Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/556/Z4y3_30CtUgtP-4k1nj32tHFFZo.mft
File:                     Z4y3_30CtUgtP-4k1nj32tHFFZo.mft (raw, json)
Hash identifier:          40yZH7gtn0nsC3Q8/3L+rzs2vNRDk5iYoSOGxPkwTLM=
Subject key identifier:   C1:1E:32:89:F1:DE:A3:54:D3:C1:78:21:9E:8E:0B:D9:3C:91:4E:AA
Authority key identifier: 67:8C:B7:FF:7D:02:B5:48:2D:3F:EE:24:D6:78:F7:DA:D1:C5:15:9A
Certificate issuer:       /CN=678CB7FF7D02B5482D3FEE24D678F7DAD1C5159A
Certificate serial:       0733
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z4y3_30CtUgtP-4k1nj32tHFFZo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Z4y3_30CtUgtP-4k1nj32tHFFZo.mft
Manifest number:          0733
Signing time:             Thu 26 May 2022 19:00:38 +0000
Manifest this update:     Thu 26 May 2022 19:00:38 +0000
Manifest next update:     Fri 27 May 2022 01:00:38 +0000
Files and hashes:         1: Z4y3_30CtUgtP-4k1nj32tHFFZo.crl (hash: goSU1a4TBV3n2erVv/7FiTUAxUopxawZW4Lg5Bm535g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678CB7FF7D02B5482D3FEE24D678F7DAD1C5159A
        Validity
            Not Before: May 26 19:00:38 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C11E3289F1DEA354D3C178219E8E0BD93C914EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:b2:5c:5d:8e:51:17:13:17:3a:8a:90:e6:
                    7f:dd:35:0b:23:1c:4b:90:44:32:7f:39:3b:07:43:
                    1b:d0:61:7a:0e:b3:1f:30:ae:cb:7b:31:da:5c:87:
                    f9:5b:31:ec:fb:03:4c:ca:47:ad:ea:46:5d:38:b8:
                    d8:0c:1e:da:c9:d8:5c:90:76:9b:41:0d:a7:59:9e:
                    91:c7:96:4d:9b:06:0e:6b:a5:88:ec:06:cf:c5:ab:
                    c2:e2:4b:5a:17:20:94:a6:b7:c6:61:64:e2:99:7f:
                    53:1a:64:84:38:38:b2:45:39:28:2e:5f:ce:13:b8:
                    95:4a:cd:fd:fe:83:4d:b3:31:4f:e9:94:af:8e:1a:
                    e6:f1:4f:0b:a2:80:f7:bf:e0:a3:a4:e1:9e:42:2a:
                    ce:11:36:b9:2c:ba:78:0d:4f:71:d4:1e:d5:3c:ee:
                    84:d5:ac:0d:df:22:54:2b:f7:0a:77:9a:fa:e7:3e:
                    20:f4:59:f1:1a:c6:4a:5d:4b:a5:8d:b9:9b:c3:d9:
                    81:a1:a7:4b:95:5e:3f:d6:07:33:94:19:e8:bb:0c:
                    5e:f9:eb:ff:83:92:af:a6:4d:43:6c:18:a7:82:6b:
                    ea:e6:a7:a2:59:ed:7c:80:2e:13:a6:81:34:27:b4:
                    23:89:91:76:78:39:3a:0d:f1:eb:90:5d:0b:95:3b:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1E:32:89:F1:DE:A3:54:D3:C1:78:21:9E:8E:0B:D9:3C:91:4E:AA
            X509v3 Authority Key Identifier:
                keyid:67:8C:B7:FF:7D:02:B5:48:2D:3F:EE:24:D6:78:F7:DA:D1:C5:15:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Z4y3_30CtUgtP-4k1nj32tHFFZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z4y3_30CtUgtP-4k1nj32tHFFZo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Z4y3_30CtUgtP-4k1nj32tHFFZo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:bf:7f:c8:87:8c:1c:db:94:bd:b1:11:ce:5b:6a:46:96:
         4c:a4:2e:b9:44:fe:79:c3:74:c2:6b:90:32:1e:20:d5:e0:40:
         47:3b:e6:a3:7b:60:56:0b:49:53:6c:d6:e8:b0:87:8a:70:39:
         3f:2f:34:0f:ac:cd:88:3f:60:7f:94:67:36:07:e5:09:77:06:
         eb:64:ad:ae:85:31:45:42:72:b9:cf:70:a0:4f:44:5f:24:a6:
         75:c8:6d:9b:91:ad:48:07:3c:32:47:7c:1e:89:14:d3:e7:8c:
         1e:01:51:f8:b2:24:24:72:14:42:07:96:ec:90:5d:7a:11:4c:
         a8:f5:ef:e1:e9:ce:72:7e:fb:48:b0:ef:9a:e7:ac:d1:94:46:
         47:41:f9:e3:2a:65:40:6a:bb:19:ea:1e:fa:0e:66:53:a0:f3:
         6f:17:21:af:52:31:c0:83:10:0f:2e:b6:b0:fa:a7:19:f7:09:
         18:0e:00:1e:94:19:78:a8:a7:6f:8f:8e:d1:1a:f1:2e:4a:70:
         cf:fe:1f:81:d5:17:33:fd:a6:58:ad:70:a4:4c:23:88:24:5e:
         3b:72:83:20:ad:ed:5b:f8:2c:75:84:ca:0a:5e:56:4c:4b:79:
         92:b6:35:02:32:01:43:e9:2d:22:21:77:f0:a5:42:fe:e3:7d:
         39:d5:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----