Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/Xo2xIR0FFmCiyepejVubk0w7mvQ.mft
File:                     Xo2xIR0FFmCiyepejVubk0w7mvQ.mft (raw, json)
Hash identifier:          8I7+uS9+gxO0nEG+OsQOmThCRmVfB+rluyz4+aQxVI8=
Subject key identifier:   9B:FF:B0:94:8B:78:DA:2E:EE:B8:4B:3B:95:45:E8:73:9A:67:02:D2
Authority key identifier: 5E:8D:B1:21:1D:05:16:60:A2:C9:EA:5E:8D:5B:9B:93:4C:3B:9A:F4
Certificate issuer:       /CN=5E8DB1211D051660A2C9EA5E8D5B9B934C3B9AF4
Certificate serial:       0A8B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xo2xIR0FFmCiyepejVubk0w7mvQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/Xo2xIR0FFmCiyepejVubk0w7mvQ.mft
Manifest number:          0A8B
Signing time:             Thu 26 May 2022 19:55:12 +0000
Manifest this update:     Thu 26 May 2022 19:55:12 +0000
Manifest next update:     Fri 27 May 2022 01:55:12 +0000
Files and hashes:         1: Xo2xIR0FFmCiyepejVubk0w7mvQ.crl (hash: QgHTg2uQ3ddBGqOzi9+rRvYvekuCAxx9H9M9NAchAbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E8DB1211D051660A2C9EA5E8D5B9B934C3B9AF4
        Validity
            Not Before: May 26 19:55:12 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=9BFFB0948B78DA2EEEB84B3B9545E8739A6702D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:b3:34:70:5b:8a:64:18:bf:5b:d0:a0:3a:
                    ad:d9:2a:9a:30:2f:a6:6f:87:06:88:20:16:2a:8d:
                    3f:ba:78:a4:1f:6a:af:e6:05:a5:76:bf:db:da:e7:
                    72:08:b2:08:77:6f:78:12:b6:8e:26:e4:15:7f:57:
                    46:4c:8e:d0:41:80:77:85:61:14:5e:c1:69:2a:0c:
                    54:18:ae:cc:d4:c7:e3:56:53:93:3c:5a:b9:d1:ab:
                    1d:8e:68:bc:c3:ca:62:f7:5f:fb:cb:8e:a0:74:60:
                    94:63:69:2c:65:e9:2c:ee:16:77:3f:27:f6:3e:a9:
                    18:7c:97:a5:f3:8e:a9:91:d2:51:dc:fa:54:80:4e:
                    5f:cf:b5:04:b6:d0:88:7c:69:a8:58:b0:0c:6d:40:
                    10:5d:35:b8:8c:98:37:45:9f:3e:22:01:17:f8:d3:
                    de:ba:64:40:56:de:08:f4:35:2d:d3:eb:5b:33:cc:
                    20:06:cd:a9:c0:ec:fe:31:e4:58:3b:75:cb:a6:7b:
                    dd:26:bf:8f:41:3e:c6:9c:b8:69:e7:cf:c4:24:6c:
                    42:01:e5:f5:b1:a2:59:39:cf:c0:f3:d1:2f:32:45:
                    84:7d:c1:34:38:d0:f9:bf:84:dd:90:37:1e:fe:be:
                    ac:ec:4f:ca:24:1c:a7:2a:33:2d:5f:ce:d1:bd:7b:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FF:B0:94:8B:78:DA:2E:EE:B8:4B:3B:95:45:E8:73:9A:67:02:D2
            X509v3 Authority Key Identifier:
                keyid:5E:8D:B1:21:1D:05:16:60:A2:C9:EA:5E:8D:5B:9B:93:4C:3B:9A:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/Xo2xIR0FFmCiyepejVubk0w7mvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xo2xIR0FFmCiyepejVubk0w7mvQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/Xo2xIR0FFmCiyepejVubk0w7mvQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:95:81:37:1f:9b:7f:00:0b:10:3a:26:6f:59:4c:cb:28:6b:
         1c:f2:7f:fe:c9:1a:20:a8:e2:d7:d5:00:f1:97:27:06:90:06:
         d3:37:34:32:20:64:66:9b:f0:95:8d:d8:e5:27:83:32:94:63:
         8c:61:16:9f:b2:23:5f:68:dc:9b:6c:22:3c:5b:0f:56:59:85:
         27:9a:40:ec:81:f5:9c:d1:52:05:bc:46:36:1a:49:c8:a1:c7:
         de:90:96:b2:3d:8d:98:df:a8:69:ab:60:cc:86:05:57:7b:ed:
         a9:dd:0d:60:bc:b7:78:3f:86:d6:db:d7:a2:c7:63:b6:bc:32:
         d1:5c:fa:f5:f1:cb:f3:5c:00:40:f9:56:ab:a0:46:3a:d1:a0:
         99:a1:a7:94:53:82:1e:3a:74:f0:55:d8:24:9f:9d:dd:99:4e:
         08:4b:8b:94:6a:83:bc:71:34:69:55:48:e2:61:51:bb:02:49:
         cc:2a:ce:75:45:c4:7a:22:b6:4d:14:d5:79:ff:bf:b7:b1:db:
         0d:58:e9:7f:b4:61:77:6e:60:a8:ce:99:32:b2:23:57:0e:d9:
         d4:79:34:55:cf:46:e7:34:0a:e8:27:32:1e:a4:55:d2:a5:30:
         15:68:26:f9:a7:97:15:2e:fa:31:a1:79:a4:f2:c9:ac:7b:0f:
         10:54:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----