Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.mft
File:                     EZT78Y1zN5VCKLa1m5CeYwhVa9A.mft (raw, json)
Hash identifier:          SVNdsOJ/8COexYe+oZDeHqL36TFrIgyooXuIsOu4jCg=
Subject key identifier:   59:CB:F7:96:DB:42:D3:9F:EF:B3:D3:1A:15:C0:E7:C9:99:27:09:84
Authority key identifier: 11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0
Certificate issuer:       /CN=1194FBF18D7337954228B6B59B909E6308556BD0
Certificate serial:       08A9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.mft
Manifest number:          08A7
Signing time:             Thu 26 May 2022 19:00:37 +0000
Manifest this update:     Thu 26 May 2022 19:00:37 +0000
Manifest next update:     Fri 27 May 2022 01:00:37 +0000
Files and hashes:         1: EZT78Y1zN5VCKLa1m5CeYwhVa9A.crl (hash: Hb1jBCsOo2gReVxoXa8CFXqRHZRw8OWdh+Z7mdrae3M=)
                          2: lx1-0wu-IrMqzpPrKaqlyReH5Nc.roa (hash: R+/V3/m1VqQ4EribhTl9FaPji5XAViiadmbPBO0fUvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1194FBF18D7337954228B6B59B909E6308556BD0
        Validity
            Not Before: May 26 19:00:37 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=59CBF796DB42D39FEFB3D31A15C0E7C999270984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:97:2d:52:7a:45:62:c7:a7:a0:42:07:4b:
                    13:df:69:bd:4c:70:6f:1d:61:b9:d1:02:03:88:12:
                    af:fd:3c:30:22:28:1a:b5:98:6c:fc:be:f6:28:73:
                    f9:73:d7:47:a3:37:d6:ec:35:cc:88:7c:a6:8c:f7:
                    25:7d:e3:fe:16:27:ef:2b:b4:a3:aa:e0:3c:a0:21:
                    5d:76:9f:04:92:74:a2:34:4e:71:f7:ef:c0:de:c4:
                    36:10:c4:93:e4:27:ed:21:6e:e0:c1:15:aa:f8:e6:
                    61:01:03:a6:7f:9e:54:7e:0d:a3:af:46:21:6d:fe:
                    83:6f:f6:c3:8f:f5:f6:6e:bf:7a:01:31:a9:e1:d9:
                    f6:d4:2d:e4:a7:b8:8f:d6:a1:fc:a2:54:29:39:74:
                    76:7a:86:2f:7a:3c:f4:f5:c1:08:b6:f3:b4:60:6b:
                    37:09:34:1c:b2:01:64:75:bd:de:4d:04:be:7e:a5:
                    c2:a0:92:b4:ef:5d:a3:1c:55:3d:a6:a4:5f:a2:3a:
                    2c:57:db:4b:70:55:23:1b:f5:9a:b1:8b:b1:ae:6d:
                    1a:c6:07:87:e1:9c:1e:3f:53:79:5d:65:cb:43:ed:
                    a4:fb:c1:f4:55:a9:67:03:d9:a4:a7:d0:13:47:c9:
                    49:e3:ed:0f:49:6d:47:67:bf:56:f7:d4:f1:a9:9a:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:F7:96:DB:42:D3:9F:EF:B3:D3:1A:15:C0:E7:C9:99:27:09:84
            X509v3 Authority Key Identifier:
                keyid:11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:dc:ed:5c:a6:63:3c:69:3e:5c:80:11:27:e9:69:a9:0a:
         bf:1e:fa:a4:58:72:e5:7a:ed:03:4f:6c:6f:81:c7:e0:30:6d:
         a8:5d:04:d9:75:eb:38:9c:d9:6d:10:d1:24:dd:3f:cc:41:e8:
         c9:f6:53:30:7c:6d:6a:e2:5c:15:73:88:e4:03:50:2a:2d:93:
         1f:19:60:aa:78:0e:fb:8d:84:d8:3d:e0:de:90:98:08:ee:af:
         e4:c2:63:e7:8d:8c:17:cf:73:c1:6b:e3:8f:b9:24:20:a2:dc:
         a6:ed:66:f7:72:58:d9:51:9e:2b:e2:f5:ce:a0:4d:c1:5c:4c:
         61:9e:ce:fc:2d:2e:36:b8:34:77:0f:46:3a:7d:bd:51:11:d6:
         71:4d:d3:e1:b1:d0:81:1f:21:f0:4b:5e:4e:13:78:b2:bc:4e:
         7d:94:4a:9c:10:04:94:96:84:c7:14:77:a9:dd:d2:26:17:14:
         1a:d0:53:a2:12:3f:b3:02:c4:eb:b2:68:14:c4:e8:cc:90:1c:
         74:12:8c:4b:11:e8:cb:ef:31:1a:b6:1d:d4:4a:f6:49:ba:f9:
         a7:3d:6c:3d:4f:5f:c3:6c:93:af:6d:df:ba:03:ad:27:2c:00:
         75:e0:d6:ba:31:fa:bb:8c:9a:6b:ac:21:0d:9b:e1:6f:74:18:
         cc:15:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----