Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/MLjOl00GSqzQzqQUraucXMOUXeE.mft
File:                     MLjOl00GSqzQzqQUraucXMOUXeE.mft (raw, json)
Hash identifier:          UT9eKUFwb9TyzZ1o5+Kvbhp4NpkD1ug94Lq6g0juAjw=
Subject key identifier:   81:D6:D4:C0:4D:A6:E7:BE:07:11:5C:BE:41:86:35:7E:E6:C9:E0:24
Authority key identifier: 30:B8:CE:97:4D:06:4A:AC:D0:CE:A4:14:AD:AB:9C:5C:C3:94:5D:E1
Certificate issuer:       /CN=30B8CE974D064AACD0CEA414ADAB9C5CC3945DE1
Certificate serial:       068B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MLjOl00GSqzQzqQUraucXMOUXeE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/MLjOl00GSqzQzqQUraucXMOUXeE.mft
Manifest number:          068B
Signing time:             Thu 26 May 2022 21:56:46 +0000
Manifest this update:     Thu 26 May 2022 21:56:46 +0000
Manifest next update:     Fri 27 May 2022 03:56:46 +0000
Files and hashes:         1: MLjOl00GSqzQzqQUraucXMOUXeE.crl (hash: TZPpbMju2gC/gpzhfJXmEl/Tbt8LTj6HkiQN96PB5p8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B8CE974D064AACD0CEA414ADAB9C5CC3945DE1
        Validity
            Not Before: May 26 21:56:46 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=81D6D4C04DA6E7BE07115CBE4186357EE6C9E024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:54:1c:59:62:16:10:93:1e:34:ea:aa:65:
                    6f:2a:0c:38:f6:ab:b6:b1:f9:dd:b1:e2:15:36:4d:
                    51:f0:53:64:ea:2a:5a:93:e8:07:1a:4c:5f:ae:2b:
                    39:24:f6:54:7f:2e:63:26:b1:fc:32:5d:78:34:02:
                    1c:c8:a5:9d:68:1e:7b:d9:34:9d:91:fb:73:da:fb:
                    14:79:10:d0:53:28:17:d4:4e:be:df:29:f9:89:82:
                    a9:f4:94:50:f0:1c:73:ac:9f:dd:86:60:48:7c:87:
                    76:6d:b0:d7:6a:8e:57:c7:76:22:96:f8:f5:db:27:
                    00:96:a2:02:24:83:69:c6:ea:df:15:c2:2a:f8:6d:
                    af:a6:f9:9b:e4:b9:65:d7:0f:5f:b4:65:30:0f:4a:
                    d3:49:b5:90:e7:e8:80:46:3c:09:48:dd:ee:ed:73:
                    d9:fd:e9:9f:c9:38:87:60:83:1d:36:02:21:85:72:
                    1a:7f:54:c9:eb:da:b4:c9:50:4a:30:a1:d0:8b:be:
                    1b:d2:7b:6f:c9:a2:bb:17:ef:86:6f:6a:be:6a:f3:
                    d2:6e:c8:80:de:71:46:4e:16:5b:bc:4a:70:38:80:
                    3d:68:68:bb:3a:d0:43:50:e1:b5:1b:45:93:4f:25:
                    b3:53:d1:ac:72:e3:40:09:ef:d5:e0:77:46:3a:28:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:D4:C0:4D:A6:E7:BE:07:11:5C:BE:41:86:35:7E:E6:C9:E0:24
            X509v3 Authority Key Identifier:
                keyid:30:B8:CE:97:4D:06:4A:AC:D0:CE:A4:14:AD:AB:9C:5C:C3:94:5D:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/MLjOl00GSqzQzqQUraucXMOUXeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MLjOl00GSqzQzqQUraucXMOUXeE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/MLjOl00GSqzQzqQUraucXMOUXeE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:f8:0d:9f:6e:f2:83:7e:20:c3:dc:f2:4c:17:9f:66:49:
         c5:67:b2:64:ec:3c:61:b5:8a:f0:aa:cf:7b:08:eb:32:8f:4c:
         e9:ca:31:44:21:7d:31:2e:3e:5a:8d:ac:dc:60:b4:19:0f:ab:
         64:08:4f:d2:1c:f7:b6:d4:ef:81:73:1a:77:a9:d6:b5:9e:b4:
         2a:1f:72:fd:80:21:00:e5:1b:ac:69:76:e6:ba:42:5b:1b:42:
         35:db:69:a2:f0:c6:13:25:c6:30:93:79:ce:08:22:6b:05:57:
         09:3c:b0:b1:0c:68:02:39:fd:9c:59:f7:08:a8:2f:d7:d7:9d:
         33:f7:ee:f3:31:d8:c6:1c:9a:3f:d1:d7:fb:40:78:60:2e:f8:
         e1:42:66:a0:d3:e6:7d:67:74:1c:3f:6b:f5:b3:4a:e1:5b:be:
         90:ae:a7:25:64:75:de:79:b3:a9:7d:6b:aa:60:db:47:bc:ff:
         3d:7e:aa:0b:8d:4d:93:ce:5f:6f:0e:a1:fe:8e:e7:74:a7:1f:
         69:80:75:d0:d8:4f:ec:14:79:49:b2:ac:a6:88:18:c6:ad:1c:
         fa:34:a7:aa:99:0d:35:43:31:9b:87:24:85:8a:90:27:72:ba:
         4d:2c:1a:fd:60:c8:4c:f6:63:39:0e:c8:3d:79:fd:13:49:0e:
         71:d9:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----