Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/399/96wIUhgBk0Ir6e78yNyXN_7eQIc.mft
File:                     96wIUhgBk0Ir6e78yNyXN_7eQIc.mft (raw, json)
Hash identifier:          rrEkehshN6t9A6JQJ65oKYep7nqTE+V4jc5KCNfCT6o=
Subject key identifier:   8E:7A:F4:ED:35:3A:AD:D6:7E:32:E3:9C:C2:92:29:FB:7E:52:15:82
Authority key identifier: F7:AC:08:52:18:01:93:42:2B:E9:EE:FC:C8:DC:97:37:FE:DE:40:87
Certificate issuer:       /CN=F7AC0852180193422BE9EEFCC8DC9737FEDE4087
Certificate serial:       33B7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/96wIUhgBk0Ir6e78yNyXN_7eQIc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/96wIUhgBk0Ir6e78yNyXN_7eQIc.mft
Manifest number:          33B7
Signing time:             Thu 26 May 2022 19:56:52 +0000
Manifest this update:     Thu 26 May 2022 19:56:52 +0000
Manifest next update:     Fri 27 May 2022 01:56:52 +0000
Files and hashes:         1: 96wIUhgBk0Ir6e78yNyXN_7eQIc.crl (hash: GWsmD8s7kc0hyCLgLJvh0RPTTu4KQBKL9baYc4ZpicA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13239 (0x33b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0852180193422BE9EEFCC8DC9737FEDE4087
        Validity
            Not Before: May 26 19:56:52 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8E7AF4ED353AADD67E32E39CC29229FB7E521582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:d1:74:60:7e:b6:47:05:db:24:1f:15:3a:
                    85:56:27:64:fa:13:1b:26:ff:72:7d:f4:b9:68:a1:
                    34:9d:fc:9d:eb:57:6c:65:da:c6:3c:f2:2f:89:77:
                    4f:29:da:91:d6:46:55:82:8a:55:1a:03:cd:ec:05:
                    87:99:4d:be:c7:c7:8a:20:73:17:72:9d:e9:56:10:
                    d6:bb:c4:8e:ed:90:87:e7:c7:8d:d9:0c:f8:6c:05:
                    0d:55:e7:2d:5f:5b:39:25:8c:e9:d4:83:dd:98:30:
                    53:94:f4:df:e0:ae:c7:c9:41:23:1a:f7:78:b0:cf:
                    2b:1b:1f:70:e6:30:57:96:a6:dc:df:e2:45:f0:11:
                    25:ae:27:ec:46:45:c0:c6:12:9c:f7:56:70:d7:2b:
                    7e:dd:93:5b:8a:82:45:ff:dc:72:eb:26:b6:4f:3e:
                    0a:45:63:ad:6a:3e:10:3c:da:72:e7:4d:a5:40:e6:
                    44:54:6a:0d:1c:4a:fe:d3:01:ea:2e:e9:da:07:59:
                    b7:85:cc:23:88:d7:63:cd:4a:20:38:47:b3:50:78:
                    9c:d6:46:0d:3f:1f:34:da:8f:fc:d8:86:56:da:48:
                    a4:94:0b:50:e6:4a:6e:72:40:64:4c:e4:67:02:59:
                    60:c6:40:10:27:bc:74:14:23:5f:36:c2:ad:30:84:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7A:F4:ED:35:3A:AD:D6:7E:32:E3:9C:C2:92:29:FB:7E:52:15:82
            X509v3 Authority Key Identifier:
                keyid:F7:AC:08:52:18:01:93:42:2B:E9:EE:FC:C8:DC:97:37:FE:DE:40:87

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/96wIUhgBk0Ir6e78yNyXN_7eQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/96wIUhgBk0Ir6e78yNyXN_7eQIc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/96wIUhgBk0Ir6e78yNyXN_7eQIc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:16:c6:76:1b:41:77:bd:e7:e4:64:c9:e6:4e:80:1b:7d:27:
         c5:42:f8:1e:52:4e:eb:dd:fb:76:82:44:73:19:b2:b8:3b:4b:
         c0:d1:a3:60:62:de:88:bb:6d:06:52:77:6e:45:30:e0:6d:e3:
         12:04:c4:66:fb:70:8f:c8:89:0c:0b:85:21:97:3c:f0:1c:d7:
         e7:71:2e:00:44:95:ba:78:8c:bc:f3:0a:22:a7:c4:58:4c:ee:
         3a:c6:26:4b:c0:b4:ad:0d:97:db:9b:ce:a6:50:53:3c:68:df:
         ff:03:c0:f7:b5:69:27:ba:63:a2:33:68:1e:be:5a:c3:44:44:
         7e:c8:26:0d:42:71:8e:32:a2:4b:54:a6:a2:94:57:00:66:ba:
         62:fc:77:29:ce:22:14:2b:21:44:38:f4:58:62:22:25:eb:20:
         fa:c2:ff:9f:39:91:6c:7a:a7:ac:03:7a:a1:70:08:69:ff:8a:
         bd:15:9d:73:99:94:d8:fa:84:1a:1e:d4:0e:57:7d:40:58:df:
         f0:7f:94:f9:a1:ea:c7:cf:42:95:8f:bf:00:d2:54:18:1b:86:
         1f:45:59:a4:5b:66:08:a0:82:c3:6c:4c:4a:2c:10:07:f1:8f:
         bb:48:4b:9a:11:f4:97:1c:ad:e3:a2:10:b6:29:cd:26:44:e1:
         4d:ff:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----