Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/9jfHzSxBQkVqu8J2rY8A7GFQBCM.mft
File:                     9jfHzSxBQkVqu8J2rY8A7GFQBCM.mft (raw, json)
Hash identifier:          X+zwG9RiAV/ctaCT1x9AfX9GcKbLnZMSALrRMADvaYM=
Subject key identifier:   C2:81:76:49:DF:84:DF:4A:95:1B:44:DE:29:BE:A1:40:F5:35:31:55
Authority key identifier: F6:37:C7:CD:2C:41:42:45:6A:BB:C2:76:AD:8F:00:EC:61:50:04:23
Certificate issuer:       /CN=F637C7CD2C4142456ABBC276AD8F00EC61500423
Certificate serial:       0735
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9jfHzSxBQkVqu8J2rY8A7GFQBCM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/9jfHzSxBQkVqu8J2rY8A7GFQBCM.mft
Manifest number:          0734
Signing time:             Thu 26 May 2022 20:25:13 +0000
Manifest this update:     Thu 26 May 2022 20:25:13 +0000
Manifest next update:     Fri 27 May 2022 02:25:13 +0000
Files and hashes:         1: 9jfHzSxBQkVqu8J2rY8A7GFQBCM.crl (hash: FcFSlkxVwFbmfQnJr1opox7cJ73zprwuB2TSYhImmS8=)
                          2: oXcK8PpOvGwnObwz2SNMpnAlVzY.roa (hash: QnJ94iNDEBglbCK1haukEFYQuq+GsJi/e5MTTlPK4VE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F637C7CD2C4142456ABBC276AD8F00EC61500423
        Validity
            Not Before: May 26 20:25:13 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C2817649DF84DF4A951B44DE29BEA140F5353155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:57:8d:f1:8a:9a:48:8e:43:f7:57:46:3d:
                    9e:ae:33:bb:47:e8:4d:f8:ca:96:c1:fa:b7:22:bc:
                    a8:db:3c:e3:a4:fa:7c:5b:d7:32:d8:af:5b:1a:01:
                    d5:08:42:53:7a:25:f2:13:2f:0c:d7:04:68:19:cf:
                    cb:b7:f6:c4:11:e7:26:bd:92:07:d8:e9:3b:9d:55:
                    de:9c:a8:8d:73:65:99:bd:1e:bd:1c:48:a8:6a:19:
                    bd:64:aa:ae:b4:23:b5:52:b0:8c:07:81:fd:7c:7a:
                    7d:0a:a2:ac:88:c6:33:50:0b:b7:0f:a5:60:9c:04:
                    3d:6e:27:65:f3:f4:56:3f:ad:a2:83:2b:73:6e:85:
                    37:62:9a:51:b6:2b:81:92:da:4a:7a:2c:c4:0b:11:
                    f1:aa:f4:81:c6:a1:e5:25:5c:ea:84:10:e8:ef:7d:
                    03:05:d6:d5:60:42:56:00:d3:6a:e9:77:32:57:a0:
                    50:2f:aa:a3:39:f7:61:61:57:db:78:5f:01:2e:43:
                    f3:5c:1e:61:18:02:c9:37:b0:63:2d:db:6a:67:9a:
                    46:2f:66:a8:12:5d:dc:d2:a2:d6:eb:a7:4a:ae:d7:
                    9f:50:13:19:71:0b:b8:14:b3:48:b3:77:84:54:e3:
                    2e:26:26:43:eb:02:43:7c:95:21:06:7e:dd:54:b3:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:76:49:DF:84:DF:4A:95:1B:44:DE:29:BE:A1:40:F5:35:31:55
            X509v3 Authority Key Identifier:
                keyid:F6:37:C7:CD:2C:41:42:45:6A:BB:C2:76:AD:8F:00:EC:61:50:04:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/9jfHzSxBQkVqu8J2rY8A7GFQBCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9jfHzSxBQkVqu8J2rY8A7GFQBCM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/9jfHzSxBQkVqu8J2rY8A7GFQBCM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:42:13:f7:b8:8a:68:7f:59:e0:a1:dd:3b:ee:d8:a1:06:f3:
         8d:cf:55:86:82:c4:ee:76:cc:d2:d8:a1:92:d0:35:36:e0:4d:
         67:00:1a:a5:25:2b:b1:38:55:50:7f:70:7f:6c:c6:f7:ea:0f:
         e6:9c:a0:78:14:06:29:6d:0a:50:2f:fa:2f:aa:d6:b6:c4:50:
         7d:cd:b4:75:58:b5:25:6f:5b:25:05:7b:4c:c1:bf:b7:95:f1:
         f3:18:5b:e0:a3:4d:15:04:83:07:ce:14:1b:f2:cb:92:23:28:
         30:f6:db:3e:d1:c6:69:ab:ed:29:5a:a5:df:5a:af:68:d6:dc:
         a8:ca:2b:74:0d:99:dd:d8:28:2a:54:41:a6:ae:c9:d9:45:8b:
         cd:6f:14:0a:6d:35:81:6b:73:88:99:58:eb:76:4f:25:4e:75:
         ff:aa:15:24:17:32:56:5f:18:b8:c9:dd:2f:31:95:30:5a:71:
         57:d4:2b:c9:8d:50:a2:cc:2e:bc:a4:d9:5a:a2:93:cb:b9:3e:
         c1:97:01:24:a5:e4:a6:cc:a4:09:94:58:bb:d8:15:5f:e3:7c:
         11:1b:d9:f9:20:3b:b2:62:e1:98:e9:6c:b0:52:56:c5:ff:59:
         f8:36:eb:c3:46:44:3d:a0:86:9f:26:36:e9:5b:f9:ab:bb:b6:
         e5:af:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----