Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2823/IKUIU03ZPgHcEZEUSupZpROGJmU.mft
File:                     IKUIU03ZPgHcEZEUSupZpROGJmU.mft (raw, json)
Hash identifier:          jONbyWahUlbCZlnDygCy2esnwQaFRgE5s06lZBhhaQQ=
Subject key identifier:   1F:DA:08:AF:D9:9A:95:F9:90:A5:09:4A:32:8C:D3:49:AD:71:E1:F3
Authority key identifier: 20:A5:08:53:4D:D9:3E:01:DC:11:91:14:4A:EA:59:A5:13:86:26:65
Certificate issuer:       /CN=20A508534DD93E01DC1191144AEA59A513862665
Certificate serial:       0738
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IKUIU03ZPgHcEZEUSupZpROGJmU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/IKUIU03ZPgHcEZEUSupZpROGJmU.mft
Manifest number:          0736
Signing time:             Thu 26 May 2022 19:56:05 +0000
Manifest this update:     Thu 26 May 2022 19:56:05 +0000
Manifest next update:     Fri 27 May 2022 01:56:05 +0000
Files and hashes:         1: IKUIU03ZPgHcEZEUSupZpROGJmU.crl (hash: 9pZOEZJCiahKhJgrzhwAusermHZjetjgF93KfjeNL40=)
                          2: lzVKM149y88OnoImII9GvS3cNNg.roa (hash: xaKe8IosqZXlC1TnzdwQEOl8pU8+b0qRnlKazD8+nx4=)
                          3: y2EvWh7JShs4q2svixdJHFSckdU.roa (hash: Lr4fRWV2MNn4IpJB2uMPTVeZ77dGsCv1MO5XbuePvCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20A508534DD93E01DC1191144AEA59A513862665
        Validity
            Not Before: May 26 19:56:05 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1FDA08AFD99A95F990A5094A328CD349AD71E1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a2:8f:ae:c3:07:ef:93:ec:e4:3c:50:1a:56:
                    f2:2f:e1:39:e7:1c:b7:bb:ab:b9:92:69:9f:a2:24:
                    20:49:73:4e:17:2c:9b:aa:bc:ac:ab:65:c1:c1:fa:
                    f8:10:25:be:23:05:40:d6:75:3a:b7:ad:6f:bc:a8:
                    9c:6d:7c:e5:18:82:01:ac:27:e9:de:ae:07:da:4c:
                    df:8e:46:67:4d:71:a4:d7:b4:a2:96:29:73:36:42:
                    07:a5:d1:4b:68:df:36:06:39:a3:53:8e:bd:63:bb:
                    bf:bb:0d:4f:6d:ea:d5:91:39:96:92:73:2b:a8:69:
                    4b:ad:6e:72:d3:65:40:0e:ef:2c:51:4c:9e:ff:8e:
                    4e:d7:cb:1c:f1:ff:8b:c9:fd:73:04:e9:95:0f:03:
                    9b:9c:15:27:50:d1:64:41:4d:be:29:ab:19:74:48:
                    9d:39:2a:91:a8:4f:26:cf:95:6d:1f:f4:38:ed:14:
                    08:f5:30:ea:65:fd:d7:98:99:a9:9d:22:51:c8:fc:
                    62:16:95:c7:bd:49:ef:b5:ba:c7:c7:e9:8b:61:e7:
                    40:0a:a6:32:e8:2c:56:73:6e:d0:28:13:be:59:f4:
                    2f:22:a4:cf:70:8a:6c:fa:3b:cc:19:88:5c:ff:c6:
                    02:c6:0e:49:f9:95:fa:9c:b0:7d:b7:de:fa:38:a6:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DA:08:AF:D9:9A:95:F9:90:A5:09:4A:32:8C:D3:49:AD:71:E1:F3
            X509v3 Authority Key Identifier:
                keyid:20:A5:08:53:4D:D9:3E:01:DC:11:91:14:4A:EA:59:A5:13:86:26:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/IKUIU03ZPgHcEZEUSupZpROGJmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IKUIU03ZPgHcEZEUSupZpROGJmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/IKUIU03ZPgHcEZEUSupZpROGJmU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:91:52:b7:09:33:db:09:24:58:b9:18:15:17:65:b6:7a:
         fa:aa:0d:61:ac:ae:27:b3:ed:b3:ce:86:bc:90:f7:32:ae:e0:
         bb:da:06:1e:7e:15:fc:57:f2:c3:ca:2e:4c:e6:60:8e:80:9b:
         49:49:f5:f2:e1:90:70:52:f7:2e:c6:09:c1:53:6f:82:62:8f:
         b0:4b:36:d6:9b:ea:c4:7e:3f:c9:1c:e7:59:15:c6:58:d5:93:
         9b:aa:a1:fc:72:49:12:c8:d4:79:7b:56:4e:77:8a:7a:73:61:
         4f:a8:6a:d7:96:b4:88:bd:65:87:68:12:6f:1d:46:5b:47:33:
         05:51:41:af:1c:e8:87:0f:69:b7:86:5e:e8:6f:dc:58:87:97:
         87:ff:9d:29:d3:f5:5f:5d:3b:82:f5:c2:78:90:65:a7:83:60:
         0a:a0:90:6f:e2:0e:f3:7a:00:bd:3f:6d:bc:17:d5:af:5f:a5:
         fe:c8:85:60:f4:a5:f2:13:a6:24:e6:45:4d:90:15:3e:0f:d2:
         8c:64:f9:c4:af:89:05:ad:ff:99:dd:4d:eb:da:31:4c:06:b5:
         63:80:e4:02:9b:81:84:8d:67:6b:c6:de:8a:bf:c6:27:82:74:
         aa:bf:b0:64:2e:76:3a:31:69:88:a1:f9:d1:dc:d4:94:2a:6d:
         6c:d0:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----