Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/PlNNS1HoxGaBieOhakThpJuzC6s.mft
File:                     PlNNS1HoxGaBieOhakThpJuzC6s.mft (raw, json)
Hash identifier:          hGBdukaY46M3gzI5pcdOYqmoZCyG9VZ51Fixfn6231s=
Subject key identifier:   7F:41:83:88:57:BC:50:69:24:6F:06:6E:43:C0:29:82:78:0C:C3:C9
Authority key identifier: 3E:53:4D:4B:51:E8:C4:66:81:89:E3:A1:6A:44:E1:A4:9B:B3:0B:AB
Certificate issuer:       /CN=3E534D4B51E8C4668189E3A16A44E1A49BB30BAB
Certificate serial:       30EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PlNNS1HoxGaBieOhakThpJuzC6s.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/PlNNS1HoxGaBieOhakThpJuzC6s.mft
Manifest number:          30EA
Signing time:             Thu 26 May 2022 19:00:47 +0000
Manifest this update:     Thu 26 May 2022 19:00:46 +0000
Manifest next update:     Fri 27 May 2022 01:00:46 +0000
Files and hashes:         1: PlNNS1HoxGaBieOhakThpJuzC6s.crl (hash: f1i2v8iamXWQX+9VVuWgsPFdm/v6ZTD4nhxYddLnWr4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12522 (0x30ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E534D4B51E8C4668189E3A16A44E1A49BB30BAB
        Validity
            Not Before: May 26 19:00:46 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7F41838857BC5069246F066E43C02982780CC3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:52:72:9b:27:1c:d2:b6:79:19:3b:a0:c9:
                    2f:60:1d:f6:00:bd:26:87:7e:d8:51:00:43:ec:bf:
                    f6:30:9e:01:00:cc:57:e4:4b:b4:5c:0a:42:85:ee:
                    88:67:10:ae:92:be:df:c6:38:09:1a:4e:2a:f0:67:
                    c3:54:09:ba:1f:66:30:40:88:82:06:9c:94:0f:90:
                    1e:a4:16:16:a9:90:52:e5:6e:35:b1:87:59:9d:34:
                    de:f0:57:e8:fc:71:47:10:06:e8:40:c1:8c:08:cb:
                    47:ae:ef:55:13:c7:ea:cc:cd:3a:18:97:fb:b0:c6:
                    31:f8:1d:a0:f9:b3:59:f3:11:db:74:4b:12:81:3c:
                    75:6e:0e:39:00:2b:58:af:c7:1f:24:f9:74:1e:98:
                    9e:a0:47:08:2b:8f:46:26:f0:ca:57:91:8c:33:d9:
                    11:74:92:70:02:6c:c5:d7:1f:49:95:88:b4:59:81:
                    a2:2c:b8:5d:4e:2a:a1:9d:ee:63:7d:95:d8:cd:76:
                    a9:1a:77:3b:3f:b6:4e:5a:44:86:b9:e8:ce:16:c0:
                    81:59:0b:07:c3:90:ad:42:09:ba:df:54:6c:41:00:
                    57:49:58:ee:76:51:d4:12:03:8c:b4:18:80:ea:2f:
                    5b:4d:c1:a1:35:f4:c1:9b:65:38:89:bd:2c:cb:a0:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:83:88:57:BC:50:69:24:6F:06:6E:43:C0:29:82:78:0C:C3:C9
            X509v3 Authority Key Identifier:
                keyid:3E:53:4D:4B:51:E8:C4:66:81:89:E3:A1:6A:44:E1:A4:9B:B3:0B:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/PlNNS1HoxGaBieOhakThpJuzC6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PlNNS1HoxGaBieOhakThpJuzC6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/PlNNS1HoxGaBieOhakThpJuzC6s.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:7c:92:1f:2e:15:d6:fa:89:d2:00:74:86:76:85:07:fb:
         ac:20:ad:aa:42:13:2e:6c:8c:35:1f:36:b4:54:67:5b:ba:56:
         df:9e:75:39:93:e9:21:7c:42:47:00:61:1a:f4:5d:c1:bb:38:
         1e:26:d0:de:44:6a:df:ee:0d:2a:e4:08:f4:87:1d:fd:ed:77:
         1c:2c:83:78:8e:cc:c2:8f:7e:39:c7:fd:ca:0b:0e:b7:85:f0:
         d1:e3:f4:ac:a8:e9:1b:ce:aa:84:28:8b:89:13:b4:c3:e4:ad:
         04:63:c6:ff:a2:0b:2c:15:ce:ea:7e:05:87:9e:a4:e0:9e:5f:
         de:4d:fa:58:89:25:f3:b1:9c:0d:d3:74:c6:a9:dd:c8:e7:53:
         5f:1c:a1:ef:5e:41:da:ba:94:91:3a:c0:36:d1:d7:f9:cd:97:
         12:05:04:6e:61:18:81:b8:79:c6:d0:c1:c6:4b:92:d4:f5:d6:
         2c:5b:bf:5b:31:c3:66:5a:3f:03:9b:ec:ab:7f:76:42:68:76:
         bb:e3:5e:74:66:8e:d9:c0:c2:86:c1:71:06:00:ee:c4:62:f8:
         a4:c4:71:7b:7f:fe:eb:49:c7:cc:a4:87:fe:10:56:9f:20:e3:
         59:6b:20:d1:dc:8e:c6:66:a8:90:81:a9:47:b0:93:26:f2:e4:
         be:35:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----