Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/Ds0jjWJ37cLBkruBodOS-H7CIbU.mft
File:                     Ds0jjWJ37cLBkruBodOS-H7CIbU.mft (raw, json)
Hash identifier:          Sg4B+42W+CGzOEcpJxp1m4v+GfXgjM0ocbjar924jQw=
Subject key identifier:   C9:75:60:CE:B6:16:51:0D:94:83:64:5F:2B:EF:A1:DC:8A:75:F5:D4
Authority key identifier: 0E:CD:23:8D:62:77:ED:C2:C1:92:BB:81:A1:D3:92:F8:7E:C2:21:B5
Certificate issuer:       /CN=0ECD238D6277EDC2C192BB81A1D392F87EC221B5
Certificate serial:       2E8F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ds0jjWJ37cLBkruBodOS-H7CIbU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/Ds0jjWJ37cLBkruBodOS-H7CIbU.mft
Manifest number:          2E8F
Signing time:             Thu 26 May 2022 21:56:14 +0000
Manifest this update:     Thu 26 May 2022 21:56:14 +0000
Manifest next update:     Fri 27 May 2022 03:56:14 +0000
Files and hashes:         1: Ds0jjWJ37cLBkruBodOS-H7CIbU.crl (hash: 9+8o2wrcAO7dnr0BRK71fM+8NY3cWLZU7rafbeD9esQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11919 (0x2e8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ECD238D6277EDC2C192BB81A1D392F87EC221B5
        Validity
            Not Before: May 26 21:56:14 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C97560CEB616510D9483645F2BEFA1DC8A75F5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:87:27:45:08:f0:b3:a9:db:ea:ae:3f:33:
                    10:4d:c2:ba:ab:98:e4:3c:21:12:62:3b:57:11:1d:
                    30:2d:37:97:e8:57:b6:2e:8d:08:47:10:d6:2a:49:
                    cd:ec:6e:2c:d1:30:43:d9:1b:49:54:b1:dd:9c:36:
                    71:b6:9f:dc:d6:2b:ae:e1:2f:60:ec:13:15:0d:69:
                    79:c9:ba:97:c4:a2:98:e5:ba:c2:79:c5:46:5b:fa:
                    dd:ae:85:5f:f5:c0:ef:d4:e2:bc:94:62:24:ac:62:
                    5c:05:a7:aa:ee:6e:12:61:95:a7:ac:33:ef:39:7a:
                    08:b7:0c:7a:68:3a:87:bd:87:49:7e:e5:55:c4:f9:
                    7d:d6:97:d1:41:31:77:a8:5c:5e:a2:3f:81:88:03:
                    64:37:94:21:80:86:8e:57:b8:a9:1c:87:8a:90:67:
                    63:54:8c:22:f0:a5:c1:5b:d3:fd:25:33:1d:c3:04:
                    ce:e9:73:77:72:7e:df:1e:8f:e2:e6:f4:a0:6e:a4:
                    a4:ba:cd:64:f9:7e:7e:9e:7b:d6:ca:17:e0:44:6d:
                    d0:d0:3f:e0:b8:54:f0:0d:45:9c:a2:4f:09:3d:83:
                    89:b3:f4:68:76:b2:02:a5:34:cf:99:96:40:cc:23:
                    0b:3a:d3:e4:40:13:5e:ea:52:39:9c:75:32:04:55:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:75:60:CE:B6:16:51:0D:94:83:64:5F:2B:EF:A1:DC:8A:75:F5:D4
            X509v3 Authority Key Identifier:
                keyid:0E:CD:23:8D:62:77:ED:C2:C1:92:BB:81:A1:D3:92:F8:7E:C2:21:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/Ds0jjWJ37cLBkruBodOS-H7CIbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ds0jjWJ37cLBkruBodOS-H7CIbU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/Ds0jjWJ37cLBkruBodOS-H7CIbU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:b2:48:39:77:a7:b6:55:37:50:b5:17:55:4f:15:bf:bb:
         4c:36:7e:6e:8f:a7:3e:81:df:33:3c:71:20:fa:91:35:5d:e4:
         f8:9d:3f:21:da:45:6e:19:70:d1:65:5d:ae:fe:c9:29:b3:7c:
         70:7b:39:7f:dd:30:de:78:1f:6d:6e:f8:6d:a3:8f:6f:ea:02:
         f8:2a:07:ac:ea:53:90:d8:74:57:dd:46:32:2e:25:8e:96:0a:
         26:9b:3d:58:d4:c9:cd:7a:aa:1d:dd:a2:94:19:02:bf:96:e8:
         4f:db:e2:fe:b1:6b:b2:2b:a9:ec:92:50:e6:fd:f1:23:d8:85:
         46:97:60:61:ce:b5:66:b0:d3:70:b4:e9:e2:0e:e1:97:2d:da:
         ae:01:97:b1:81:54:41:e3:9d:6c:02:f1:49:5b:f6:2f:1a:49:
         49:37:f4:55:16:b4:40:6d:d4:aa:8b:05:5e:3a:d4:81:76:f0:
         33:35:2a:ad:9c:ee:6e:58:4f:42:2d:5c:c3:ea:d8:ea:66:cd:
         bc:df:52:85:95:0b:6e:d0:34:c7:82:ea:08:a7:50:01:81:9b:
         ab:bb:74:36:dd:c6:e7:4c:ed:37:50:42:32:b3:2b:86:9c:33:
         6e:64:9a:10:e0:7f:85:a9:30:86:29:bd:63:85:e4:c6:a9:4e:
         30:15:e0:c4
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICLo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVD
RDIzOEQ2Mjc3RURDMkMxOTJCQjgxQTFEMzkyRjg3RUMyMjFCNTAeFw0yMjA1MjYy
MTU2MTRaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEM5NzU2MENFQjYxNjUx
MEQ5NDgzNjQ1RjJCRUZBMURDOEE3NUY1RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKwocnRQjws6nb6q4/MxBNwrqrmOQ8IRJiO1cRHTAtN5foV7Yu
jQhHENYqSc3sbizRMEPZG0lUsd2cNnG2n9zWK67hL2DsExUNaXnJupfEopjlusJ5
xUZb+t2uhV/1wO/U4ryUYiSsYlwFp6rubhJhlaesM+85egi3DHpoOoe9h0l+5VXE
+X3Wl9FBMXeoXF6iP4GIA2Q3lCGAho5XuKkch4qQZ2NUjCLwpcFb0/0lMx3DBM7p
c3dyft8ej+Lm9KBupKS6zWT5fn6ee9bKF+BEbdDQP+C4VPANRZyiTwk9g4mz9Gh2
sgKlNM+ZlkDMIws60+RAE17qUjmcdTIEVV+XAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUyXVgzrYWUQ2Ug2RfK++h3Ip19dQwHwYDVR0jBBgwFoAUDs0jjWJ37cLBkruB
odOS+H7CIbUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQz
L0RzMGpqV0ozN2NMQmtydUJvZE9TLUg3Q0liVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvRHMwampXSjM3Y0xCa3J1Qm9kT1MtSDdDSWJVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQzL0RzMGpqV0ozN2NMQmty
dUJvZE9TLUg3Q0liVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+ibJIOXentlU3ULUXVU8Vv7tMNn5uj6c+gd8zPHEg+pE1XeT4nT8h2kVuGXDR
ZV2u/skps3xwezl/3TDeeB9tbvhto49v6gL4Kges6lOQ2HRX3UYyLiWOlgommz1Y
1MnNeqod3aKUGQK/luhP2+L+sWuyK6nsklDm/fEj2IVGl2BhzrVmsNNwtOniDuGX
LdquAZexgVRB451sAvFJW/YvGklJN/RVFrRAbdSqiwVeOtSBdvAzNSqtnO5uWE9C
LVzD6tjqZs2831KFlQtu0DTHguoIp1ABgZuru3Q23cbnTO03UEIysyuGnDNuZJoQ
4H+FqTCGKb1jheTGqU4wFeDE
-----END CERTIFICATE-----