Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2810/NhHx2U2JGSwdpfaXqpyT6YXlK2s.mft
File:                     NhHx2U2JGSwdpfaXqpyT6YXlK2s.mft (raw, json)
Hash identifier:          Kd+uyi1AP5D4pD3s3CLfAjACCTeVjhcdw8ZCUQ5C2Ys=
Subject key identifier:   0F:B5:40:07:2B:79:CD:53:A3:98:88:1E:0C:DC:81:57:46:71:63:F2
Authority key identifier: 36:11:F1:D9:4D:89:19:2C:1D:A5:F6:97:AA:9C:93:E9:85:E5:2B:6B
Certificate issuer:       /CN=3611F1D94D89192C1DA5F697AA9C93E985E52B6B
Certificate serial:       345E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NhHx2U2JGSwdpfaXqpyT6YXlK2s.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/NhHx2U2JGSwdpfaXqpyT6YXlK2s.mft
Manifest number:          345E
Signing time:             Thu 26 May 2022 19:55:14 +0000
Manifest this update:     Thu 26 May 2022 19:55:14 +0000
Manifest next update:     Fri 27 May 2022 01:55:14 +0000
Files and hashes:         1: NhHx2U2JGSwdpfaXqpyT6YXlK2s.crl (hash: 7EXZQSvmrg0VJXZoSVa7CqbhCBZgFNTVRsD7cBxk0TY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13406 (0x345e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611F1D94D89192C1DA5F697AA9C93E985E52B6B
        Validity
            Not Before: May 26 19:55:14 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0FB540072B79CD53A398881E0CDC8157467163F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:6e:5a:6f:ca:25:52:74:d2:b7:8f:8f:2a:
                    16:c4:82:41:fc:4a:0e:2a:f9:16:74:72:b6:e9:53:
                    84:1e:f5:62:f4:89:a4:8c:0c:2a:20:a8:bf:18:d4:
                    d0:5c:67:99:bf:cf:60:27:bc:b8:f7:c5:d9:c1:0f:
                    bd:d7:63:78:13:4b:34:c6:78:0f:e8:7f:50:56:bb:
                    d3:c6:00:86:46:c8:52:e2:c7:28:4e:b0:0a:bf:f5:
                    53:a7:94:64:3c:9e:62:ab:4a:0f:d3:7d:82:9c:20:
                    03:77:53:68:a6:31:0c:bb:4f:16:6f:b3:92:9a:fe:
                    89:ae:f9:5c:e4:ee:3f:b8:f4:40:52:50:3e:1c:35:
                    f7:8e:ec:d3:31:d3:cd:4b:87:59:9d:20:d9:09:3c:
                    b8:ba:f8:d4:11:75:ef:7b:2f:65:f6:b3:3e:3f:f3:
                    bf:08:f0:14:46:40:f6:fa:ab:0a:74:a7:b3:e2:cc:
                    c2:0b:aa:b9:de:38:6a:63:33:58:8b:af:89:56:f4:
                    f8:d9:69:25:40:52:35:96:a7:7f:f3:98:27:ac:cc:
                    2b:f1:9b:12:ee:55:de:3c:6e:64:b5:99:8d:ef:22:
                    c7:52:1d:1f:a7:87:e0:c2:55:92:0b:c0:20:cc:e0:
                    ce:2e:e7:f3:9d:8a:2a:37:72:35:c4:d6:b9:20:a7:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:40:07:2B:79:CD:53:A3:98:88:1E:0C:DC:81:57:46:71:63:F2
            X509v3 Authority Key Identifier:
                keyid:36:11:F1:D9:4D:89:19:2C:1D:A5:F6:97:AA:9C:93:E9:85:E5:2B:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/NhHx2U2JGSwdpfaXqpyT6YXlK2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NhHx2U2JGSwdpfaXqpyT6YXlK2s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/NhHx2U2JGSwdpfaXqpyT6YXlK2s.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:97:4a:0b:89:ee:3e:1c:72:55:4c:65:34:05:64:cf:c7:b8:
         2c:51:ec:2f:40:32:3f:8a:1b:53:08:31:33:81:13:35:ce:3f:
         fb:15:e3:30:21:de:17:ad:f7:2c:4e:25:55:2f:aa:c4:b2:84:
         94:e8:17:1c:d5:0c:06:83:29:d2:5f:71:b0:17:90:18:b4:ac:
         10:ae:bf:45:4e:69:de:5b:83:94:3c:ab:24:fd:d3:64:d5:11:
         9a:3f:3f:11:53:f6:99:c3:23:3f:79:33:a8:04:90:0f:8c:71:
         39:91:c0:8b:70:4c:39:3e:b3:7a:0e:0b:b6:bd:68:42:92:56:
         cd:22:7b:27:de:9b:63:dc:42:db:5b:a9:e5:87:48:36:c7:a3:
         00:3c:87:eb:b7:6d:2d:b4:b4:0c:5f:55:f4:e4:b4:34:3b:d3:
         f5:38:a0:ac:8e:a7:b4:6b:89:6f:80:9b:48:be:8b:07:f5:7d:
         af:e6:44:cf:98:79:97:b1:18:59:19:ae:55:d2:fd:2f:5d:d2:
         b3:03:fe:39:fa:7e:25:43:ac:f9:2b:3d:c9:08:29:83:8f:4d:
         75:65:01:63:94:65:9f:52:96:5a:ca:44:3a:b4:fc:02:1c:62:
         1f:55:12:a1:87:dd:53:73:a9:8b:5b:2b:bc:1d:37:cb:5e:6d:
         65:63:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----