Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3023/C4R5TwlXOInHnuy4R3zNf8G92eE.mft
File:                     C4R5TwlXOInHnuy4R3zNf8G92eE.mft (raw, json)
Hash identifier:          opWWGbQ1hPScY34pkwbjewTVpv+KAAV5T7XIVCQi5Do=
Subject key identifier:   57:D2:16:CB:03:E9:FE:CE:FD:88:38:80:7B:D3:48:FC:6F:F3:4D:D6
Authority key identifier: 0B:84:79:4F:09:57:38:89:C7:9E:EC:B8:47:7C:CD:7F:C1:BD:D9:E1
Certificate issuer:       /CN=0B84794F09573889C79EECB8477CCD7FC1BDD9E1
Certificate serial:       0B14
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C4R5TwlXOInHnuy4R3zNf8G92eE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/C4R5TwlXOInHnuy4R3zNf8G92eE.mft
Manifest number:          0B14
Signing time:             Thu 26 May 2022 20:25:12 +0000
Manifest this update:     Thu 26 May 2022 20:25:12 +0000
Manifest next update:     Fri 27 May 2022 02:25:12 +0000
Files and hashes:         1: C4R5TwlXOInHnuy4R3zNf8G92eE.crl (hash: JMX23TvjiuXQ3flDorQZErH1jVQW6PWHI0sbDOCkwXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2836 (0xb14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B84794F09573889C79EECB8477CCD7FC1BDD9E1
        Validity
            Not Before: May 26 20:25:12 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=57D216CB03E9FECEFD8838807BD348FC6FF34DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:e6:55:8e:d9:bf:f0:cd:c3:7c:2d:05:bb:
                    a5:41:5e:26:b0:d3:ca:b9:ac:66:1c:e4:c9:b0:d0:
                    88:c9:0f:f3:8b:38:ef:b4:ec:26:53:cf:4c:fe:70:
                    4a:0a:74:4c:60:29:28:76:af:8c:b9:76:a3:bd:3d:
                    3c:2b:24:4b:ff:ac:11:b8:f3:31:45:ed:46:e6:bb:
                    aa:3a:e2:7c:73:52:6a:5d:83:60:6e:ac:d3:19:ce:
                    7d:e3:42:c4:d9:26:15:bf:94:83:4c:c5:63:37:f4:
                    98:9b:bb:37:4b:5b:96:67:db:21:e5:9c:17:f9:a3:
                    1f:5a:0f:01:c8:ee:89:66:19:2f:3f:74:c9:77:64:
                    9b:5c:91:0b:c5:43:7a:f7:0d:49:7f:8b:1b:af:74:
                    bd:9d:99:7f:3b:cb:6b:62:eb:67:85:a9:fa:a0:5a:
                    48:91:ce:a0:27:99:b2:87:fb:e2:60:38:09:35:b2:
                    a0:d3:b2:34:46:2c:db:f8:71:f0:08:78:8f:ff:76:
                    a6:a7:32:1d:19:6b:e0:54:1d:5c:06:93:e9:23:43:
                    fb:d1:41:cf:4a:e2:4d:11:51:0f:24:a2:23:2d:ff:
                    7c:f3:be:65:99:d5:6a:99:93:07:cd:26:23:63:15:
                    65:03:ff:e0:56:8e:b1:63:27:76:54:23:62:66:4d:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D2:16:CB:03:E9:FE:CE:FD:88:38:80:7B:D3:48:FC:6F:F3:4D:D6
            X509v3 Authority Key Identifier:
                keyid:0B:84:79:4F:09:57:38:89:C7:9E:EC:B8:47:7C:CD:7F:C1:BD:D9:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/C4R5TwlXOInHnuy4R3zNf8G92eE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/C4R5TwlXOInHnuy4R3zNf8G92eE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/C4R5TwlXOInHnuy4R3zNf8G92eE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:8f:00:b8:77:a7:43:2d:f4:db:ac:e7:79:90:67:08:eb:
         e1:ae:1a:f9:84:ae:56:a6:d2:e9:23:c5:f2:0d:dd:cd:d3:ba:
         8a:c4:0e:96:32:b6:eb:8d:96:84:6b:51:56:2f:57:c4:3e:7d:
         34:07:c0:31:84:d5:3e:e7:6d:80:8d:67:11:d6:44:f0:75:c6:
         a1:7a:a2:7f:00:1d:27:09:7b:e0:c8:22:4c:1a:6c:08:bf:47:
         00:0f:fc:ac:56:9b:b4:f0:6a:05:ca:fc:7c:53:f3:d3:85:8f:
         1b:28:6d:04:93:1d:e6:35:03:23:fe:3b:21:1c:fa:92:77:d9:
         67:60:4b:fc:ec:4b:56:46:46:e7:ab:09:ad:8f:1d:d2:17:c6:
         bf:41:8c:58:49:14:85:0b:63:76:a2:f8:14:e4:d1:91:1b:42:
         de:3c:32:54:2f:5a:a8:87:41:99:fb:f9:62:7d:c1:75:be:6b:
         22:d9:a2:3a:56:aa:70:56:6a:01:d5:f2:ff:ef:e4:da:cf:a2:
         f2:37:61:cf:f2:e2:a9:a5:dc:38:cb:f2:c8:7f:60:3c:01:e4:
         d2:d0:4f:1d:a5:62:ee:39:a7:74:fa:07:4b:96:79:fe:15:2e:
         15:32:a7:fc:f6:b6:f3:bb:d2:35:27:59:22:6c:58:0a:e7:61:
         74:15:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----