Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/XWE3zbGu4T2JZXNyfTOC3zFwJj0.mft
File:                     XWE3zbGu4T2JZXNyfTOC3zFwJj0.mft (raw, json)
Hash identifier:          yPLe8O7GZ8jMLwVy/+JZdTmqXOc+xG5r6no/8cwSpCc=
Subject key identifier:   24:E3:9B:BF:76:C5:54:65:DE:FD:22:F5:C5:EC:AE:ED:FC:4C:6E:83
Authority key identifier: 5D:61:37:CD:B1:AE:E1:3D:89:65:73:72:7D:33:82:DF:31:70:26:3D
Certificate issuer:       /CN=5D6137CDB1AEE13D896573727D3382DF3170263D
Certificate serial:       14C1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XWE3zbGu4T2JZXNyfTOC3zFwJj0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/XWE3zbGu4T2JZXNyfTOC3zFwJj0.mft
Manifest number:          14C1
Signing time:             Thu 26 May 2022 21:56:15 +0000
Manifest this update:     Thu 26 May 2022 21:56:14 +0000
Manifest next update:     Fri 27 May 2022 03:56:14 +0000
Files and hashes:         1: XWE3zbGu4T2JZXNyfTOC3zFwJj0.crl (hash: YEzUXJ6wscpWMDXs+3oO3jFTjldJQQIra1UpmPzrdrM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5313 (0x14c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6137CDB1AEE13D896573727D3382DF3170263D
        Validity
            Not Before: May 26 21:56:14 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=24E39BBF76C55465DEFD22F5C5ECAEEDFC4C6E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:85:b3:8d:47:4e:67:c0:97:eb:1e:d4:63:
                    79:68:47:3a:e1:28:7f:d1:86:43:fe:6d:05:72:b5:
                    cd:33:fc:0c:a9:6f:35:1c:69:5c:4d:1f:e7:e6:d5:
                    64:95:f1:81:cf:11:07:90:db:34:de:ee:00:86:a8:
                    cf:f4:53:bc:16:38:83:76:56:56:ed:d2:26:8b:af:
                    23:e2:25:66:a8:ff:e1:86:61:28:2d:7f:de:cf:79:
                    02:c5:e7:c2:4f:9a:0a:5b:4c:0a:9b:78:52:76:13:
                    25:59:67:da:2e:f9:e8:5e:ea:b0:58:ff:66:d7:32:
                    e9:7b:85:fb:30:1b:47:57:9d:61:74:5b:b2:db:85:
                    66:81:c9:db:8c:c1:db:94:15:4f:b9:20:51:af:50:
                    ef:eb:f9:38:e8:4b:22:bc:3b:24:4c:a7:26:12:6a:
                    03:5c:bf:99:c3:fe:5a:92:e1:7f:af:55:a0:9a:31:
                    41:8f:01:ed:80:ea:67:02:a7:0c:24:9a:2b:1b:44:
                    ca:75:97:bd:26:7a:a8:c8:00:ce:8f:8b:8f:ea:e8:
                    8d:e4:0f:3a:e7:f0:33:80:cc:cd:44:0a:55:c8:4a:
                    28:00:1e:d1:6f:97:81:73:68:06:74:a3:74:54:3e:
                    b4:26:b5:60:fa:83:2b:63:63:d5:8a:3a:f6:4c:f1:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E3:9B:BF:76:C5:54:65:DE:FD:22:F5:C5:EC:AE:ED:FC:4C:6E:83
            X509v3 Authority Key Identifier:
                keyid:5D:61:37:CD:B1:AE:E1:3D:89:65:73:72:7D:33:82:DF:31:70:26:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/XWE3zbGu4T2JZXNyfTOC3zFwJj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XWE3zbGu4T2JZXNyfTOC3zFwJj0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/XWE3zbGu4T2JZXNyfTOC3zFwJj0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:28:76:e8:95:90:fc:8d:38:68:cc:7c:64:59:5b:94:5d:ad:
         b6:64:5e:c3:6c:b4:39:d8:56:54:59:3d:09:d4:14:40:18:96:
         06:1e:29:f9:a0:0c:0a:ec:eb:92:a7:40:83:c6:8f:04:a6:f3:
         5f:25:81:0a:57:4e:a0:51:21:f5:90:65:cb:95:16:29:0a:19:
         80:fe:d4:fc:97:cd:0c:44:5a:9d:8a:be:91:20:19:51:e1:9a:
         4c:da:a8:c8:dd:6b:a5:b4:80:bb:54:e7:98:5f:b8:50:10:39:
         c2:d2:6b:6d:27:ee:45:9d:e2:56:01:c7:a6:7c:3f:0d:e6:74:
         34:1c:47:7b:7d:83:07:6b:82:cb:c3:29:37:f1:7f:77:8d:5a:
         60:c3:7a:4a:b9:10:ec:8e:5a:d7:2e:58:22:29:9d:fe:a4:7a:
         c5:1b:e1:5f:6f:f3:63:d8:65:e9:93:d2:af:6e:7c:d2:89:86:
         e7:dd:84:23:95:37:ef:07:23:26:e7:fb:bc:c2:eb:0c:74:43:
         a6:29:a1:99:16:ce:41:c4:1a:07:29:63:75:ed:1c:64:a0:ff:
         81:44:c3:33:21:8a:af:70:39:fb:48:96:64:75:15:f9:d7:a7:
         89:51:21:b2:9c:ec:8f:2b:34:da:35:53:7b:e3:4c:60:93:5f:
         0d:af:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----