Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/587/pD2pEr0ApojC2LVRVxLcOlo6T-8.mft
File:                     pD2pEr0ApojC2LVRVxLcOlo6T-8.mft (raw, json)
Hash identifier:          M3iuyT5uwTj5xyrxIvsjYERofQHnl+fNHYhJ79sWJ2U=
Subject key identifier:   8D:E4:70:67:27:E4:E9:29:32:66:AB:0C:17:B5:39:C5:8F:28:9E:E2
Authority key identifier: A4:3D:A9:12:BD:00:A6:88:C2:D8:B5:51:57:12:DC:3A:5A:3A:4F:EF
Certificate issuer:       /CN=A43DA912BD00A688C2D8B5515712DC3A5A3A4FEF
Certificate serial:       03D6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pD2pEr0ApojC2LVRVxLcOlo6T-8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/pD2pEr0ApojC2LVRVxLcOlo6T-8.mft
Manifest number:          03D6
Signing time:             Thu 26 May 2022 19:00:20 +0000
Manifest this update:     Thu 26 May 2022 19:00:20 +0000
Manifest next update:     Fri 27 May 2022 01:00:20 +0000
Files and hashes:         1: pD2pEr0ApojC2LVRVxLcOlo6T-8.crl (hash: QONTgFUGNxjudiawl1O5C3ds4b8j9krGuItXhFyraU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43DA912BD00A688C2D8B5515712DC3A5A3A4FEF
        Validity
            Not Before: May 26 19:00:20 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8DE4706727E4E9293266AB0C17B539C58F289EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7b:cf:67:77:b2:47:92:34:e8:6d:3c:e5:d2:
                    77:04:b2:f5:21:20:2b:d4:94:3d:17:84:71:57:4d:
                    5d:d3:05:14:bc:a5:f7:b8:ef:50:39:80:a5:67:59:
                    34:ef:a7:75:28:3f:ba:8b:0f:37:9e:17:17:0a:4a:
                    c9:a1:07:da:24:6b:4d:42:c3:db:4c:99:74:85:72:
                    6a:06:03:85:d0:4b:6c:0e:3e:60:7f:4e:95:ac:82:
                    f3:80:e4:6d:e8:99:44:eb:27:8b:ba:65:08:1e:32:
                    f2:bc:70:80:09:ea:01:bd:d8:b6:44:58:b9:2e:e2:
                    6d:41:b5:c2:51:0f:0e:69:9c:9a:95:f5:cb:df:b2:
                    be:fb:9c:e4:f1:37:3d:4e:2f:89:d0:b1:62:2e:98:
                    0d:07:a0:26:93:b2:0a:8f:85:c2:e7:db:f5:d3:94:
                    89:90:4b:2d:6c:4d:e6:f0:d3:1f:8b:57:4c:60:81:
                    23:c8:f1:7b:5a:74:d0:e6:aa:b9:05:4b:3d:4e:f2:
                    51:54:75:a3:6d:08:21:77:ee:1b:bb:ee:a2:ca:53:
                    fb:fe:40:da:eb:33:e5:6d:da:ee:0f:4e:9c:d8:82:
                    0f:6f:64:c7:1c:9a:1a:30:98:f8:dd:34:ca:64:dd:
                    14:1e:ed:77:81:aa:ec:84:70:03:bb:2a:58:79:5b:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:70:67:27:E4:E9:29:32:66:AB:0C:17:B5:39:C5:8F:28:9E:E2
            X509v3 Authority Key Identifier:
                keyid:A4:3D:A9:12:BD:00:A6:88:C2:D8:B5:51:57:12:DC:3A:5A:3A:4F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/pD2pEr0ApojC2LVRVxLcOlo6T-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pD2pEr0ApojC2LVRVxLcOlo6T-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/pD2pEr0ApojC2LVRVxLcOlo6T-8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:d6:37:4a:6e:a7:2a:c9:86:a5:98:c8:a7:4a:f8:17:26:
         5d:90:ea:74:dc:eb:ff:17:34:56:cd:1e:25:99:22:56:79:97:
         c5:e9:8c:c9:31:24:c1:c1:c9:6a:79:78:bc:28:f6:29:41:d5:
         75:7f:c0:65:02:ab:35:ea:ba:1d:b5:cb:1d:0e:94:f4:7f:70:
         3d:a1:69:16:40:81:bd:c2:39:3e:c2:24:e3:02:1f:27:fe:2e:
         f2:11:0f:f8:f7:ab:4c:b8:48:eb:c0:0c:5f:61:71:af:5f:9f:
         e7:97:06:56:7a:5f:8d:bd:78:92:17:31:5d:59:be:51:85:3b:
         a3:ad:c1:6e:08:d3:5d:c4:6b:f6:a5:34:0f:aa:fe:7f:5b:05:
         2a:bc:08:94:11:6b:c6:2d:d3:41:7c:b4:7c:20:e7:09:11:19:
         5f:f3:83:68:15:c2:9e:37:e6:2d:f5:7c:62:fb:b2:46:02:dc:
         ed:10:42:7f:18:29:96:0b:e8:d5:77:f3:dd:4d:6f:c6:09:a2:
         b5:1e:12:a5:c3:90:60:74:b3:4c:66:ee:dc:db:fa:01:47:d4:
         15:c2:72:a6:b4:45:ba:27:d6:ac:6c:2c:c1:a6:91:b2:1e:0a:
         bc:21:68:d1:72:21:b2:cb:13:16:89:47:be:fd:14:7c:dc:cb:
         17:50:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----