Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/598/qpeyukrPx9jybaTOcRM9yhzIQKk.mft
File:                     qpeyukrPx9jybaTOcRM9yhzIQKk.mft (raw, json)
Hash identifier:          3QOYqpQKE0dbCUqfbggL2fgiZGHtGw4rCs0/lth6UCY=
Subject key identifier:   CF:B5:B7:DD:FC:E4:7D:CF:1C:7D:43:0E:1F:91:92:9A:C2:7A:09:0A
Authority key identifier: AA:97:B2:BA:4A:CF:C7:D8:F2:6D:A4:CE:71:13:3D:CA:1C:C8:40:A9
Certificate issuer:       /CN=AA97B2BA4ACFC7D8F26DA4CE71133DCA1CC840A9
Certificate serial:       0739
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qpeyukrPx9jybaTOcRM9yhzIQKk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/qpeyukrPx9jybaTOcRM9yhzIQKk.mft
Manifest number:          0739
Signing time:             Thu 26 May 2022 19:55:53 +0000
Manifest this update:     Thu 26 May 2022 19:55:53 +0000
Manifest next update:     Fri 27 May 2022 01:55:53 +0000
Files and hashes:         1: qpeyukrPx9jybaTOcRM9yhzIQKk.crl (hash: hcTYWooD5x3zJ62ZZwSTgg6mZ7vqUWB84nPrlNpp/oI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA97B2BA4ACFC7D8F26DA4CE71133DCA1CC840A9
        Validity
            Not Before: May 26 19:55:53 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=CFB5B7DDFCE47DCF1C7D430E1F91929AC27A090A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:b1:31:41:2d:9c:25:c4:46:7a:58:9c:b1:
                    be:5f:74:f7:4f:9a:8d:bb:9b:33:2a:05:54:34:28:
                    74:60:aa:cc:70:1c:4d:b9:3d:5c:81:5e:da:ab:c6:
                    b6:ff:d1:29:4d:20:d9:3f:73:41:33:ff:df:0a:d6:
                    8a:67:7d:af:54:e8:ef:67:20:99:2d:7b:65:e4:73:
                    37:1f:d4:b1:a9:b7:fb:8e:21:99:eb:05:06:0a:80:
                    08:ec:0b:0a:c2:22:a5:88:8a:6e:e2:45:f6:c3:24:
                    84:6f:3c:12:df:22:52:eb:d3:31:00:44:ef:d4:3d:
                    e3:ff:9e:52:67:7b:f0:41:54:b8:5a:53:fd:be:50:
                    fe:1f:19:33:32:0e:e6:a9:5d:13:e2:45:9a:51:c7:
                    f0:8d:20:6e:2b:af:c4:8d:b9:a8:79:56:b3:3c:ee:
                    dc:94:f7:38:13:66:0a:2c:b6:ab:cc:1d:a3:bb:b5:
                    62:28:29:23:c4:ce:37:a4:de:ba:28:3c:9d:bd:b8:
                    6a:be:24:bf:4a:7b:7c:ff:c4:38:77:93:fb:dc:63:
                    cd:a8:af:62:6d:09:07:ed:ea:86:52:cc:45:1e:5f:
                    fa:ad:01:bf:25:5d:04:b7:a5:af:ae:9b:d9:05:dc:
                    50:9e:a5:23:6d:7a:77:e9:2d:2d:1d:ae:de:36:ba:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:B7:DD:FC:E4:7D:CF:1C:7D:43:0E:1F:91:92:9A:C2:7A:09:0A
            X509v3 Authority Key Identifier:
                keyid:AA:97:B2:BA:4A:CF:C7:D8:F2:6D:A4:CE:71:13:3D:CA:1C:C8:40:A9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/qpeyukrPx9jybaTOcRM9yhzIQKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qpeyukrPx9jybaTOcRM9yhzIQKk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/qpeyukrPx9jybaTOcRM9yhzIQKk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:10:23:fd:a9:f7:72:1f:f6:6b:e3:db:a8:67:10:68:28:
         f0:27:b1:4e:98:6d:f5:0c:9d:0d:89:df:99:64:88:f8:cb:07:
         d2:73:a7:df:ca:09:6b:53:32:76:75:c2:8f:67:3e:71:61:09:
         e4:96:6c:16:1d:3f:34:17:ba:ac:7f:1e:6a:23:30:13:4d:7f:
         ed:95:71:04:cd:32:02:39:68:77:fd:be:f3:24:3b:ad:51:ae:
         d3:78:2b:b9:e2:72:a9:c4:dc:10:40:3f:e5:d6:5a:dd:7e:b8:
         b6:2a:e7:9c:95:4f:60:90:7d:c3:f1:f6:9c:60:9a:a2:e4:98:
         09:a5:7d:e8:24:6a:02:80:6d:c6:d2:71:a2:d8:8b:27:6e:33:
         5b:93:91:85:87:d1:fd:4b:e7:88:1c:4e:c6:83:27:67:bf:5d:
         18:93:b5:67:f6:e0:8a:52:d0:5f:47:b8:f0:ca:16:c5:74:c8:
         fd:c0:14:1c:ea:13:1a:15:90:63:a2:e8:74:8c:da:d5:a5:da:
         88:0a:1e:68:0e:ac:bd:44:23:ed:53:57:8d:fb:71:b5:dd:16:
         5d:8a:c0:17:fc:0f:31:54:70:b3:49:ca:de:23:40:dd:14:ef:
         79:40:b4:50:f5:2a:37:d4:51:3e:c1:be:21:aa:d8:a6:dc:54:
         26:45:76:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----