Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2834/L7Y_DDE0OlVib2ACjqRf5lRYTuY.mft
File:                     L7Y_DDE0OlVib2ACjqRf5lRYTuY.mft (raw, json)
Hash identifier:          bfDxB6wlw4v5ElYQu+rGKr+N2x5VB5ln8imeMZuGXtA=
Subject key identifier:   BE:EB:CE:37:9A:71:4C:A9:69:29:B7:51:B6:72:D8:70:91:37:BB:2C
Authority key identifier: 2F:B6:3F:0C:31:34:3A:55:62:6F:60:02:8E:A4:5F:E6:54:58:4E:E6
Certificate issuer:       /CN=2FB63F0C31343A55626F60028EA45FE654584EE6
Certificate serial:       0735
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L7Y_DDE0OlVib2ACjqRf5lRYTuY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/L7Y_DDE0OlVib2ACjqRf5lRYTuY.mft
Manifest number:          0735
Signing time:             Thu 26 May 2022 19:56:44 +0000
Manifest this update:     Thu 26 May 2022 19:56:44 +0000
Manifest next update:     Fri 27 May 2022 01:56:44 +0000
Files and hashes:         1: L7Y_DDE0OlVib2ACjqRf5lRYTuY.crl (hash: RJ+Q/Di0/mExabRg3In2RriP51Mzs2uePvbWLNnXgs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB63F0C31343A55626F60028EA45FE654584EE6
        Validity
            Not Before: May 26 19:56:44 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=BEEBCE379A714CA96929B751B672D8709137BB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:f5:3f:9c:29:03:9c:b3:3a:a0:90:f2:b0:
                    1a:4f:a6:dc:77:ba:5d:04:69:8a:2b:41:e7:cd:c2:
                    46:4f:6a:a1:a3:3b:6e:a0:38:ff:97:0c:ed:71:8b:
                    c5:d0:59:c6:56:f9:a0:3d:c9:cf:d4:0c:ae:9e:52:
                    c4:94:64:a2:aa:6e:18:52:39:4f:75:2c:73:d4:23:
                    dd:a4:de:67:6d:e8:0c:bc:63:f1:94:c3:96:81:0c:
                    1e:b6:21:d2:f6:53:0a:44:7c:c4:34:56:6c:53:dd:
                    26:e7:88:5b:b7:53:dd:4c:4e:9a:8b:f7:34:87:a6:
                    aa:cc:41:0d:c6:72:9e:eb:cb:28:10:e9:06:49:91:
                    cb:df:0f:b5:54:18:65:96:db:4f:e0:a1:d3:e6:35:
                    fa:26:33:3d:ea:45:04:64:de:fb:13:74:54:d6:c0:
                    37:ca:50:e1:19:73:1b:2e:66:78:30:05:02:b7:70:
                    fd:80:5a:a0:03:79:77:4c:69:19:f1:a5:ac:4d:db:
                    cf:40:0a:12:1b:4d:a6:6d:b7:96:d1:a2:6b:2d:62:
                    e2:7d:68:59:20:7a:38:83:d6:77:19:97:47:1e:b5:
                    48:df:20:74:15:6c:79:24:20:76:28:fb:7d:98:be:
                    de:e5:f9:93:fc:19:e0:a0:f1:43:b6:5b:b0:e7:1f:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EB:CE:37:9A:71:4C:A9:69:29:B7:51:B6:72:D8:70:91:37:BB:2C
            X509v3 Authority Key Identifier:
                keyid:2F:B6:3F:0C:31:34:3A:55:62:6F:60:02:8E:A4:5F:E6:54:58:4E:E6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/L7Y_DDE0OlVib2ACjqRf5lRYTuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L7Y_DDE0OlVib2ACjqRf5lRYTuY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/L7Y_DDE0OlVib2ACjqRf5lRYTuY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:b2:7c:2b:fe:cd:7f:60:8f:c5:56:63:f7:27:e7:64:41:
         65:42:99:65:98:b9:c4:89:8a:85:c4:c7:71:46:24:35:dc:84:
         1b:7a:c5:61:48:f3:de:56:52:bb:7e:25:46:af:5c:6f:44:b6:
         38:4b:74:c4:d6:53:4d:5e:81:f7:bd:e3:f8:2b:fe:ab:9d:41:
         cc:30:01:62:b8:fc:b4:ce:d6:72:c7:cf:62:15:27:18:22:a4:
         d4:54:af:65:21:97:f3:a2:73:ca:59:ec:6d:2a:fb:65:3e:67:
         8f:a8:40:16:00:21:7c:0f:8a:f6:46:c7:46:72:6e:af:66:be:
         c5:96:75:f1:0b:c6:f0:d6:2a:ee:0b:ff:d3:59:22:bd:dd:3a:
         2b:50:f6:94:88:49:19:b7:b3:1d:11:9b:53:3e:7c:98:ed:35:
         a9:b1:af:09:37:d0:a7:fe:ae:c8:55:57:b3:e0:86:67:13:54:
         96:d2:25:79:de:b1:2a:83:e9:f9:4b:a2:6c:2e:c0:2f:b7:8c:
         b0:40:4d:c5:cf:2c:9f:72:1c:36:73:b1:ec:d3:71:27:3f:82:
         19:ee:f7:56:61:b4:d3:e5:3c:2c:59:fa:87:bb:6e:95:38:7b:
         41:ad:20:00:af:8b:66:6d:1c:c5:53:01:b3:65:90:9b:e8:9c:
         63:c7:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----