Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/423/2K31sszMmrgmeweD0a4U-AEdJcg.mft
File:                     2K31sszMmrgmeweD0a4U-AEdJcg.mft (raw, json)
Hash identifier:          BSy+t4oiISHLZDKtND1dkG1+XaOw0uzyz6jZ1oZ7Z4o=
Subject key identifier:   15:C1:9C:FD:B4:B7:D5:A8:03:9B:FE:2B:89:EA:7E:C2:89:24:BA:B8
Authority key identifier: D8:AD:F5:B2:CC:CC:9A:B8:26:7B:07:83:D1:AE:14:F8:01:1D:25:C8
Certificate issuer:       /CN=D8ADF5B2CCCC9AB8267B0783D1AE14F8011D25C8
Certificate serial:       0746
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2K31sszMmrgmeweD0a4U-AEdJcg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/2K31sszMmrgmeweD0a4U-AEdJcg.mft
Manifest number:          0746
Signing time:             Thu 26 May 2022 19:27:00 +0000
Manifest this update:     Thu 26 May 2022 19:27:00 +0000
Manifest next update:     Fri 27 May 2022 01:27:00 +0000
Files and hashes:         1: 2K31sszMmrgmeweD0a4U-AEdJcg.crl (hash: IESBiN4pwP28P9DEsdDIC2+Ds8nl8C82HjfCj5GgQuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ADF5B2CCCC9AB8267B0783D1AE14F8011D25C8
        Validity
            Not Before: May 26 19:27:00 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=15C19CFDB4B7D5A8039BFE2B89EA7EC28924BAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:8b:82:0f:9b:54:29:a7:eb:53:8f:f1:55:
                    9a:d5:45:cb:2d:62:94:c0:e1:d4:4f:b9:a7:37:a2:
                    46:04:80:aa:23:23:3a:71:89:f1:c4:a3:39:45:1b:
                    d3:16:fc:9b:fb:c2:98:c7:e2:c3:ce:57:86:70:5b:
                    e5:2b:75:76:a7:b9:ef:8a:3c:31:18:2b:57:da:fb:
                    05:15:7b:62:16:45:95:a1:19:96:19:ca:bd:d6:80:
                    58:24:85:9f:66:31:5f:29:22:27:33:d6:d4:c7:5f:
                    86:73:cf:fa:42:75:03:b3:fa:94:ef:51:c9:9d:be:
                    a9:8e:f9:a7:9d:42:6a:db:39:88:8d:f0:a3:cf:4c:
                    ce:97:bb:e4:88:68:05:5b:6b:1a:e8:d5:be:38:4e:
                    0b:56:47:a6:e0:da:3e:2c:a4:8b:de:1b:5b:ca:65:
                    71:b8:84:7c:c0:19:b2:21:84:1a:0a:4a:55:ae:f4:
                    f3:d5:13:e5:f2:08:b2:aa:34:21:3d:7d:cd:73:8c:
                    80:46:7c:21:b4:37:c4:31:09:2e:3e:6b:9d:ae:d1:
                    c5:f0:a9:b4:01:f3:2d:83:55:f8:5c:e1:dc:f5:47:
                    06:f0:79:c9:f4:a9:d9:cb:d4:ab:70:ca:71:92:08:
                    6b:73:7f:d9:92:40:4c:70:ac:ea:c7:fd:bb:f8:41:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:9C:FD:B4:B7:D5:A8:03:9B:FE:2B:89:EA:7E:C2:89:24:BA:B8
            X509v3 Authority Key Identifier:
                keyid:D8:AD:F5:B2:CC:CC:9A:B8:26:7B:07:83:D1:AE:14:F8:01:1D:25:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/2K31sszMmrgmeweD0a4U-AEdJcg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2K31sszMmrgmeweD0a4U-AEdJcg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/2K31sszMmrgmeweD0a4U-AEdJcg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:57:35:45:3a:0c:1b:ee:4a:59:98:49:b2:99:c7:aa:4b:d7:
         1f:a1:6c:8f:ad:fe:91:6f:2e:00:1a:a5:99:cc:0d:88:77:8e:
         74:f7:77:af:33:ec:83:66:f3:d1:cd:c8:04:93:42:77:ac:56:
         4d:20:ca:ec:50:cd:5d:4c:2e:cc:c9:db:2d:04:cd:c8:14:08:
         5a:57:f1:d8:0a:8b:cf:b9:fa:26:49:15:a2:88:ad:ed:ff:05:
         f9:dc:5d:d4:35:13:d9:57:cd:9d:3e:fd:dd:ea:0e:47:8b:b6:
         b4:b0:e8:e2:18:53:4d:22:a7:05:4a:e0:ec:6a:4e:ec:f9:3a:
         29:c9:32:16:57:95:b8:f6:3f:a6:19:77:69:9a:5a:cc:66:65:
         94:82:67:88:48:8d:dc:c9:39:bd:b9:9d:02:59:b2:51:fc:97:
         8c:01:77:8f:18:87:a1:df:6d:06:cd:eb:ed:91:72:be:60:0e:
         81:26:05:ee:a9:44:3e:81:fe:7a:f8:3e:0b:bb:11:2e:b8:b3:
         b6:19:65:e9:a8:5f:e4:88:4f:1f:15:75:b8:45:f2:8a:86:d9:
         7a:93:7f:57:ce:1a:5d:d0:5a:d7:b9:3f:5d:93:4f:7f:5b:70:
         73:91:41:5d:d3:c7:e3:89:c1:ff:88:6d:e3:74:42:eb:39:0b:
         b6:c4:5d:90
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDhB
REY1QjJDQ0NDOUFCODI2N0IwNzgzRDFBRTE0RjgwMTFEMjVDODAeFw0yMjA1MjYx
OTI3MDBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDE1QzE5Q0ZEQjRCN0Q1
QTgwMzlCRkUyQjg5RUE3RUMyODkyNEJBQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChL4uCD5tUKafrU4/xVZrVRcstYpTA4dRPuac3okYEgKojIzpx
ifHEozlFG9MW/Jv7wpjH4sPOV4ZwW+UrdXanue+KPDEYK1fa+wUVe2IWRZWhGZYZ
yr3WgFgkhZ9mMV8pIicz1tTHX4Zzz/pCdQOz+pTvUcmdvqmO+aedQmrbOYiN8KPP
TM6Xu+SIaAVbaxro1b44TgtWR6bg2j4spIveG1vKZXG4hHzAGbIhhBoKSlWu9PPV
E+XyCLKqNCE9fc1zjIBGfCG0N8QxCS4+a52u0cXwqbQB8y2DVfhc4dz1Rwbwecn0
qdnL1KtwynGSCGtzf9mSQExwrOrH/bv4QUZzAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUFcGc/bS31agDm/4riep+wokkurgwHwYDVR0jBBgwFoAU2K31sszMmrgmeweD
0a4U+AEdJcgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDIz
LzJLMzFzc3pNbXJnbWV3ZUQwYTRVLUFFZEpjZy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMkszMXNzek1tcmdtZXdlRDBhNFUtQUVkSmNnLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDIzLzJLMzFzc3pNbXJnbWV3
ZUQwYTRVLUFFZEpjZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCqVzVFOgwb7kpZmEmymceqS9cfoWyPrf6Rby4AGqWZzA2Id45093evM+yDZvPR
zcgEk0J3rFZNIMrsUM1dTC7MydstBM3IFAhaV/HYCovPufomSRWiiK3t/wX53F3U
NRPZV82dPv3d6g5Hi7a0sOjiGFNNIqcFSuDsak7s+TopyTIWV5W49j+mGXdpmlrM
ZmWUgmeISI3cyTm9uZ0CWbJR/JeMAXePGIeh320GzevtkXK+YA6BJgXuqUQ+gf56
+D4LuxEuuLO2GWXpqF/kiE8fFXW4RfKKhtl6k39Xzhpd0FrXuT9dk09/W3BzkUFd
08fjicH/iG3jdELrOQu2xF2Q
-----END CERTIFICATE-----