Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/434/uPJm-XvdgtQorfJOnTDhZeMJZg0.mft
File:                     uPJm-XvdgtQorfJOnTDhZeMJZg0.mft (raw, json)
Hash identifier:          RJBkij5cff7+jvxy6uYmxPj7W1EvLMTHYDs9r8F8e5Q=
Subject key identifier:   5B:24:E3:50:66:C6:C8:58:91:00:0B:74:E5:66:9E:4E:BB:87:A3:0B
Authority key identifier: B8:F2:66:F9:7B:DD:82:D4:28:AD:F2:4E:9D:30:E1:65:E3:09:66:0D
Certificate issuer:       /CN=B8F266F97BDD82D428ADF24E9D30E165E309660D
Certificate serial:       042A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/uPJm-XvdgtQorfJOnTDhZeMJZg0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/uPJm-XvdgtQorfJOnTDhZeMJZg0.mft
Manifest number:          042A
Signing time:             Thu 26 May 2022 19:25:47 +0000
Manifest this update:     Thu 26 May 2022 19:25:47 +0000
Manifest next update:     Fri 27 May 2022 01:25:47 +0000
Files and hashes:         1: uPJm-XvdgtQorfJOnTDhZeMJZg0.crl (hash: 6cipacLorcyH8Hngi/kTfSht+L/o3EwQdpydRk/WPDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F266F97BDD82D428ADF24E9D30E165E309660D
        Validity
            Not Before: May 26 19:25:47 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5B24E35066C6C85891000B74E5669E4EBB87A30B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:81:df:b7:20:77:8b:54:20:6c:08:b5:c9:
                    1b:f0:68:11:08:3e:d0:60:ad:b0:c0:b5:ce:d5:02:
                    46:de:40:e6:c9:5b:b1:d0:89:35:94:c7:35:db:9b:
                    26:fc:ff:84:35:92:a5:43:2e:92:1e:ba:1d:b9:55:
                    31:32:da:1d:be:60:00:2e:8d:7c:7c:8a:28:5e:82:
                    2d:a5:49:64:85:d1:bf:da:7b:45:98:9a:88:6e:d2:
                    bf:5e:06:10:2b:63:53:73:1d:81:f7:5a:82:7d:39:
                    a6:29:c2:dc:2e:fd:9e:5c:b6:4f:6a:ba:5b:1b:42:
                    c1:18:d4:7b:0b:88:fe:5f:30:d7:d6:16:78:30:f6:
                    e6:5d:06:88:57:27:81:7d:31:46:a0:b5:46:5e:c1:
                    9c:27:c4:63:c9:41:da:97:34:eb:46:5a:8d:f7:82:
                    06:22:d4:a7:7c:23:3c:49:27:95:d6:7e:bb:eb:7a:
                    0d:64:5d:43:31:3b:61:d3:48:da:0c:d9:50:32:40:
                    06:26:98:9c:65:21:33:18:96:1b:73:d1:45:63:22:
                    ad:ee:bf:0b:c4:75:67:e3:84:92:d8:76:cd:61:a9:
                    15:f7:bf:82:93:5f:89:4b:77:b0:d4:64:4a:23:8a:
                    8b:fe:f8:39:86:99:3b:06:80:2b:4d:a2:e1:9b:83:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:24:E3:50:66:C6:C8:58:91:00:0B:74:E5:66:9E:4E:BB:87:A3:0B
            X509v3 Authority Key Identifier:
                keyid:B8:F2:66:F9:7B:DD:82:D4:28:AD:F2:4E:9D:30:E1:65:E3:09:66:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/uPJm-XvdgtQorfJOnTDhZeMJZg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/uPJm-XvdgtQorfJOnTDhZeMJZg0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/uPJm-XvdgtQorfJOnTDhZeMJZg0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:ac:90:e7:cc:fa:de:75:71:f7:5b:59:c2:60:79:66:86:
         14:e9:ab:7e:c5:6d:09:8e:d3:ab:99:e4:42:58:b7:01:1e:8a:
         11:c2:2d:d5:55:ea:73:86:a4:e4:aa:76:52:71:be:85:6d:63:
         72:b0:a2:1a:32:05:3b:36:c0:e4:18:b2:af:e2:76:49:2c:b5:
         92:76:04:84:8c:6d:d3:88:1f:20:87:0e:a6:f4:6c:cd:11:60:
         25:04:a4:06:e9:d3:34:7b:2d:98:4f:9d:af:48:e3:00:30:09:
         29:49:b4:18:6e:67:e8:e2:90:36:1f:ec:55:10:01:99:69:ef:
         25:76:86:7c:ba:1a:9a:b0:7b:cd:6b:48:e3:66:07:61:1f:a7:
         74:88:86:85:3f:5e:89:52:c8:ca:75:f0:d1:18:65:c8:8e:fa:
         02:8d:ba:ca:00:a4:3c:5c:c9:22:03:90:1a:92:45:1d:7c:98:
         7b:19:c7:da:f9:4d:23:73:66:f6:b8:ae:f5:c1:99:18:ae:e4:
         78:a2:39:a1:fc:7b:ab:37:6b:4c:aa:8c:5c:b2:f9:b6:cc:55:
         d3:86:b8:35:0c:b0:1e:66:17:4b:e7:bc:cc:fb:a9:64:b6:66:
         75:d9:b7:9a:b7:77:75:10:72:f3:19:d8:a3:44:70:6c:82:1a:
         4c:3c:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----