Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2997/y1L7tdzx3Mi0if5irx6rqFC33Ek.mft
File:                     y1L7tdzx3Mi0if5irx6rqFC33Ek.mft (raw, json)
Hash identifier:          rL4nFFijOllsJHN175FuwD8Y8OaHmT6Q5jv7BtIy25E=
Subject key identifier:   E7:7F:FE:15:80:54:52:28:B8:4D:61:E6:BF:9D:C6:9F:08:7A:C9:1D
Authority key identifier: CB:52:FB:B5:DC:F1:DC:C8:B4:89:FE:62:AF:1E:AB:A8:50:B7:DC:49
Certificate issuer:       /CN=CB52FBB5DCF1DCC8B489FE62AF1EABA850B7DC49
Certificate serial:       0D5E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/y1L7tdzx3Mi0if5irx6rqFC33Ek.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/y1L7tdzx3Mi0if5irx6rqFC33Ek.mft
Manifest number:          0D5E
Signing time:             Thu 26 May 2022 19:27:03 +0000
Manifest this update:     Thu 26 May 2022 19:27:03 +0000
Manifest next update:     Fri 27 May 2022 01:27:03 +0000
Files and hashes:         1: y1L7tdzx3Mi0if5irx6rqFC33Ek.crl (hash: JD1sRm4QLiX+4R3TnKFII9gpLO6xg17gpxB8BlFtMFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3422 (0xd5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB52FBB5DCF1DCC8B489FE62AF1EABA850B7DC49
        Validity
            Not Before: May 26 19:27:03 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E77FFE1580545228B84D61E6BF9DC69F087AC91D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:c6:f3:9e:f3:b3:f6:58:1a:c9:21:8e:79:
                    4b:ff:01:87:bd:02:16:fc:8e:ee:ec:55:83:5d:17:
                    93:51:cf:a6:7d:a5:3a:03:ff:06:3e:c2:67:06:7e:
                    d0:70:77:b9:58:9d:b0:8e:15:11:3d:e9:89:01:67:
                    e9:12:c9:3c:49:12:a2:f8:23:f6:68:28:6c:59:9d:
                    9b:26:ff:40:cc:6b:f0:6b:23:80:a7:4f:fe:fd:b5:
                    59:30:21:62:cd:68:bc:17:62:cb:6b:a7:b8:b9:fb:
                    c4:98:04:73:dc:20:18:62:c5:52:5a:ab:52:24:f9:
                    6f:6c:d7:31:b6:61:03:44:1f:f6:cb:7e:0a:c0:18:
                    66:3b:81:e9:9c:ec:73:4d:6b:19:50:18:3e:fc:ac:
                    4d:13:3f:e2:a0:db:a0:c9:2d:9c:68:4c:9b:32:ff:
                    43:f5:8e:03:b3:66:1d:1d:65:4c:7e:ab:3e:64:8e:
                    02:91:00:8a:e8:ec:b2:eb:db:62:16:bf:ef:90:ac:
                    86:d5:24:e6:18:5a:c4:b3:60:35:63:76:5b:c8:6c:
                    ca:92:ec:66:a4:22:28:7a:13:36:e7:26:2f:52:56:
                    40:52:89:d5:88:8e:c7:a3:fb:79:0e:53:98:7c:f8:
                    34:01:22:e7:ad:bf:96:cf:b0:b1:6d:7e:97:94:d0:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7F:FE:15:80:54:52:28:B8:4D:61:E6:BF:9D:C6:9F:08:7A:C9:1D
            X509v3 Authority Key Identifier:
                keyid:CB:52:FB:B5:DC:F1:DC:C8:B4:89:FE:62:AF:1E:AB:A8:50:B7:DC:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/y1L7tdzx3Mi0if5irx6rqFC33Ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/y1L7tdzx3Mi0if5irx6rqFC33Ek.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/y1L7tdzx3Mi0if5irx6rqFC33Ek.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:eb:b8:fd:2a:57:35:39:a8:5f:14:ee:0e:1a:39:08:53:2c:
         ba:d3:96:a5:2e:02:65:fc:8e:48:cd:23:c3:a4:a1:8c:9c:05:
         35:0a:d9:6d:95:41:0d:09:3d:fb:49:29:3f:29:f9:ac:ca:55:
         51:0a:b2:2b:25:ea:32:bc:8c:d5:e2:ee:b3:f2:6a:61:3a:9b:
         79:da:2e:c6:75:89:b0:79:7e:df:eb:e3:4c:4c:9f:97:5b:51:
         64:af:98:41:86:48:3a:53:7d:6b:48:71:0a:7c:b9:68:28:ac:
         2b:0a:98:da:db:47:77:96:5f:dd:33:58:ab:f2:9f:af:6e:6b:
         c9:b8:20:7c:03:91:c2:ca:be:a9:f8:3e:55:4c:5c:b4:5c:6c:
         ea:48:1c:92:29:c9:77:24:a9:af:65:8c:8c:80:1b:b0:39:59:
         79:b0:51:58:6a:ef:a4:1a:d2:6b:6d:fe:9e:a5:8d:d5:5e:4c:
         bb:cb:8d:4a:f4:c4:ca:3c:f3:49:67:63:cb:a9:af:26:2a:05:
         50:05:2a:07:5d:28:0c:16:6d:fd:18:73:7e:12:2e:64:cd:29:
         3e:80:94:17:47:2a:49:83:72:dc:34:91:b6:18:9a:07:9c:73:
         c0:79:c1:b4:08:9b:42:4c:0f:f9:10:6c:cb:58:aa:c4:07:31:
         bc:c4:7a:fe
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I1
MkZCQjVEQ0YxRENDOEI0ODlGRTYyQUYxRUFCQTg1MEI3REM0OTAeFw0yMjA1MjYx
OTI3MDNaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEU3N0ZGRTE1ODA1NDUy
MjhCODRENjFFNkJGOURDNjlGMDg3QUM5MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCV2cbznvOz9lgaySGOeUv/AYe9Ahb8ju7sVYNdF5NRz6Z9pToD
/wY+wmcGftBwd7lYnbCOFRE96YkBZ+kSyTxJEqL4I/ZoKGxZnZsm/0DMa/BrI4Cn
T/79tVkwIWLNaLwXYstrp7i5+8SYBHPcIBhixVJaq1Ik+W9s1zG2YQNEH/bLfgrA
GGY7gemc7HNNaxlQGD78rE0TP+Kg26DJLZxoTJsy/0P1jgOzZh0dZUx+qz5kjgKR
AIro7LLr22IWv++QrIbVJOYYWsSzYDVjdlvIbMqS7GakIih6EzbnJi9SVkBSidWI
jsej+3kOU5h8+DQBIuetv5bPsLFtfpeU0DqzAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU53/+FYBUUii4TWHmv53Gnwh6yR0wHwYDVR0jBBgwFoAUy1L7tdzx3Mi0if5i
rx6rqFC33EkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk5
Ny95MUw3dGR6eDNNaTBpZjVpcng2cnFGQzMzRWsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3kxTDd0ZHp4M01pMGlmNWlyeDZycUZDMzNFay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5OTcveTFMN3RkengzTWkw
aWY1aXJ4NnJxRkMzM0VrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAvruP0qVzU5qF8U7g4aOQhTLLrTlqUuAmX8jkjNI8OkoYycBTUK2W2VQQ0J
PftJKT8p+azKVVEKsisl6jK8jNXi7rPyamE6m3naLsZ1ibB5ft/r40xMn5dbUWSv
mEGGSDpTfWtIcQp8uWgorCsKmNrbR3eWX90zWKvyn69ua8m4IHwDkcLKvqn4PlVM
XLRcbOpIHJIpyXckqa9ljIyAG7A5WXmwUVhq76Qa0mtt/p6ljdVeTLvLjUr0xMo8
80lnY8upryYqBVAFKgddKAwWbf0Yc34SLmTNKT6AlBdHKkmDctw0kbYYmgecc8B5
wbQIm0JMD/kQbMtYqsQHMbzEev4=
-----END CERTIFICATE-----