Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/65BHE8WSPONe5Mw_67Reu3lr1nM.mft
File:                     65BHE8WSPONe5Mw_67Reu3lr1nM.mft (raw, json)
Hash identifier:          T9KSN3/V+6z5AKzcuJoFOB7yefGglFKtk8wp4Q8eoM0=
Subject key identifier:   53:4D:E9:A7:06:F6:D8:EB:BE:99:F2:07:0C:67:0A:AA:95:53:F6:01
Authority key identifier: EB:90:47:13:C5:92:3C:E3:5E:E4:CC:3F:EB:B4:5E:BB:79:6B:D6:73
Certificate issuer:       /CN=EB904713C5923CE35EE4CC3FEBB45EBB796BD673
Certificate serial:       03CF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65BHE8WSPONe5Mw_67Reu3lr1nM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/65BHE8WSPONe5Mw_67Reu3lr1nM.mft
Manifest number:          03CF
Signing time:             Thu 26 May 2022 19:55:57 +0000
Manifest this update:     Thu 26 May 2022 19:55:57 +0000
Manifest next update:     Fri 27 May 2022 01:55:57 +0000
Files and hashes:         1: 65BHE8WSPONe5Mw_67Reu3lr1nM.crl (hash: XoW8wO7PBHZ/AOKyN7koRu2ngEHGzdQpJGkI8EEKvnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB904713C5923CE35EE4CC3FEBB45EBB796BD673
        Validity
            Not Before: May 26 19:55:57 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=534DE9A706F6D8EBBE99F2070C670AAA9553F601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2a:7f:27:51:c7:ee:13:56:9e:0d:4c:d0:0a:
                    f5:8a:7b:4c:a5:93:1c:e3:a8:97:7e:f4:c5:99:81:
                    74:11:dc:88:0c:d7:de:40:79:0c:0e:1b:8e:fa:e3:
                    97:98:c5:61:be:33:db:a0:3b:03:a6:aa:b2:0a:e4:
                    d3:8d:5e:2c:dc:ab:d6:ec:df:bb:93:1e:a7:e2:9a:
                    bd:98:b4:b2:bd:37:b4:8a:62:fb:1a:c5:03:0b:d4:
                    81:3f:96:2f:fc:40:b3:fa:af:ea:5e:9d:e1:d6:4a:
                    89:fa:73:e4:34:a8:51:cb:10:d1:56:8b:26:25:5b:
                    a1:53:07:72:23:dc:be:bf:22:61:9d:ac:97:ab:ea:
                    bc:d9:65:e2:fc:8d:41:ee:09:bb:9b:b0:9a:63:ca:
                    67:54:c5:55:7b:a3:a4:60:80:5f:f3:ce:53:3a:a3:
                    08:ee:d0:d9:47:a0:de:f5:77:72:32:b0:cd:f4:17:
                    30:bb:d5:c6:02:0a:58:04:42:6c:0a:29:bd:12:03:
                    32:2d:4f:6b:2f:74:59:5d:89:e1:4f:e9:86:39:ad:
                    6c:70:b9:89:3f:07:de:75:38:10:e9:f7:af:cc:0d:
                    0f:33:3c:2a:a3:73:84:28:21:72:0c:ae:d0:bd:fc:
                    a3:f9:93:02:48:33:81:a4:8b:d1:0f:1f:e3:97:e7:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4D:E9:A7:06:F6:D8:EB:BE:99:F2:07:0C:67:0A:AA:95:53:F6:01
            X509v3 Authority Key Identifier:
                keyid:EB:90:47:13:C5:92:3C:E3:5E:E4:CC:3F:EB:B4:5E:BB:79:6B:D6:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/65BHE8WSPONe5Mw_67Reu3lr1nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65BHE8WSPONe5Mw_67Reu3lr1nM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/65BHE8WSPONe5Mw_67Reu3lr1nM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dc:ff:53:49:ab:8f:eb:1f:ea:f4:b5:fb:01:13:82:15:17:
         b5:79:5b:9c:1a:3e:d2:b2:b3:e5:90:c2:9d:20:79:b8:59:d7:
         5c:87:a6:f7:a5:4a:26:da:62:8d:39:35:c2:6a:83:99:ca:f5:
         8f:43:b3:5c:86:f0:58:6f:f1:95:5f:6d:87:33:47:9c:f4:be:
         d7:11:25:f1:58:25:68:a9:04:52:e2:dc:79:56:94:a3:f7:8e:
         ea:95:ac:e9:13:7e:18:5e:b3:ba:8c:14:5d:ff:9b:ee:24:30:
         39:f1:22:7b:55:db:97:da:35:51:4c:7b:5b:25:9d:a6:91:2e:
         70:f4:47:d8:a9:72:97:8f:2d:38:a3:49:0d:7a:1c:88:93:d2:
         8c:ed:d1:ef:21:b3:78:fc:35:5c:1e:80:6a:69:e0:e6:c5:3e:
         36:2b:8c:9c:b1:70:2f:f1:b4:e2:dc:ca:ad:19:f6:63:c3:25:
         4b:88:68:10:5e:7d:46:6a:7a:58:06:1b:8d:ca:22:ef:d8:d5:
         51:a0:f7:ac:ed:ad:10:fd:8b:d6:a3:81:7c:d0:29:13:3c:fc:
         cc:a0:46:fb:7b:ff:35:ab:6f:04:80:18:09:57:ad:65:ee:98:
         38:f2:30:3a:84:b1:13:bc:0e:da:e1:ac:45:d6:e7:93:40:cf:
         ca:01:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----