Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/591/jSYPPSDRxnM3XFOlHKgt-2w4bhM.mft
File:                     jSYPPSDRxnM3XFOlHKgt-2w4bhM.mft (raw, json)
Hash identifier:          4SYC9pXk9wG5xBlSn4pFqGe7kClLcE0Y/43gUBw+TAY=
Subject key identifier:   4F:C4:D2:34:CF:58:9C:F4:7F:19:C7:45:F4:6A:1D:E4:73:5C:09:7D
Authority key identifier: 8D:26:0F:3D:20:D1:C6:73:37:5C:53:A5:1C:A8:2D:FB:6C:38:6E:13
Certificate issuer:       /CN=8D260F3D20D1C673375C53A51CA82DFB6C386E13
Certificate serial:       0747
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSYPPSDRxnM3XFOlHKgt-2w4bhM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/jSYPPSDRxnM3XFOlHKgt-2w4bhM.mft
Manifest number:          0747
Signing time:             Thu 26 May 2022 19:26:30 +0000
Manifest this update:     Thu 26 May 2022 19:26:30 +0000
Manifest next update:     Fri 27 May 2022 01:26:30 +0000
Files and hashes:         1: jSYPPSDRxnM3XFOlHKgt-2w4bhM.crl (hash: eO0ETXvG/JU+z920u45gtPmDifkKQnUh83Y8QELvLJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D260F3D20D1C673375C53A51CA82DFB6C386E13
        Validity
            Not Before: May 26 19:26:30 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=4FC4D234CF589CF47F19C745F46A1DE4735C097D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:c3:85:16:d1:47:c8:73:d0:95:bf:60:b4:
                    2d:63:e8:a9:4b:02:65:1b:b1:3e:bb:a0:56:c8:2a:
                    64:36:7b:f4:95:9a:01:1a:7a:bf:23:b5:d5:0e:5a:
                    86:be:18:02:2e:6b:fd:71:b8:67:99:7a:8e:25:28:
                    c0:a5:cf:de:2c:d9:9b:8e:7d:94:f1:5c:bb:ca:68:
                    05:e0:6b:1f:d9:29:84:88:4a:09:11:14:d1:65:ba:
                    34:09:5d:52:0e:e7:67:5c:83:e1:7c:0f:12:93:b2:
                    6d:75:c2:8b:56:82:7d:4c:d4:42:c7:8e:7b:bf:b0:
                    4a:2d:87:e8:f6:4e:0c:f1:a5:0d:95:59:96:11:dd:
                    6a:13:3e:80:c1:b6:ad:02:84:f4:ab:36:83:ab:b3:
                    3d:68:eb:74:ed:3e:c2:29:f9:c5:42:8c:c7:bd:31:
                    5e:da:b4:a9:f3:e0:a9:23:2d:b6:1e:cf:79:86:fb:
                    51:29:f8:83:00:8a:48:9d:67:b2:28:24:e9:af:cd:
                    9d:8a:f2:09:39:60:ed:76:50:e0:d3:70:cd:16:bd:
                    5f:c0:f6:5d:7c:2e:5c:11:37:32:42:74:ce:c3:13:
                    2c:32:bd:31:73:25:24:d3:d6:9a:f9:e3:6b:a3:3e:
                    67:b3:9a:25:20:50:ed:0c:4e:56:e8:f2:63:3f:65:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:D2:34:CF:58:9C:F4:7F:19:C7:45:F4:6A:1D:E4:73:5C:09:7D
            X509v3 Authority Key Identifier:
                keyid:8D:26:0F:3D:20:D1:C6:73:37:5C:53:A5:1C:A8:2D:FB:6C:38:6E:13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/jSYPPSDRxnM3XFOlHKgt-2w4bhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jSYPPSDRxnM3XFOlHKgt-2w4bhM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/jSYPPSDRxnM3XFOlHKgt-2w4bhM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d6:53:52:82:e9:93:e5:5d:98:68:fb:cb:15:46:7f:52:3a:
         78:18:4c:84:d6:96:63:8c:8a:58:4d:1f:ec:af:f2:3c:fd:4c:
         ac:99:d4:e1:c8:37:2a:ea:25:4a:ab:36:50:17:95:bf:92:eb:
         65:4a:3b:3f:d4:a7:f9:fe:5f:11:36:ac:3c:9b:43:db:ad:c1:
         5e:74:7d:fd:be:41:44:d0:69:f3:1c:ae:ee:af:8c:84:13:53:
         0d:40:ea:50:7b:e4:8f:c0:06:fc:bc:71:6d:50:8e:a8:45:09:
         ab:d9:e1:64:ea:d3:f2:41:82:d7:11:f5:8a:5f:4d:3a:59:9f:
         24:82:00:b1:5e:f8:5f:2a:5b:59:e9:a9:5d:2f:e3:d8:e2:c9:
         8f:51:88:0a:64:f1:e4:b5:45:9a:4a:fd:c7:dc:49:20:b9:db:
         2f:1a:02:56:4d:22:4f:20:73:91:b5:e2:ad:c6:aa:05:e0:15:
         88:cf:8a:1b:a5:a3:30:0a:11:66:ab:38:c3:36:3e:41:93:a1:
         d1:89:9a:12:fb:75:74:3a:f0:d1:76:ba:82:12:0b:73:e1:78:
         24:50:53:27:8f:31:01:44:4e:41:aa:eb:1a:3f:64:b0:e2:d7:
         7d:32:26:4d:46:13:7e:96:a5:67:b4:40:c0:e5:4f:85:18:f5:
         2d:79:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----