Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3035/SFDHjSCnehV9Z182NimmX__OGOQ.mft
File:                     SFDHjSCnehV9Z182NimmX__OGOQ.mft (raw, json)
Hash identifier:          NjAZuqEcyXSosCeu+pgyLge1dwlwdmbpCFoHJR0ezPk=
Subject key identifier:   14:CB:1B:D7:A0:B7:99:37:F0:18:30:6E:D3:C1:3C:06:E2:2B:7A:BB
Authority key identifier: 48:50:C7:8D:20:A7:7A:15:7D:67:5F:36:36:29:A6:5F:FF:CE:18:E4
Certificate issuer:       /CN=4850C78D20A77A157D675F363629A65FFFCE18E4
Certificate serial:       0947
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SFDHjSCnehV9Z182NimmX__OGOQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3035/SFDHjSCnehV9Z182NimmX__OGOQ.mft
Manifest number:          0947
Signing time:             Tue 01 Mar 2022 08:29:00 +0000
Manifest this update:     Tue 01 Mar 2022 08:29:00 +0000
Manifest next update:     Tue 01 Mar 2022 14:29:00 +0000
Files and hashes:         1: SFDHjSCnehV9Z182NimmX__OGOQ.crl (hash: m/VX/qHmuxb1dWO1PRT6vi0CRkW4gRmFMZpiyuUD2Ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375 (0x947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4850C78D20A77A157D675F363629A65FFFCE18E4
        Validity
            Not Before: Mar  1 08:29:00 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=14CB1BD7A0B79937F018306ED3C13C06E22B7ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:6b:29:0d:3e:64:92:62:92:ee:05:bb:35:
                    be:59:35:c5:a6:fb:90:d5:fd:0b:8e:3e:95:cc:f2:
                    f7:83:7f:54:9d:76:0a:73:2d:b9:55:00:c4:0b:e8:
                    84:db:91:08:e8:af:25:b8:8d:c4:1f:32:fa:36:b7:
                    a7:4a:27:95:1b:ea:16:2d:41:25:0c:c2:1d:91:5b:
                    17:67:ce:22:f6:95:0c:f9:f6:00:61:73:d0:2e:24:
                    21:40:72:0a:4a:1b:69:bc:63:3e:4d:85:ea:29:db:
                    12:24:44:e3:69:7f:b5:2b:df:d4:a3:83:7d:aa:42:
                    8f:90:b1:f2:e8:dd:f7:2d:31:03:85:06:c3:f2:b3:
                    e8:80:fb:3c:01:27:d6:f1:b1:73:5f:0c:5c:90:30:
                    a3:bd:d8:59:1f:a4:35:cd:d7:28:f5:b2:9f:3e:ad:
                    13:ee:46:91:27:57:04:b0:33:56:a8:2c:c2:b9:a9:
                    0d:70:bf:2d:1d:d7:09:7a:85:13:09:af:63:86:e5:
                    a0:6a:30:d6:ad:22:be:ed:65:ac:5c:27:a6:f8:ca:
                    5d:3a:d4:41:bd:ee:46:c6:78:65:ab:ae:fa:fb:18:
                    77:41:fe:6e:71:d8:7f:43:2b:b1:6a:cf:0b:a7:a4:
                    50:d3:6c:4c:e9:98:1a:e7:bd:2a:37:9c:b5:39:1a:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CB:1B:D7:A0:B7:99:37:F0:18:30:6E:D3:C1:3C:06:E2:2B:7A:BB
            X509v3 Authority Key Identifier:
                keyid:48:50:C7:8D:20:A7:7A:15:7D:67:5F:36:36:29:A6:5F:FF:CE:18:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3035/SFDHjSCnehV9Z182NimmX__OGOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SFDHjSCnehV9Z182NimmX__OGOQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3035/SFDHjSCnehV9Z182NimmX__OGOQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:39:4b:b3:e0:d3:77:7d:86:bf:44:05:2d:0a:91:18:d5:
         5c:05:02:09:4f:1a:b8:6f:7e:5d:34:7a:0e:9a:98:e2:35:af:
         d3:27:39:fd:02:59:88:f0:93:1d:07:4e:71:38:1c:ef:35:50:
         0f:a1:07:ab:81:12:78:20:03:de:47:72:96:f8:de:94:8e:b2:
         28:c3:44:f6:91:02:83:97:e6:5c:0e:48:e6:ff:af:b1:b5:b5:
         b3:63:55:eb:7f:0b:38:84:ec:88:01:1d:67:ed:c4:15:83:11:
         db:04:bd:0f:6d:f0:ad:fe:25:63:c5:72:3a:59:da:f0:e8:e2:
         fd:5d:ab:3d:9b:66:c7:50:d3:4c:43:7e:29:2e:f8:20:54:13:
         af:05:01:53:b8:6e:b5:f4:a6:51:f8:5a:e0:b2:33:9b:1b:81:
         31:55:99:a1:3b:df:d4:6f:2c:cb:4f:e0:3e:05:44:53:4f:ea:
         c3:a8:13:e8:86:7b:63:c2:10:f2:ab:e0:d9:f7:8f:4c:18:64:
         d6:30:bf:46:1c:74:16:be:fd:7b:35:c0:b0:f6:72:71:cd:50:
         11:ae:b6:7f:f1:8b:30:73:7d:24:29:e6:6d:bd:3b:85:5e:6a:
         94:ff:0d:67:eb:e5:de:18:70:63:dd:66:68:7b:77:b0:d9:0e:
         58:24:b4:cc
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDg1
MEM3OEQyMEE3N0ExNTdENjc1RjM2MzYyOUE2NUZGRkNFMThFNDAeFw0yMjAzMDEw
ODI5MDBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDE0Q0IxQkQ3QTBCNzk5
MzdGMDE4MzA2RUQzQzEzQzA2RTIyQjdBQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbW2spDT5kkmKS7gW7Nb5ZNcWm+5DV/QuOPpXM8veDf1Sddgpz
LblVAMQL6ITbkQjoryW4jcQfMvo2t6dKJ5Ub6hYtQSUMwh2RWxdnziL2lQz59gBh
c9AuJCFAcgpKG2m8Yz5Nheop2xIkRONpf7Ur39Sjg32qQo+QsfLo3fctMQOFBsPy
s+iA+zwBJ9bxsXNfDFyQMKO92FkfpDXN1yj1sp8+rRPuRpEnVwSwM1aoLMK5qQ1w
vy0d1wl6hRMJr2OG5aBqMNatIr7tZaxcJ6b4yl061EG97kbGeGWrrvr7GHdB/m5x
2H9DK7FqzwunpFDTbEzpmBrnvSo3nLU5GkVxAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUFMsb16C3mTfwGDBu08E8BuIrerswHwYDVR0jBBgwFoAUSFDHjSCnehV9Z182
NimmX//OGOQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAz
NS9TRkRIalNDbmVoVjlaMTgyTmltbVhfX09HT1EuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NGREhqU0NuZWhWOVoxODJOaW1tWF9fT0dPUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMzUvU0ZESGpTQ25laFY5
WjE4Mk5pbW1YX19PR09RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADDAOUuz4NN3fYa/RAUtCpEY1VwFAglPGrhvfl00eg6amOI1r9MnOf0CWYjw
kx0HTnE4HO81UA+hB6uBEnggA95Hcpb43pSOsijDRPaRAoOX5lwOSOb/r7G1tbNj
Vet/CziE7IgBHWftxBWDEdsEvQ9t8K3+JWPFcjpZ2vDo4v1dqz2bZsdQ00xDfiku
+CBUE68FAVO4brX0plH4WuCyM5sbgTFVmaE739RvLMtP4D4FRFNP6sOoE+iGe2PC
EPKr4Nn3j0wYZNYwv0YcdBa+/Xs1wLD2cnHNUBGutn/xizBzfSQp5m29O4VeapT/
DWfr5d4YcGPdZmh7d7DZDlgktMw=
-----END CERTIFICATE-----