Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2768/Ehx-lNIIlTHFK1Lo429DUDxGcY4.mft
File:                     Ehx-lNIIlTHFK1Lo429DUDxGcY4.mft (raw, json)
Hash identifier:          r7+OiqfB+ztYVZ8AF6z8R/fJifI3KfI+s8xKUx+s8+g=
Subject key identifier:   58:1B:6D:7E:F4:78:B3:4C:F8:CF:F8:79:75:B2:96:87:03:2D:9F:7C
Authority key identifier: 12:1C:7E:94:D2:08:95:31:C5:2B:52:E8:E3:6F:43:50:3C:46:71:8E
Certificate issuer:       /CN=121C7E94D2089531C52B52E8E36F43503C46718E
Certificate serial:       0739
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ehx-lNIIlTHFK1Lo429DUDxGcY4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2768/Ehx-lNIIlTHFK1Lo429DUDxGcY4.mft
Manifest number:          0739
Signing time:             Thu 26 May 2022 19:55:59 +0000
Manifest this update:     Thu 26 May 2022 19:55:59 +0000
Manifest next update:     Fri 27 May 2022 01:55:59 +0000
Files and hashes:         1: Ehx-lNIIlTHFK1Lo429DUDxGcY4.crl (hash: H1SyxSMk5fXFkGP7Pif8/pH+dnRNb2WTAfygH933874=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121C7E94D2089531C52B52E8E36F43503C46718E
        Validity
            Not Before: May 26 19:55:59 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=581B6D7EF478B34CF8CFF87975B29687032D9F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:bc:15:0c:c4:f5:48:16:1d:10:41:f3:94:
                    6b:f0:e8:b1:18:4b:a9:a1:32:49:8f:ba:38:53:35:
                    32:25:20:4c:f9:f6:c1:9d:76:5d:08:35:99:4c:3a:
                    76:95:f9:07:ea:8d:d6:d6:d3:26:20:bf:6c:ea:c5:
                    f9:cd:4f:1d:5f:91:6c:87:8c:ea:1f:63:65:9c:0a:
                    b0:9c:7f:d7:28:6c:e4:0d:73:ed:c0:f7:49:3a:80:
                    2c:b6:5f:a8:a4:3b:da:41:e8:ad:a4:92:c4:50:0a:
                    82:79:82:e2:6e:44:98:4d:b9:fd:73:68:ce:70:91:
                    0b:c6:4e:34:33:a3:e4:4c:f1:fd:40:61:2f:3e:e7:
                    e3:16:b6:6f:b0:32:5a:89:89:02:7b:7b:ba:bc:f7:
                    b4:c1:8d:9a:4b:ea:ce:10:13:cb:f2:ff:a2:07:29:
                    54:3b:d3:ec:1f:91:dc:bc:69:83:86:52:13:8b:3e:
                    df:b5:03:74:6b:b6:66:f3:42:64:f7:67:24:66:38:
                    63:64:7b:0c:84:38:1d:a8:4b:34:1a:93:38:f3:a6:
                    cf:61:0f:f0:2e:1d:c4:32:ed:ac:bd:07:d1:19:3f:
                    93:37:6a:df:43:bf:55:3c:a0:e8:e4:70:32:55:c1:
                    f5:82:f4:f5:46:1f:0f:cf:0d:54:b4:28:db:cd:41:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1B:6D:7E:F4:78:B3:4C:F8:CF:F8:79:75:B2:96:87:03:2D:9F:7C
            X509v3 Authority Key Identifier:
                keyid:12:1C:7E:94:D2:08:95:31:C5:2B:52:E8:E3:6F:43:50:3C:46:71:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2768/Ehx-lNIIlTHFK1Lo429DUDxGcY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ehx-lNIIlTHFK1Lo429DUDxGcY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2768/Ehx-lNIIlTHFK1Lo429DUDxGcY4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:53:21:5a:dd:db:ab:d2:9f:41:07:bc:f3:ee:72:7e:fb:34:
         5a:b4:1a:50:cc:82:06:71:44:2a:29:18:2b:84:ee:3f:3b:9d:
         68:39:9c:dc:6b:26:e9:19:da:e9:0c:bc:9d:24:6f:61:72:d7:
         e4:d8:38:94:7a:95:56:aa:f2:a8:e4:31:4f:38:9a:c8:7e:98:
         15:b6:2c:5c:5b:20:fb:81:40:fe:ac:34:26:c5:57:b9:80:2e:
         ca:4f:17:43:27:2a:48:54:1a:d0:30:c2:74:f0:7e:3b:62:84:
         29:4c:4d:b8:29:5c:aa:71:77:23:ed:71:4f:32:64:ab:85:e1:
         34:1e:41:81:41:4f:f8:ee:6d:33:c7:2a:ed:6e:75:30:bf:41:
         c6:e5:f3:af:80:9d:b3:f5:89:79:73:49:92:24:ef:c1:3e:e2:
         a4:29:8f:a2:d6:f2:cf:b2:53:f9:13:f5:d1:96:7a:1d:6b:15:
         d7:cc:f6:32:ab:61:00:5a:f7:c7:1a:21:fe:d0:35:2a:ba:39:
         c3:d9:49:b1:1b:fc:2d:2c:c9:c2:59:32:6f:44:80:c2:0c:9f:
         a3:d8:c2:8d:e3:68:bb:b4:0a:64:73:33:38:44:02:44:a9:dc:
         8b:1d:9c:fd:78:7f:f4:27:a8:92:72:c9:55:50:ab:87:f9:36:
         e4:d9:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----