Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/390/tNUz2VnESPlaRFufbzQaekp7qo0.mft
File:                     tNUz2VnESPlaRFufbzQaekp7qo0.mft (raw, json)
Hash identifier:          yjFvnuHCnusnIui+WHg1nMgHYKApmm5wxGbV2dyZWV8=
Subject key identifier:   76:E1:C6:BF:B0:D8:52:8B:D6:6A:10:95:39:0E:3F:AF:07:B8:FF:1A
Authority key identifier: B4:D5:33:D9:59:C4:48:F9:5A:44:5B:9F:6F:34:1A:7A:4A:7B:AA:8D
Certificate issuer:       /CN=B4D533D959C448F95A445B9F6F341A7A4A7BAA8D
Certificate serial:       1F1D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tNUz2VnESPlaRFufbzQaekp7qo0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/tNUz2VnESPlaRFufbzQaekp7qo0.mft
Manifest number:          1F1D
Signing time:             Thu 26 May 2022 21:56:42 +0000
Manifest this update:     Thu 26 May 2022 21:56:42 +0000
Manifest next update:     Fri 27 May 2022 03:56:42 +0000
Files and hashes:         1: tNUz2VnESPlaRFufbzQaekp7qo0.crl (hash: SQhDKH7pyaZTYTiQiaeED9SnqxOgh3OpvkpAMmxi4sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7965 (0x1f1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4D533D959C448F95A445B9F6F341A7A4A7BAA8D
        Validity
            Not Before: May 26 21:56:42 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=76E1C6BFB0D8528BD66A1095390E3FAF07B8FF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:d2:50:af:7d:75:53:76:b9:c5:45:4f:65:
                    ca:ff:ed:10:77:02:53:0f:18:9b:10:ec:41:75:3f:
                    67:33:81:e1:07:78:07:32:55:02:26:d6:32:c5:7b:
                    ec:9b:ac:54:55:33:0b:a2:75:49:9e:67:19:14:64:
                    2a:7f:2e:ff:c6:1a:83:4c:10:9b:8e:ad:26:d4:44:
                    d1:ab:16:e9:ba:d5:5c:b5:ca:a1:89:21:6d:60:dc:
                    a7:8e:6d:a5:42:f5:3b:d2:e3:09:9a:95:cc:76:f5:
                    41:28:a2:c8:5d:a6:ef:11:59:24:94:51:e1:97:35:
                    8e:f4:29:fc:f6:a7:0c:71:4b:27:b7:d6:f8:09:1e:
                    84:ae:e0:3f:6a:02:9b:56:5f:47:41:47:3e:9e:de:
                    e1:22:80:de:a3:17:e5:fa:0e:43:79:36:e1:b7:1b:
                    37:86:3d:14:9e:29:3c:4c:f2:f3:bd:a9:50:8a:40:
                    65:d4:59:05:45:32:81:e2:f5:12:18:5b:f1:13:cb:
                    9d:34:ab:8f:8f:fc:9a:1c:c8:48:2a:0f:3e:ce:7f:
                    c0:64:b9:e5:ce:5f:47:14:51:c2:3f:80:47:6b:c7:
                    b5:0c:ae:0d:f8:7f:26:d8:f8:2b:57:7a:78:df:9a:
                    a9:7b:18:6c:42:a7:98:62:46:39:0a:54:7d:11:1d:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E1:C6:BF:B0:D8:52:8B:D6:6A:10:95:39:0E:3F:AF:07:B8:FF:1A
            X509v3 Authority Key Identifier:
                keyid:B4:D5:33:D9:59:C4:48:F9:5A:44:5B:9F:6F:34:1A:7A:4A:7B:AA:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/tNUz2VnESPlaRFufbzQaekp7qo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tNUz2VnESPlaRFufbzQaekp7qo0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/tNUz2VnESPlaRFufbzQaekp7qo0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:69:a7:77:6a:cb:0c:1d:54:27:03:eb:e9:78:18:7f:f7:73:
         67:19:aa:ce:7b:b9:19:3e:c2:78:60:07:10:73:be:69:de:72:
         e8:f3:13:e6:dd:f5:a9:7f:a6:fe:10:55:cc:9d:cd:63:86:aa:
         7f:56:9f:96:1f:2c:c0:66:1c:23:54:f9:0f:6c:d6:a0:29:d8:
         d8:63:9e:64:a9:f2:9f:ae:c9:9e:1e:73:c5:b8:a6:b9:00:d1:
         b2:7e:40:cb:25:b6:31:be:12:ab:0d:d4:87:0f:79:af:d9:5e:
         e1:3e:1e:4e:e5:b2:53:ef:3c:d0:43:77:10:73:57:42:e9:f5:
         55:a0:07:9f:fc:86:37:1f:9b:9a:aa:3a:39:67:0a:44:c1:9d:
         c5:0c:db:ad:0e:c7:66:ca:56:a9:90:ed:71:41:f1:32:5b:ef:
         8d:19:84:34:71:15:b6:98:e0:ad:9e:4c:dc:35:98:4f:11:ac:
         a7:ce:b4:eb:0b:3b:fc:f0:dd:50:09:f9:11:bf:e6:87:7c:ae:
         ad:99:0f:7c:98:cb:17:3b:23:7c:c2:bc:8b:0f:f0:ad:2f:49:
         fb:6e:8e:7f:8e:e7:72:c4:37:7f:09:a9:68:e3:4b:c5:b8:7f:
         bf:c7:97:88:e8:ad:a4:16:a4:98:3f:a9:7b:4f:13:32:be:05:
         34:4f:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----