd:b2:4a:e2:ab:d0:
                    9a:24:ed:6e:9e:f5:e6:d9:4e:d3:ce:49:76:af:83:
                    7b:df:43:d3:62:f7:0c:bb:4d:c3:4d:9a:6f:4b:ec:
                    73:87:ea:3b:ca:a3:3c:2e:67:2c:4d:74:86:11:58:
                    54:6c:b3:81:50:c4:96:60:7c:7f:60:dd:15:f4:05:
                    9a:fd:9a:a2:e4:c2:cd:c6:60:05:2a:fb:10:a5:1e:
                    eb:da:47:0f:8c:46:87:4e:fb:3c:bb:6c:11:09:0c:
                    8c:39:ae:d6:0f:7b:50:68:b5:65:02:cd:57:d6:cc:
                    15:f6:ce:86:d7:8c:67:21:11:b2:48:25:42:86:8c:
                    02:0f:e0:c5:84:16:58:f4:77:0f:ef:cf:f1:85:d6:
                    42:5c:8f:a9:20:26:09:d8:51:ed:06:a3:5d:86:1b:
                    dd:78:d7:70:87:ed:8b:fb:20:51:15:6b:92:c1:6d:
                    5a:85:d4:b8:68:60:21:52:ca:a8:30:84:6c:8e:a6:
                    5e:40:93:6b:2b:53:85:d8:95:fd:d4:2d:50:48:8c:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:E2:12:73:66:7B:51:85:CC:3D:4E:EA:D8:22:4F:FC:1D:13:D2
            X509v3 Authority Key Identifier:
                keyid:0B:88:C4:5E:02:21:43:6A:E5:AA:C9:A7:14:92:3D:C1:03:4B:E5:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/C4jEXgIhQ2rlqsmnFJI9wQNL5eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C4jEXgIhQ2rlqsmnFJI9wQNL5eU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2723/C4jEXgIhQ2rlqsmnFJI9wQNL5eU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:90:65:77:49:49:44:0e:09:d1:77:73:5c:fc:35:d8:13:
         10:e5:d4:e8:0f:0b:a3:e0:15:95:b2:5e:90:ca:81:18:41:21:
         fe:9f:52:42:db:d8:43:78:51:33:0c:da:f7:ce:c7:51:88:ee:
         b5:69:f5:66:c7:dc:4e:52:b6:34:01:d5:3d:aa:f1:80:2c:48:
         8f:f5:15:13:81:6c:02:fb:5a:5b:fd:33:77:26:bc:e1:36:5c:
         95:b9:95:1a:22:9d:12:d2:5c:df:2c:8e:df:0d:79:99:01:03:
         fb:eb:0e:63:23:fd:b0:fd:f7:9c:53:3a:3b:6e:73:e7:67:16:
         a7:39:ad:7e:56:c4:4d:a6:cc:29:04:c1:36:e8:4d:65:8e:81:
         ff:80:15:4c:a2:ea:da:a4:bf:b0:c4:c7:cc:06:37:76:0e:b2:
         87:69:8e:96:12:12:a3:8e:a7:c9:a5:b1:88:85:d0:77:76:d7:
         21:e3:df:44:61:95:dc:56:93:7d:99:7f:ae:71:45:e4:ef:3f:
         b9:a4:36:3b:28:ef:9b:e6:14:47:39:70:7a:1b:72:81:77:32:
         d4:6e:03:e8:7d:1e:fe:b9:bd:f2:dd:14:08:0d:84:8c:3e:5f:
         66:08:da:fe:a6:fd:fa:2e:50:1c:86:12:f4:49:3b:1a:4c:bf:
         31:f8:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----