Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2724/fRGXjW7O-I8hmMacrePXRs_28MM.mft
File:                     fRGXjW7O-I8hmMacrePXRs_28MM.mft (raw, json)
Hash identifier:          SipxIQNEKd0r9ZTTrSSubUUHhUhDxj8RQMhZXq1C2CM=
Subject key identifier:   80:06:29:95:07:04:E6:18:3F:4B:87:9A:5B:AF:C8:0A:8C:A6:22:FC
Authority key identifier: 7D:11:97:8D:6E:CE:F8:8F:21:98:C6:9C:AD:E3:D7:46:CF:F6:F0:C3
Certificate issuer:       /CN=7D11978D6ECEF88F2198C69CADE3D746CFF6F0C3
Certificate serial:       2F99
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fRGXjW7O-I8hmMacrePXRs_28MM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/fRGXjW7O-I8hmMacrePXRs_28MM.mft
Manifest number:          2F99
Signing time:             Thu 26 May 2022 19:56:09 +0000
Manifest this update:     Thu 26 May 2022 19:56:09 +0000
Manifest next update:     Fri 27 May 2022 01:56:09 +0000
Files and hashes:         1: fRGXjW7O-I8hmMacrePXRs_28MM.crl (hash: sxdTPdX8n4Jzx+ejkXUIpWLdG48vmxwaBGRq5aa4ln8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12185 (0x2f99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D11978D6ECEF88F2198C69CADE3D746CFF6F0C3
        Validity
            Not Before: May 26 19:56:09 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=800629950704E6183F4B879A5BAFC80A8CA622FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:50:d0:8b:f2:b8:50:45:7d:b1:dc:ae:cc:
                    99:e5:2e:bf:c7:f1:37:97:25:8c:54:6e:92:3a:77:
                    6c:f0:3e:c2:82:3d:27:50:1a:43:6b:10:50:bf:12:
                    09:51:71:a9:84:bc:9a:c2:6c:2f:70:c9:3e:7d:36:
                    34:c8:cf:1f:7e:25:a0:cb:a4:c8:62:0f:4f:56:ba:
                    b6:8d:9e:d4:12:1a:ae:b0:5d:29:27:45:65:8f:d0:
                    02:68:3f:4b:2f:81:d0:07:9e:ae:7c:e2:00:57:ef:
                    a6:b3:f1:43:74:40:60:0e:ee:c1:a4:dc:51:a3:e2:
                    82:34:4d:b6:d2:48:87:a5:0e:62:5c:da:7f:63:97:
                    be:ba:96:67:12:2c:dd:ba:92:96:6e:4a:87:87:aa:
                    83:4b:b3:da:df:f0:a6:c4:97:cf:54:9a:54:40:30:
                    4b:16:4e:fe:84:89:ef:ff:c7:87:9f:ca:13:55:e1:
                    dd:bc:d0:59:27:d7:0d:9a:d6:12:3d:ff:5c:0e:f4:
                    34:30:08:8e:91:b8:cf:ad:6e:f5:b2:a5:40:74:82:
                    cc:f0:c4:45:16:76:d2:64:84:c8:bd:3a:06:e4:92:
                    c1:44:c7:85:32:14:5e:f5:68:67:28:a7:27:fd:f3:
                    f4:d6:1c:a7:f1:5d:5b:62:ad:b1:0a:5d:1d:fb:a5:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:29:95:07:04:E6:18:3F:4B:87:9A:5B:AF:C8:0A:8C:A6:22:FC
            X509v3 Authority Key Identifier:
                keyid:7D:11:97:8D:6E:CE:F8:8F:21:98:C6:9C:AD:E3:D7:46:CF:F6:F0:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/fRGXjW7O-I8hmMacrePXRs_28MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fRGXjW7O-I8hmMacrePXRs_28MM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/fRGXjW7O-I8hmMacrePXRs_28MM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:9d:fb:5b:85:3d:57:81:a7:48:39:34:0a:25:17:4b:c8:
         bf:e3:59:04:95:ba:78:45:7c:ec:2a:14:22:f2:47:83:bd:0b:
         5e:c9:2b:da:b6:e3:98:4c:fe:b4:47:c7:81:5c:cd:01:53:05:
         c9:cd:15:97:bc:d9:9b:d1:8a:8d:ae:79:2a:3b:03:7f:3e:59:
         75:9f:dc:62:7d:cb:6d:f0:f6:cb:c0:43:53:c2:58:c0:02:d0:
         01:58:8f:86:76:16:92:1e:6c:c6:eb:9d:20:f2:17:3f:65:e7:
         6c:1f:80:6e:bb:c2:1f:0d:db:fc:53:c2:cd:ee:4c:64:67:d4:
         79:70:8b:27:5d:c4:87:c2:ea:86:fb:bb:40:d4:df:25:03:4c:
         66:93:7f:5d:8f:f7:d6:64:79:9d:db:20:4f:ce:9d:b3:bf:19:
         13:77:2b:19:82:4b:35:3d:98:a7:38:f0:ea:12:5d:59:fe:a0:
         04:4b:35:99:ec:4c:08:81:03:b7:43:1f:ed:f3:c7:fd:4e:e1:
         8d:31:3a:3e:f9:0a:e1:75:ae:ec:67:97:d9:dc:f2:85:33:58:
         f1:27:b5:96:fd:e6:0d:bd:0a:fa:31:f6:3e:c0:f7:f3:00:2b:
         1a:46:21:48:22:c0:a7:02:bb:a1:5d:dd:b8:0f:78:01:84:77:
         36:26:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----