Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/685/hP5Dc-7LGSpsyLixEOJVrKW2Adc.mft
File:                     hP5Dc-7LGSpsyLixEOJVrKW2Adc.mft (raw, json)
Hash identifier:          gQ20IoEggVMuXB5VI1EA5z7tbeMqwmv0UK3psyUb7Js=
Subject key identifier:   3A:31:FB:B9:A6:17:10:4F:66:B8:EB:18:24:F4:EE:DA:57:3D:37:94
Authority key identifier: 84:FE:43:73:EE:CB:19:2A:6C:C8:B8:B1:10:E2:55:AC:A5:B6:01:D7
Certificate issuer:       /CN=84FE4373EECB192A6CC8B8B110E255ACA5B601D7
Certificate serial:       03CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hP5Dc-7LGSpsyLixEOJVrKW2Adc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/hP5Dc-7LGSpsyLixEOJVrKW2Adc.mft
Manifest number:          03CC
Signing time:             Thu 26 May 2022 19:55:11 +0000
Manifest this update:     Thu 26 May 2022 19:55:11 +0000
Manifest next update:     Fri 27 May 2022 01:55:11 +0000
Files and hashes:         1: hP5Dc-7LGSpsyLixEOJVrKW2Adc.crl (hash: 2++f80Kabj/EYiUfFnzhK5WyYCKD7Mz2U540ti5pYkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FE4373EECB192A6CC8B8B110E255ACA5B601D7
        Validity
            Not Before: May 26 19:55:11 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3A31FBB9A617104F66B8EB1824F4EEDA573D3794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:50:7d:65:18:6e:3e:7d:1a:74:10:ec:d2:
                    9b:8e:9b:cd:77:bb:61:80:18:ab:42:a6:d9:8e:5f:
                    69:76:f3:37:5f:1f:ac:c4:1a:35:60:95:8b:13:09:
                    2b:fb:98:65:a6:50:df:3f:a4:e4:6c:eb:e0:51:8e:
                    56:50:74:5d:48:b2:f0:fd:7a:cc:88:f1:4d:a7:03:
                    60:a4:08:da:63:ae:b7:4f:55:81:88:be:f4:c0:29:
                    56:d6:b7:44:10:32:37:6a:21:81:40:57:0c:e9:49:
                    d8:9d:f2:be:15:e4:6b:f8:7b:f5:07:b0:6c:42:f9:
                    4c:dd:1f:30:f0:67:80:d8:e6:04:14:77:ad:d4:51:
                    0a:32:78:63:51:b8:79:bd:59:7a:f8:9f:f7:06:6d:
                    30:53:f5:2d:20:f3:c9:5e:ff:4a:fc:c4:c8:ea:76:
                    9c:a6:c3:a0:14:89:d8:40:9e:8a:da:29:1b:09:3a:
                    6f:53:79:de:36:a0:a4:8f:e1:28:18:de:97:89:67:
                    5f:9e:d2:b1:c2:3f:85:5d:13:c1:7d:18:04:ee:33:
                    ca:c7:06:9f:da:6f:ad:bb:5d:35:a5:de:0a:04:be:
                    1f:a3:f3:01:15:75:b3:6f:98:60:1a:91:e1:89:6a:
                    2b:5b:fe:c2:13:0f:9f:39:2d:c8:d8:bf:b5:b8:df:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:31:FB:B9:A6:17:10:4F:66:B8:EB:18:24:F4:EE:DA:57:3D:37:94
            X509v3 Authority Key Identifier:
                keyid:84:FE:43:73:EE:CB:19:2A:6C:C8:B8:B1:10:E2:55:AC:A5:B6:01:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/hP5Dc-7LGSpsyLixEOJVrKW2Adc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hP5Dc-7LGSpsyLixEOJVrKW2Adc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/hP5Dc-7LGSpsyLixEOJVrKW2Adc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:1e:54:ad:c3:a7:42:18:5b:36:41:d0:e9:30:90:2e:20:
         40:dc:9a:45:85:3e:a6:e9:6a:4b:28:cf:9f:a0:09:5e:1b:17:
         9b:24:2b:9f:e2:57:e3:db:e6:c9:50:14:50:23:db:ca:2c:b3:
         41:11:0f:69:40:73:65:71:a2:5a:1f:a2:92:ee:cf:78:c8:20:
         e1:bf:8d:25:87:c6:4e:92:39:2e:e9:58:39:65:af:c0:d3:68:
         a8:13:19:2b:0e:14:c7:c9:e5:bb:02:52:2d:9f:20:b3:77:60:
         0f:4f:69:92:42:cd:f1:28:aa:8c:d0:da:d5:8f:ee:aa:93:d0:
         df:3f:33:0c:4b:76:39:78:aa:08:15:ce:72:e2:f0:11:76:ec:
         9e:d6:cb:1a:db:ec:a5:a8:c8:55:3c:61:80:59:5d:08:cb:a6:
         a6:64:db:97:8b:5f:90:ac:e8:b9:63:55:7c:1e:23:e4:44:b2:
         e3:a1:4a:71:94:c4:7d:c0:1d:23:86:32:86:f6:d7:30:0c:27:
         ef:82:d9:33:36:10:e2:8f:a9:67:50:f5:b6:c2:dc:cc:ea:86:
         40:59:4c:7e:69:fa:a8:b0:21:6d:27:7e:3f:ac:b4:0e:be:7b:
         c3:b0:26:3a:2d:7b:d3:e5:73:64:ca:20:64:b1:07:ec:24:12:
         c3:fc:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----