Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/plGj7hJAG2jtk-OCwFpKMLgCneQ.mft
File:                     plGj7hJAG2jtk-OCwFpKMLgCneQ.mft (raw, json)
Hash identifier:          VANd1jHnwF/6aK0BeMu/jL4yiK5hRVhfRrxNflUArAE=
Subject key identifier:   F8:88:00:23:03:E2:53:8E:96:D2:DE:2F:45:04:0F:6D:9A:69:20:7F
Authority key identifier: A6:51:A3:EE:12:40:1B:68:ED:93:E3:82:C0:5A:4A:30:B8:02:9D:E4
Certificate issuer:       /CN=A651A3EE12401B68ED93E382C05A4A30B8029DE4
Certificate serial:       0C81
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/plGj7hJAG2jtk-OCwFpKMLgCneQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/plGj7hJAG2jtk-OCwFpKMLgCneQ.mft
Manifest number:          0C81
Signing time:             Thu 26 May 2022 19:26:24 +0000
Manifest this update:     Thu 26 May 2022 19:26:24 +0000
Manifest next update:     Fri 27 May 2022 01:26:24 +0000
Files and hashes:         1: plGj7hJAG2jtk-OCwFpKMLgCneQ.crl (hash: pk0K7Lt7Ce3WnQ6HUUfyqxvbAXbrKJcs+ZSqku7+aws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3201 (0xc81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A651A3EE12401B68ED93E382C05A4A30B8029DE4
        Validity
            Not Before: May 26 19:26:24 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F888002303E2538E96D2DE2F45040F6D9A69207F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:e2:0e:34:d2:e3:4a:ce:8f:8f:83:26:bf:
                    54:eb:1c:60:a7:d2:fe:af:f8:81:cd:9c:ee:df:e5:
                    b3:d8:cd:b3:06:87:f8:a8:21:2e:79:a7:11:43:cc:
                    42:a8:66:b6:0b:e6:83:ae:5e:1b:6a:d3:9c:ad:f3:
                    34:ee:75:ba:1e:26:21:a0:55:4b:c1:db:36:e2:98:
                    f2:68:f1:cd:7a:49:29:94:2a:f2:40:76:bc:bb:27:
                    e8:43:eb:b6:04:01:14:d6:6a:57:7f:9a:26:bc:b6:
                    04:15:20:9c:e9:44:f9:58:cd:0b:49:dc:bb:0e:c4:
                    c0:99:c6:21:c7:80:a6:ef:7f:a4:b0:39:17:9c:af:
                    f8:89:3d:a3:67:d4:ae:b6:ae:a4:a8:5f:b6:17:e6:
                    5a:a0:9b:5c:d5:87:9f:b1:dc:78:4b:4c:6d:fd:31:
                    66:ea:3b:18:5b:87:01:53:41:02:e2:c3:34:6e:38:
                    e9:8d:07:0a:f7:f8:c2:4a:ac:8e:7a:5b:b3:89:3b:
                    d0:f0:be:ba:be:93:1e:d6:15:ae:c7:3d:f8:fe:ba:
                    46:da:38:59:b6:af:d5:3b:e0:10:7c:2f:34:aa:6d:
                    42:6a:f6:44:b2:9e:eb:33:f0:f0:84:bd:73:9c:e7:
                    02:0d:a4:2d:45:b4:cc:ca:31:92:fe:76:e7:7c:b5:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:00:23:03:E2:53:8E:96:D2:DE:2F:45:04:0F:6D:9A:69:20:7F
            X509v3 Authority Key Identifier:
                keyid:A6:51:A3:EE:12:40:1B:68:ED:93:E3:82:C0:5A:4A:30:B8:02:9D:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/plGj7hJAG2jtk-OCwFpKMLgCneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/plGj7hJAG2jtk-OCwFpKMLgCneQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/plGj7hJAG2jtk-OCwFpKMLgCneQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:89:5f:b4:b2:98:76:6e:7e:d3:cd:62:8a:1c:0c:51:8a:3e:
         59:fc:b7:81:15:01:3d:98:04:cb:3f:d7:c9:de:f9:85:1e:71:
         9c:2b:06:8e:c6:88:1b:d8:7c:d6:b9:f8:31:fa:b6:26:5f:3f:
         71:fe:8c:35:ec:09:72:90:38:51:41:0a:64:e0:19:d9:31:41:
         6a:da:89:b4:12:4e:96:fb:bc:66:7b:c8:ac:7b:42:c7:f9:15:
         c5:eb:19:4d:78:c1:6c:bc:6e:62:ab:da:32:df:d2:18:59:40:
         f5:07:9b:7e:14:eb:b5:8e:03:d9:e9:60:bc:97:16:cf:5d:c9:
         d0:da:ec:e5:75:f6:d2:6f:35:5b:5e:a2:90:89:6d:ce:c7:80:
         f3:3a:be:8f:12:cb:5d:6c:87:94:ad:6c:3d:ea:9f:e5:57:8d:
         97:70:8b:b4:08:ab:60:3d:ff:e8:85:6c:b7:bb:13:68:13:f6:
         c8:59:8a:54:f3:b8:4b:78:7e:8d:ed:c9:e9:82:a0:d9:93:d8:
         5e:2b:18:63:21:07:49:e9:6e:4b:1c:c6:85:4b:98:03:92:0a:
         a0:76:cd:77:10:e3:4b:6f:93:4d:84:4c:77:e7:6e:62:d8:7f:
         92:4d:6a:6f:ce:94:cb:34:e3:cc:3f:ea:5c:27:55:ab:3f:4f:
         39:4b:9f:3d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTY1
MUEzRUUxMjQwMUI2OEVEOTNFMzgyQzA1QTRBMzBCODAyOURFNDAeFw0yMjA1MjYx
OTI2MjRaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEY4ODgwMDIzMDNFMjUz
OEU5NkQyREUyRjQ1MDQwRjZEOUE2OTIwN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC09uIONNLjSs6Pj4Mmv1TrHGCn0v6v+IHNnO7f5bPYzbMGh/io
IS55pxFDzEKoZrYL5oOuXhtq05yt8zTudboeJiGgVUvB2zbimPJo8c16SSmUKvJA
dry7J+hD67YEARTWald/mia8tgQVIJzpRPlYzQtJ3LsOxMCZxiHHgKbvf6SwORec
r/iJPaNn1K62rqSoX7YX5lqgm1zVh5+x3HhLTG39MWbqOxhbhwFTQQLiwzRuOOmN
Bwr3+MJKrI56W7OJO9Dwvrq+kx7WFa7HPfj+ukbaOFm2r9U74BB8LzSqbUJq9kSy
nusz8PCEvXOc5wINpC1FtMzKMZL+dud8tVhxAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU+IgAIwPiU46W0t4vRQQPbZppIH8wHwYDVR0jBBgwFoAUplGj7hJAG2jtk+OC
wFpKMLgCneQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5
Ny9wbEdqN2hKQUcyanRrLU9Dd0ZwS01MZ0NuZVEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3BsR2o3aEpBRzJqdGstT0N3RnBLTUxnQ25lUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTcvcGxHajdoSkFHMmp0
ay1PQ3dGcEtNTGdDbmVRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAESJX7SymHZuftPNYoocDFGKPln8t4EVAT2YBMs/18ne+YUecZwrBo7GiBvY
fNa5+DH6tiZfP3H+jDXsCXKQOFFBCmTgGdkxQWraibQSTpb7vGZ7yKx7Qsf5FcXr
GU14wWy8bmKr2jLf0hhZQPUHm34U67WOA9npYLyXFs9dydDa7OV19tJvNVteopCJ
bc7HgPM6vo8Sy11sh5StbD3qn+VXjZdwi7QIq2A9/+iFbLe7E2gT9shZilTzuEt4
fo3tyemCoNmT2F4rGGMhB0npbkscxoVLmAOSCqB2zXcQ40tvk02ETHfnbmLYf5JN
am/OlMs048w/6lwnVas/TzlLnz0=
-----END CERTIFICATE-----