Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.mft
File:                     8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.mft (raw, json)
Hash identifier:          OKiUwRykNMAOqiLbE9PjnpudVwCZnKb59DsK93Dh9i8=
Subject key identifier:   DD:35:C6:6C:E0:7F:89:E3:5B:38:55:FE:09:4B:9E:0C:4A:88:94:DE
Authority key identifier: F2:F3:39:C0:B1:DF:91:1D:22:4E:2D:5E:4A:42:F6:2A:EE:0A:74:9F
Certificate issuer:       /CN=F2F339C0B1DF911D224E2D5E4A42F62AEE0A749F
Certificate serial:       0738
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.mft
Manifest number:          0737
Signing time:             Thu 26 May 2022 19:56:54 +0000
Manifest this update:     Thu 26 May 2022 19:56:54 +0000
Manifest next update:     Fri 27 May 2022 01:56:54 +0000
Files and hashes:         1: 3TGPYK6ynCWmc3kyiA9J9XRnBqw.roa (hash: bgBXOIWFGz/p9YLlo/gAZMBYrQ4GmqHXFa66gafx4lU=)
                          2: 8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.crl (hash: 9GM7bdscR4y0ZAa2aNa0Ux/NgnQoXFe26bN9pkw41Rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F339C0B1DF911D224E2D5E4A42F62AEE0A749F
        Validity
            Not Before: May 26 19:56:54 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=DD35C66CE07F89E35B3855FE094B9E0C4A8894DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:ae:66:89:28:4a:a8:f6:d5:07:38:2a:a8:
                    8d:fc:3d:f9:ce:ce:c7:28:be:53:12:c3:62:82:57:
                    1b:46:f3:89:6b:de:96:c7:b9:4d:96:18:49:59:bd:
                    1b:b9:7b:db:72:5f:76:a8:14:74:88:05:7b:41:34:
                    61:1f:54:7b:59:1e:69:a3:3c:92:cf:0b:8e:4a:db:
                    a5:a1:b5:0a:9a:81:49:ee:bd:16:9e:73:54:08:51:
                    da:df:15:73:9f:75:f3:15:73:25:ff:2a:eb:5b:09:
                    83:35:e5:e6:89:ac:ba:fd:48:71:4e:c7:40:95:bf:
                    eb:ee:b4:0f:08:04:f4:72:3a:66:4b:13:bc:7f:59:
                    79:c5:46:c6:a7:84:5a:c7:48:bf:59:c8:20:23:57:
                    67:a8:99:9b:1d:a8:f5:5b:c9:b9:da:83:2b:ab:89:
                    8d:42:e6:33:c6:9a:3e:5b:aa:72:ca:a4:18:7c:b3:
                    4a:69:8c:30:48:fb:b2:79:ee:9d:bb:3a:49:0e:ee:
                    ef:67:42:62:74:c9:12:63:1e:c2:d6:79:b0:24:30:
                    23:9b:b3:24:f5:b5:bb:5e:ca:e3:ff:cd:ed:fb:86:
                    c3:49:ae:b9:38:46:b4:9b:ed:bf:4d:1f:bf:95:c5:
                    67:6c:8b:02:8b:ff:5c:16:3c:f5:0a:b0:ec:47:7c:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:35:C6:6C:E0:7F:89:E3:5B:38:55:FE:09:4B:9E:0C:4A:88:94:DE
            X509v3 Authority Key Identifier:
                keyid:F2:F3:39:C0:B1:DF:91:1D:22:4E:2D:5E:4A:42:F6:2A:EE:0A:74:9F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:40:e4:d4:bf:8e:4c:ad:4c:b8:3b:39:44:b7:68:38:3d:
         d5:79:94:14:4f:71:ae:be:c3:06:62:a1:31:ef:da:dc:3b:d4:
         eb:d7:8c:01:6d:29:57:ad:0c:45:ed:01:c3:c9:8e:35:d1:39:
         c8:d0:0e:19:4a:4c:a2:f1:bf:5d:c2:a9:0b:c6:f2:c1:22:a9:
         ac:e3:59:f5:d3:a5:01:dc:f3:75:e3:5f:d3:27:57:d9:9c:bc:
         5f:e3:80:07:9a:72:bc:29:3e:90:56:99:f2:5b:b7:51:87:8c:
         32:6e:d7:e7:f4:68:cf:a1:50:db:b7:59:e5:48:4b:b0:e9:c8:
         1b:0d:6d:7b:3e:48:ec:e6:ae:0f:04:0a:dc:47:6d:ff:f7:76:
         37:52:9d:10:0d:05:81:a6:59:c4:c9:ea:cc:45:a6:e2:7c:7b:
         da:ed:6e:ab:8e:84:09:e2:24:2b:51:cb:13:4c:1c:37:74:08:
         af:07:4b:b7:f3:37:80:cb:6e:b5:7d:94:85:66:a2:e7:41:d1:
         0c:21:4f:fe:29:cd:28:91:a7:33:17:e0:ec:2e:e7:a2:d1:96:
         70:6c:9e:1c:00:ae:ca:59:76:58:3d:3a:20:e6:24:c7:ec:3a:
         8c:83:0e:42:8f:bd:58:88:c0:bb:22:8b:78:a6:5a:8c:b2:25:
         5b:10:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----