Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/630/czH8F6S_DxAkeuZ1SXsWGoOQiPE.mft
File:                     czH8F6S_DxAkeuZ1SXsWGoOQiPE.mft (raw, json)
Hash identifier:          4guVHtTUTYAMTlm2iW2noIeuNiUvwbT+WRM6yBM8ADY=
Subject key identifier:   BD:4C:26:F5:3B:5F:64:3E:D1:EB:57:0E:A0:EE:7D:6E:B2:00:02:55
Authority key identifier: 73:31:FC:17:A4:BF:0F:10:24:7A:E6:75:49:7B:16:1A:83:90:88:F1
Certificate issuer:       /CN=7331FC17A4BF0F10247AE675497B161A839088F1
Certificate serial:       1F9B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/czH8F6S_DxAkeuZ1SXsWGoOQiPE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/czH8F6S_DxAkeuZ1SXsWGoOQiPE.mft
Manifest number:          1F9B
Signing time:             Thu 26 May 2022 19:00:02 +0000
Manifest this update:     Thu 26 May 2022 19:00:02 +0000
Manifest next update:     Fri 27 May 2022 01:00:02 +0000
Files and hashes:         1: czH8F6S_DxAkeuZ1SXsWGoOQiPE.crl (hash: rGjREOG4o8xT0txoHK8eGwSPtyKrR6nROri7isOXf+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8091 (0x1f9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7331FC17A4BF0F10247AE675497B161A839088F1
        Validity
            Not Before: May 26 19:00:02 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=BD4C26F53B5F643ED1EB570EA0EE7D6EB2000255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d3:ba:55:5a:40:1b:ea:60:d1:a4:57:89:5f:
                    84:78:3e:2b:22:b8:04:37:1f:42:ef:5a:70:22:3d:
                    28:f6:50:75:9d:42:a2:b6:4d:51:8e:d1:6e:40:d0:
                    81:a9:39:b8:b5:d1:57:a4:33:3b:f1:0d:ed:ec:68:
                    13:30:70:a3:52:10:ed:1e:2b:cb:ed:6d:c0:21:1b:
                    bc:76:76:35:a1:56:64:7b:22:e1:e7:82:c4:46:fe:
                    29:f4:60:27:fa:5d:20:5f:eb:ff:f9:23:4b:95:c0:
                    b4:0e:5d:a4:d9:aa:6f:cc:09:1f:13:85:7c:15:ce:
                    39:08:44:85:f2:70:93:49:52:ad:fd:e8:da:4b:42:
                    3d:0c:66:81:c8:36:18:7e:e1:93:18:b2:a1:2e:44:
                    1f:0c:18:50:71:f8:a0:67:b8:c2:51:e2:ba:27:b9:
                    d3:37:dd:30:8d:b3:19:a0:2f:5a:ce:4d:43:6d:4a:
                    2f:cc:2c:0f:cc:de:f2:86:ee:c3:61:c4:74:09:09:
                    d7:9c:e3:54:e6:79:86:56:e9:3e:76:2c:dc:7e:ee:
                    1d:55:81:67:89:56:92:0d:89:63:90:16:b9:cc:2e:
                    b8:1b:d4:7c:41:49:29:54:1d:87:a3:ea:11:b5:f5:
                    97:cd:b6:ae:6a:db:13:e3:d9:4b:c0:13:98:2a:1d:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4C:26:F5:3B:5F:64:3E:D1:EB:57:0E:A0:EE:7D:6E:B2:00:02:55
            X509v3 Authority Key Identifier:
                keyid:73:31:FC:17:A4:BF:0F:10:24:7A:E6:75:49:7B:16:1A:83:90:88:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/czH8F6S_DxAkeuZ1SXsWGoOQiPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/czH8F6S_DxAkeuZ1SXsWGoOQiPE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/czH8F6S_DxAkeuZ1SXsWGoOQiPE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:69:42:29:64:ad:5d:2b:06:8a:97:e1:8f:07:48:4f:95:e6:
         66:1e:a9:c4:a6:2b:e7:25:84:5b:f3:0d:fc:77:b1:d6:f9:74:
         c2:d9:43:2a:76:ab:43:14:ee:bd:e9:40:14:82:b5:62:19:88:
         14:52:f5:01:f4:15:6a:93:40:60:08:9c:1b:79:00:0e:89:27:
         9c:93:da:01:38:9b:f9:3f:e0:64:24:71:e9:3d:a1:4e:b9:cc:
         7e:24:82:f4:60:8f:55:6a:40:21:61:85:21:0f:8d:6b:43:c7:
         5b:ea:c8:6a:08:97:eb:3d:8f:52:92:22:9e:c5:8e:1b:bf:de:
         07:64:d3:b6:1d:91:37:05:18:e3:4d:fb:14:38:15:08:bd:d7:
         89:a7:5b:2a:f2:99:b5:bc:5f:12:ba:e4:01:36:e1:02:15:d8:
         fd:2e:50:25:4e:d8:4c:e1:58:b9:f8:c6:4e:78:19:e3:d0:24:
         66:59:4d:1c:09:90:98:4e:6d:c9:3c:6f:71:63:0e:66:19:64:
         a5:6b:ec:09:cb:e9:ab:79:dd:e0:6d:92:f8:fd:99:74:39:e2:
         fe:a3:9b:cd:50:95:f7:0d:f1:24:0c:86:61:c9:fb:41:e4:4b:
         02:7e:07:05:e4:c3:4b:29:99:cc:d5:c0:7c:de:2c:1c:e4:ca:
         5c:31:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----