Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/390/uyzJW2-DZL64_EZmXFicZXVoJUg.mft
File:                     uyzJW2-DZL64_EZmXFicZXVoJUg.mft (raw, json)
Hash identifier:          OgJVVt2sGbbF+WwzdPt8whjQJES4J7e4PsWUet0JfwA=
Subject key identifier:   0F:5C:F0:12:ED:C0:EC:50:C9:9B:B9:90:2C:B4:CD:40:79:9B:EA:5F
Authority key identifier: BB:2C:C9:5B:6F:83:64:BE:B8:FC:46:66:5C:58:9C:65:75:68:25:48
Certificate issuer:       /CN=BB2CC95B6F8364BEB8FC46665C589C6575682548
Certificate serial:       0463
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/uyzJW2-DZL64_EZmXFicZXVoJUg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/uyzJW2-DZL64_EZmXFicZXVoJUg.mft
Manifest number:          0463
Signing time:             Sun 08 Jan 2023 08:43:28 +0000
Manifest this update:     Sun 08 Jan 2023 08:43:28 +0000
Manifest next update:     Sun 08 Jan 2023 14:43:28 +0000
Files and hashes:         1: uyzJW2-DZL64_EZmXFicZXVoJUg.crl (hash: lk/CAGc1wTN8vQtQXlV/DQlIsz5FqwuCmoDBPylwCLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2CC95B6F8364BEB8FC46665C589C6575682548
        Validity
            Not Before: Jan  8 08:43:28 2023 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=0F5CF012EDC0EC50C99BB9902CB4CD40799BEA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:3c:25:ec:2c:ba:1a:06:e2:2f:94:c9:c5:
                    70:81:c6:77:09:71:f0:c3:15:28:b7:af:cf:89:50:
                    c9:3e:e7:3e:80:48:be:d0:e1:bb:24:f8:8a:03:cf:
                    89:02:86:db:64:89:ff:f9:54:ab:bf:ac:31:e7:0c:
                    06:0a:7b:70:35:46:20:fc:63:0d:c7:f7:55:c4:e3:
                    bb:ae:1b:6b:b0:6d:29:31:91:2b:44:7e:fd:94:51:
                    fb:00:6e:79:89:3e:0f:d9:b7:17:31:17:ec:aa:48:
                    05:de:e4:c5:69:42:3f:f4:da:76:21:6e:32:28:2a:
                    93:a3:2f:54:eb:8d:7a:2c:e7:50:6c:36:30:76:c8:
                    96:3d:76:60:7e:a2:96:57:a8:c2:9c:9e:51:96:2a:
                    01:42:56:31:a9:fb:da:4d:2d:06:aa:5c:e0:9b:3b:
                    f4:61:77:7a:aa:b3:40:b3:c8:9f:b6:27:47:9f:32:
                    33:da:28:fe:fd:38:32:f8:56:64:ce:9a:7d:45:56:
                    24:05:9b:97:d8:f5:a8:d1:ae:62:a8:c6:44:28:d3:
                    38:4f:d3:50:f6:49:c6:17:df:88:3c:48:20:b5:72:
                    60:f3:e6:53:b7:81:d0:31:3b:46:f1:eb:12:38:24:
                    dd:4b:61:e3:fe:9a:65:e6:b8:84:b9:5b:e4:5b:ae:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:F0:12:ED:C0:EC:50:C9:9B:B9:90:2C:B4:CD:40:79:9B:EA:5F
            X509v3 Authority Key Identifier:
                keyid:BB:2C:C9:5B:6F:83:64:BE:B8:FC:46:66:5C:58:9C:65:75:68:25:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/uyzJW2-DZL64_EZmXFicZXVoJUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/uyzJW2-DZL64_EZmXFicZXVoJUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/uyzJW2-DZL64_EZmXFicZXVoJUg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:18:75:ae:10:7c:83:dd:63:de:e7:0e:c3:7e:f8:97:1a:84:
         4c:30:f4:ca:8d:c7:81:e8:83:ba:06:20:e0:ae:53:e5:77:b2:
         13:c7:d4:fb:1a:0f:4f:ef:12:82:15:fb:1a:17:ba:2c:9d:99:
         ff:06:99:34:00:8c:f6:ef:84:79:b6:6a:4e:2d:7c:c9:00:52:
         f6:66:8e:a1:1e:ad:d7:e2:cb:9d:45:fc:7a:a0:ac:69:06:01:
         83:70:43:64:89:6b:af:25:60:da:7d:0e:d6:0b:62:53:c0:70:
         a1:3d:de:22:20:73:f0:0e:6d:82:c6:a5:77:ac:9f:43:05:9d:
         28:d7:e5:35:eb:04:48:e2:28:45:a4:59:68:e1:b7:12:9e:97:
         2a:48:3d:37:35:66:e0:ce:1d:03:ae:5b:b1:17:45:57:fa:c5:
         be:36:77:20:ef:09:e8:9c:11:a3:b9:97:93:89:30:e8:c8:21:
         57:a2:93:6a:3f:f8:69:76:b5:6d:82:9f:9c:80:99:ba:a1:88:
         d4:bb:5e:f4:94:e4:87:5d:0e:c7:fa:e6:92:75:68:f9:31:91:
         91:3f:17:30:73:2d:ca:62:c2:54:9a:f1:4f:76:2c:e0:6c:d8:
         25:09:61:e9:d2:ef:c4:2b:ec:2a:a0:c9:35:d6:a6:bc:c1:e6:
         0c:5b:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----