Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.mft
File:                     wCOc_EyH5Xh_xaHjbE43N5OaCDw.mft (raw, json)
Hash identifier:          IO3tPhKerWHwm5r5aRiXZ+Lv9NMEk5V/2DZP/A67tlw=
Subject key identifier:   58:62:B0:39:D2:0A:C9:C6:51:81:77:B4:D3:D7:99:37:C8:53:B9:D3
Authority key identifier: C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C
Certificate issuer:       /CN=C0239CFC4C87E5787FC5A1E36C4E3737939A083C
Certificate serial:       0B26
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.mft
Manifest number:          0B1E
Signing time:             Thu 26 May 2022 20:25:15 +0000
Manifest this update:     Thu 26 May 2022 20:25:15 +0000
Manifest next update:     Fri 27 May 2022 02:25:15 +0000
Files and hashes:         1: pNvG1MDxLL7Lym7aHjBNl1rJUN8.roa (hash: 7e67A3CV7B0gnggECUpxBfEMAmMCn0kKWvyh+wlm4WM=)
                          2: tDbJNw1AV46j32t3UOEzbddUgtI.roa (hash: rZ7ZT8+x8B54JrgOXc2gyroByaWtzqDdkGa50aZeBmE=)
                          3: wCOc_EyH5Xh_xaHjbE43N5OaCDw.crl (hash: IYZi6CHv8JWNhPtmzSS1zwJTJorChFY/Tratt6VeS/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2854 (0xb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0239CFC4C87E5787FC5A1E36C4E3737939A083C
        Validity
            Not Before: May 26 20:25:15 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5862B039D20AC9C6518177B4D3D79937C853B9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:b8:9b:62:4d:36:2d:14:95:5d:97:24:0e:
                    40:e2:2d:e6:0b:7a:ee:b9:a1:65:c2:22:63:6e:ce:
                    8e:2a:a4:a9:27:15:47:89:b0:ee:b5:c3:f7:c7:a8:
                    12:c8:3d:9b:36:dc:bd:bd:56:3a:2c:ef:8a:e4:c5:
                    bb:de:9e:7d:7f:cc:d5:e2:93:88:6c:00:0c:a0:af:
                    05:55:b8:9f:e3:41:cb:96:07:41:7e:b5:9f:5e:a6:
                    d6:b3:2c:74:82:81:5c:fa:b5:98:ef:98:72:84:67:
                    7c:5a:73:f5:c9:61:20:e0:ce:47:a2:69:aa:7d:eb:
                    02:ad:f9:64:66:90:0c:48:36:85:6c:90:36:ef:8b:
                    61:e3:96:e4:db:04:53:f7:e7:46:f7:ae:a2:1a:21:
                    a7:29:ed:3a:18:d9:e3:d0:54:7c:84:4f:f7:eb:12:
                    2c:7c:f1:8c:d7:2a:ba:e3:d1:b1:2a:22:59:67:8f:
                    65:14:83:ab:08:22:bc:76:a6:23:30:a0:61:bc:88:
                    ca:51:9f:e2:bf:63:e0:81:82:e7:ab:bb:24:c9:2b:
                    1c:10:42:ee:c0:a5:75:fe:1f:be:55:50:85:2b:c5:
                    39:34:bc:44:09:64:d3:f1:4e:76:04:c9:3f:69:93:
                    6b:07:b8:71:00:b3:fd:52:7c:12:4f:51:02:e4:a9:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:62:B0:39:D2:0A:C9:C6:51:81:77:B4:D3:D7:99:37:C8:53:B9:D3
            X509v3 Authority Key Identifier:
                keyid:C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7b:4a:04:9e:2b:db:6a:46:1e:52:84:08:34:3f:06:2e:68:
         d0:0f:b9:97:1f:ce:2b:91:2f:5f:6e:9f:aa:9c:6c:d9:aa:4f:
         3b:9d:1e:87:e1:16:75:dc:95:27:f9:1b:2f:c1:ad:24:24:bb:
         de:38:7e:de:3c:9a:4d:11:d1:13:99:f0:c5:8f:66:17:0a:eb:
         f2:c9:d9:dc:06:5a:b6:4f:f3:8b:ba:0a:0f:03:c5:81:d0:03:
         58:88:c6:18:d2:df:98:3d:01:64:85:d6:fd:f6:1a:9e:95:6b:
         17:43:86:bd:27:c7:44:74:27:d9:12:16:7f:6a:7f:3e:01:14:
         88:65:37:d9:4e:64:00:f2:76:6b:86:d0:7f:b8:b9:71:d4:20:
         db:af:de:15:79:27:6e:c1:7b:65:b9:35:cf:6f:0b:87:d7:85:
         db:c5:b0:8a:25:23:c0:ae:e6:da:14:00:76:f4:ff:8d:74:88:
         90:96:94:7c:e0:31:23:52:b3:a0:0a:68:1a:97:f4:2e:ab:97:
         0a:47:a4:78:7b:8c:41:fc:b9:ab:36:76:2a:ad:03:0b:89:ad:
         c5:fb:04:fa:28:50:12:6d:1e:5e:0e:a6:d8:76:71:d4:e8:b9:
         30:a6:77:6f:c9:47:b7:ce:97:97:25:8c:ff:96:4b:6e:c8:e7:
         f0:12:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----