Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/SKusKIK1ngev7tMnnBT4noCTGHo.mft
File:                     SKusKIK1ngev7tMnnBT4noCTGHo.mft (raw, json)
Hash identifier:          sMYvF7k9wLulrP/lHHMoH7o0XNqkSLBTEpJcmLqrav8=
Subject key identifier:   52:10:49:44:93:B9:5B:6E:53:CF:D3:2F:71:88:4C:F4:10:21:4F:FB
Authority key identifier: 48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A
Certificate issuer:       /CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
Certificate serial:       0D4E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/SKusKIK1ngev7tMnnBT4noCTGHo.mft
Manifest number:          0D44
Signing time:             Thu 26 May 2022 19:26:28 +0000
Manifest this update:     Thu 26 May 2022 19:26:28 +0000
Manifest next update:     Fri 27 May 2022 01:26:28 +0000
Files and hashes:         1: GCdYmYr5cs00v0nv9lrxeXx_9h0.roa (hash: kKdlEGAtHGtPnOkqh+v1ZsPkuX6r/w4HQAyMuLlXlkY=)
                          2: SKusKIK1ngev7tMnnBT4noCTGHo.crl (hash: i2ztrkFU8A/ow89PgjBbSxOrBaF8RLRZM0imKexC5ik=)
                          3: bDYshM_JkVOGvyLw1zmhP2UJ4bk.roa (hash: bXSU41T8j0MZmzT1gmQ++cHngFNdI7xuanh1m3eNh+8=)
                          4: dZlv20oaEwbJEq0dFcm80DFnNJM.roa (hash: l/kXutxxkTC47QV+BEfkudXJ4/VpIZrPKh7BaByKxkI=)
                          5: suKIkebH_oWVIpCkYYlIX0gyD8k.roa (hash: F9ybCduBVT7rBuBQtwMVf3Okg6aGlmDvkneOYp0VVPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
        Validity
            Not Before: May 26 19:26:28 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5210494493B95B6E53CFD32F71884CF410214FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:76:72:3b:0c:85:0a:08:a4:a8:4d:dd:65:
                    1c:4d:38:e7:b7:64:b4:fb:12:eb:03:7c:fd:11:80:
                    31:c8:48:e8:cf:d1:34:99:00:74:cf:88:d3:87:82:
                    14:2b:42:dc:f7:36:9a:3d:97:22:c1:3f:f5:f4:79:
                    25:8c:5c:39:d7:3a:18:bf:35:9c:3a:ae:6e:fb:c8:
                    d1:ee:c8:72:8c:13:23:ef:57:44:a8:5e:2c:63:ad:
                    39:f6:df:09:da:ee:1b:5d:51:3d:8a:fd:42:af:10:
                    f0:69:1d:13:fa:90:ae:3f:d0:26:09:f1:66:f1:be:
                    a3:52:97:f6:38:9d:bb:06:bc:a4:8a:73:fd:3b:ad:
                    56:e1:94:bf:31:26:e4:66:31:b1:d3:68:cb:54:37:
                    d3:b9:c6:b0:ea:6a:12:3b:14:81:a8:b9:2c:82:7c:
                    cf:dc:66:16:d7:54:16:c8:35:d6:28:18:df:59:11:
                    81:92:b4:da:06:1f:d1:d4:8a:d1:b0:73:2d:7d:3e:
                    37:74:0e:90:b5:ac:e1:01:15:35:02:19:93:5e:9b:
                    c9:06:15:9a:bb:f2:c2:e8:9f:54:54:7b:56:1b:ec:
                    52:1b:9d:bf:be:48:30:de:72:1c:94:d1:58:de:56:
                    ed:dc:6c:a7:5c:94:d6:49:3f:43:8d:e8:f9:f1:ed:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:49:44:93:B9:5B:6E:53:CF:D3:2F:71:88:4C:F4:10:21:4F:FB
            X509v3 Authority Key Identifier:
                keyid:48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/SKusKIK1ngev7tMnnBT4noCTGHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/SKusKIK1ngev7tMnnBT4noCTGHo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:86:13:a7:b2:47:46:90:03:02:82:20:0a:ac:55:ca:40:fb:
         a4:53:95:14:12:a5:73:7f:83:8c:42:b6:c6:08:d3:82:5e:b8:
         e0:4f:29:42:da:66:78:35:98:97:75:e9:6f:08:23:34:53:46:
         e7:44:a1:46:a9:be:6c:7e:78:08:09:24:0e:fe:1f:5f:0a:37:
         bb:fa:3c:25:f0:82:cb:18:ae:3f:03:9e:7a:5e:ee:96:46:73:
         4a:95:6e:dd:ed:cc:ed:7f:41:81:20:46:c3:96:49:7b:b1:6f:
         b6:0f:04:0b:37:ec:64:4b:08:79:33:83:25:b5:d3:1b:00:a9:
         ec:6a:61:68:be:34:dd:85:46:94:c8:12:bd:e1:05:2e:2a:1f:
         83:2f:f1:d2:fc:e4:48:f0:30:86:34:a2:23:51:7d:b7:8e:56:
         6f:d0:fa:41:80:dc:29:7d:fe:b7:b0:0f:73:fd:3d:1e:12:b8:
         5a:bd:31:27:9e:67:07:a0:3b:9d:8b:02:a8:0b:bb:84:6a:ca:
         6c:99:04:f7:df:1d:14:c3:ed:72:14:21:82:bd:51:9f:98:24:
         e6:c5:a3:31:8c:a3:33:41:90:a0:16:7a:73:8c:5e:de:07:48:
         6e:2f:0e:b1:34:1f:65:a7:c1:2d:db:77:1a:35:c3:9c:c4:e6:
         9a:c5:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----