Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3072/eZfNOlqCIoDWn9ib9x0oO4ewwXU.mft
File:                     eZfNOlqCIoDWn9ib9x0oO4ewwXU.mft (raw, json)
Hash identifier:          grikUw5AN/iomwq+hCz9L/Dih9kBhciqZEBNe8RwuPs=
Subject key identifier:   86:0F:F2:5A:0D:C7:1D:4B:7C:9E:6C:95:25:16:35:84:52:09:01:32
Authority key identifier: 79:97:CD:3A:5A:82:22:80:D6:9F:D8:9B:F7:1D:28:3B:87:B0:C1:75
Certificate issuer:       /CN=7997CD3A5A822280D69FD89BF71D283B87B0C175
Certificate serial:       08AA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eZfNOlqCIoDWn9ib9x0oO4ewwXU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/eZfNOlqCIoDWn9ib9x0oO4ewwXU.mft
Manifest number:          08A9
Signing time:             Thu 26 May 2022 19:27:06 +0000
Manifest this update:     Thu 26 May 2022 19:27:06 +0000
Manifest next update:     Fri 27 May 2022 01:27:06 +0000
Files and hashes:         1: eZfNOlqCIoDWn9ib9x0oO4ewwXU.crl (hash: I5vQR222MEuRyu1kVzEAyKBqu+5m/xSx0B5ajI3zLe8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218 (0x8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997CD3A5A822280D69FD89BF71D283B87B0C175
        Validity
            Not Before: May 26 19:27:06 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=860FF25A0DC71D4B7C9E6C952516358452090132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:93:b8:47:9b:e9:c2:d7:9e:93:9b:58:be:
                    be:55:ce:6b:77:c5:5e:ab:f6:05:5b:32:fc:07:57:
                    05:58:1e:af:c9:8d:fd:35:8b:7c:62:26:a1:87:c3:
                    25:c3:84:b1:92:59:b3:45:2e:67:8e:fc:13:e9:96:
                    ac:18:51:42:79:9f:c6:b3:95:50:94:dc:37:0c:98:
                    bf:db:ea:5a:3f:16:3c:52:21:c1:fe:bb:67:77:78:
                    33:2d:52:40:b2:aa:ac:16:76:67:ac:b6:95:61:ae:
                    ae:c1:c7:a6:7f:73:d9:e9:07:f1:8a:f5:a9:58:56:
                    7c:46:a8:93:bc:43:62:95:22:3d:be:5a:5d:17:a9:
                    bb:b3:60:a4:35:be:20:62:f6:3e:6c:55:3a:6d:c9:
                    d3:56:e3:f2:b5:9d:59:b1:48:5f:f0:3e:5c:f3:6d:
                    de:72:0a:75:15:4c:9b:09:20:15:2a:a4:b1:1a:d7:
                    44:13:06:d8:2a:e7:91:4a:b0:c4:21:0e:6c:5d:91:
                    e1:e4:6b:87:8f:d5:89:ff:ea:54:f4:58:1d:de:7b:
                    b1:53:d5:82:9d:8c:8b:9d:59:57:0e:22:ee:f8:f0:
                    43:08:e7:5d:b3:98:f7:9e:2a:7b:d0:71:8a:c2:c6:
                    8b:6f:21:6f:fa:9c:1f:29:c2:0b:ab:66:7b:83:f8:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0F:F2:5A:0D:C7:1D:4B:7C:9E:6C:95:25:16:35:84:52:09:01:32
            X509v3 Authority Key Identifier:
                keyid:79:97:CD:3A:5A:82:22:80:D6:9F:D8:9B:F7:1D:28:3B:87:B0:C1:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/eZfNOlqCIoDWn9ib9x0oO4ewwXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eZfNOlqCIoDWn9ib9x0oO4ewwXU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/eZfNOlqCIoDWn9ib9x0oO4ewwXU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:72:54:66:67:4e:53:c2:96:6c:8f:b7:12:db:07:42:4e:ca:
         d1:e6:ab:e3:09:cf:b8:d8:6d:4b:b6:b5:12:ba:d7:58:20:8b:
         f8:91:bf:62:69:8e:69:c4:f9:b3:36:f4:31:a7:9f:6a:9d:a1:
         33:fb:d5:4c:5c:03:33:c7:74:fe:6b:12:cf:47:c4:15:18:d4:
         e5:50:8c:8b:9d:78:a6:95:10:5d:c3:48:52:9a:ec:95:b3:b3:
         3f:7e:a3:57:58:92:49:a3:0f:58:8c:1c:96:f6:2f:4b:58:01:
         55:90:8f:d8:c0:0d:a3:dd:51:ce:b0:e5:5a:83:78:a9:6b:48:
         9b:fc:59:b2:99:23:4d:27:c0:cc:a3:31:a4:7d:13:21:81:e4:
         a2:ec:6d:d0:6c:98:07:03:a1:f0:60:7b:f8:2c:db:41:40:13:
         6b:88:d3:1e:7f:7a:20:f0:e2:df:79:bb:24:c0:5e:4a:86:bc:
         ed:25:aa:9d:25:0e:60:9e:a3:82:78:8c:d3:00:2a:83:4f:01:
         82:5a:10:f3:50:f9:af:42:ef:ba:e2:05:ff:0f:a6:01:75:35:
         44:f3:7f:09:6c:53:36:f9:eb:03:9f:22:08:6f:7f:f5:4e:08:
         5f:ef:0f:e2:2b:3c:3f:67:1c:96:19:df:d7:9a:ac:d9:10:92:
         ae:ec:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----