Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.mft
File:                     XVJ1CH6B71ZJfWJBW3mYnJNjwg8.mft (raw, json)
Hash identifier:          HJHqrZpnU6+3mIB+Z8IvlcMpOHnQydhNMfJwYHcYJoM=
Subject key identifier:   38:AB:D6:EC:FD:48:B3:76:D7:BB:81:1C:98:F2:B9:63:01:00:14:34
Authority key identifier: 5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F
Certificate issuer:       /CN=5D5275087E81EF56497D62415B79989C9363C20F
Certificate serial:       0A34
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.mft
Manifest number:          0A32
Signing time:             Thu 26 May 2022 19:57:17 +0000
Manifest this update:     Thu 26 May 2022 19:57:17 +0000
Manifest next update:     Fri 27 May 2022 01:57:17 +0000
Files and hashes:         1: C2LZ1x7pGGKmZBuuB5K7jADAFBA.roa (hash: wQT/rLc2lHjELrXyz6VSSq8kFoo0jCvKai6p4VuAbU8=)
                          2: XVJ1CH6B71ZJfWJBW3mYnJNjwg8.crl (hash: 4V7jlpl4Uj53lYts3S6BPJb9wV5ghKMLm1evUH1qwOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2612 (0xa34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D5275087E81EF56497D62415B79989C9363C20F
        Validity
            Not Before: May 26 19:57:17 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=38ABD6ECFD48B376D7BB811C98F2B96301001434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:3e:ce:f1:f5:ef:1a:84:c9:6d:fe:b7:5a:
                    2a:e1:cb:a5:51:e4:77:01:44:6a:f4:6b:ce:4d:b5:
                    ff:d1:5f:d5:4b:b6:8f:e0:66:a1:25:b0:af:b0:a5:
                    3a:5b:2c:3e:ca:15:3f:67:30:42:58:78:b4:dd:df:
                    93:bb:2b:bd:65:e3:45:bb:d1:58:b5:a0:ab:19:54:
                    91:39:c7:19:cf:c7:ff:ca:2f:f4:8c:9b:ce:e9:2b:
                    1d:dc:11:02:9b:c9:0f:02:ef:89:a6:04:90:e7:27:
                    d5:b8:79:a1:e8:0a:bd:3d:54:90:26:ed:ec:62:d3:
                    ec:57:63:fc:9c:19:69:8a:a0:79:d4:1b:af:69:95:
                    67:b4:1a:f0:6a:1e:26:ee:e3:0f:12:58:21:4f:cf:
                    44:b3:7e:94:58:ac:dc:af:6b:b9:e7:15:a2:6f:2a:
                    08:55:80:9b:6f:53:67:bd:9c:42:99:f5:6e:25:33:
                    25:16:5a:e0:19:75:20:83:15:e3:61:5c:8a:b4:ca:
                    e9:6c:ab:d5:5b:d6:e6:d1:2d:fb:ca:66:36:c9:0c:
                    a4:a0:93:50:24:dd:96:68:0c:74:4b:19:da:5d:46:
                    b9:e8:57:80:39:14:08:54:f5:20:db:a6:ba:30:b3:
                    5e:fd:67:fb:b6:86:49:c2:61:38:11:44:cd:5e:b4:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AB:D6:EC:FD:48:B3:76:D7:BB:81:1C:98:F2:B9:63:01:00:14:34
            X509v3 Authority Key Identifier:
                keyid:5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:76:1c:22:6c:39:4f:1d:47:2c:a4:76:0b:8f:11:6c:07:bc:
         e4:7d:80:97:d0:6c:7e:66:0b:b1:f6:77:82:22:10:35:3c:78:
         f3:dc:0e:35:05:4b:78:2e:f8:b1:93:0d:68:d8:de:6a:5a:6c:
         03:88:71:3c:4f:c0:66:ab:f5:9a:25:14:b7:47:69:ce:f1:2a:
         5e:8b:18:11:49:f4:d6:32:9e:38:3f:78:45:97:13:68:04:11:
         16:69:d9:90:58:4b:9c:6d:54:81:de:14:eb:37:a5:23:39:b1:
         24:b3:94:6e:4e:cb:90:ef:26:8c:eb:ec:19:e8:fc:df:97:bb:
         7b:a0:76:53:4e:b5:fd:5f:52:ff:34:b9:5d:94:a8:ac:e9:df:
         73:5c:ff:10:b3:1b:42:ba:9b:2a:a6:a1:9b:9c:ef:43:63:d9:
         2f:fd:c6:8f:34:aa:30:59:ad:06:73:31:8e:24:eb:3b:74:a9:
         17:d1:d8:af:a4:94:51:55:69:98:d8:70:56:3e:b8:2a:64:fe:
         c2:d4:8f:6e:6d:2b:68:b1:66:d6:c3:b2:ea:95:76:01:f1:b1:
         a2:e2:24:4d:b2:a7:5b:79:9b:8b:92:bd:74:51:d5:c7:31:e3:
         28:13:8a:33:9a:1a:16:36:ae:d3:6c:7a:9b:ec:ed:db:9f:80:
         bb:c1:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----