Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.mft
File:                     SxRuQmJZSpipSv_geHQem3CHXew.mft (raw, json)
Hash identifier:          sifh9IBSoxp8d+nRAeXQOgr25eQAASxgQ5wDcSHfoA0=
Subject key identifier:   AB:25:D9:59:6F:C4:BB:22:16:C6:0F:03:FC:55:CA:EC:BD:3C:82:EA
Authority key identifier: 4B:14:6E:42:62:59:4A:98:A9:4A:FF:E0:78:74:1E:9B:70:87:5D:EC
Certificate issuer:       /CN=4B146E4262594A98A94AFFE078741E9B70875DEC
Certificate serial:       0703
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SxRuQmJZSpipSv_geHQem3CHXew.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.mft
Manifest number:          0703
Signing time:             Thu 26 May 2022 19:55:18 +0000
Manifest this update:     Thu 26 May 2022 19:55:18 +0000
Manifest next update:     Fri 27 May 2022 01:55:18 +0000
Files and hashes:         1: SxRuQmJZSpipSv_geHQem3CHXew.crl (hash: UYeeDhL45i5jIYjqNZtpnzeDfYE1j1atbU5N+WmlJvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B146E4262594A98A94AFFE078741E9B70875DEC
        Validity
            Not Before: May 26 19:55:18 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=AB25D9596FC4BB2216C60F03FC55CAECBD3C82EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:c1:fc:a5:2b:18:78:fb:1c:72:dd:0f:c9:
                    d7:bb:bb:db:8f:1c:9a:94:cb:1b:b1:13:d4:5c:4c:
                    1b:c3:49:47:8e:bc:9c:04:be:34:b7:65:99:33:73:
                    6e:83:ef:76:8a:05:5d:8b:d7:74:c7:0d:d1:c2:1f:
                    1a:f2:9c:d3:0d:15:77:7b:3e:56:6c:80:06:c3:cc:
                    e6:82:08:f0:14:68:3f:03:e9:22:a8:fd:07:54:04:
                    00:01:49:bf:fd:d9:1f:1c:7f:7e:8b:11:8a:eb:63:
                    15:db:19:6f:65:b0:c2:c8:68:80:a2:fe:43:7f:79:
                    f3:d4:3b:d3:f2:97:61:09:07:5f:77:60:97:88:91:
                    aa:e7:b3:09:39:80:69:87:61:ee:7c:c6:96:54:d1:
                    d2:d1:b5:da:6f:ea:66:db:dd:b8:61:1e:1c:a6:03:
                    a0:23:71:a1:3d:ca:13:26:a3:b0:89:d1:1f:11:3e:
                    4a:2e:22:8a:8f:c4:0c:7f:f8:df:cc:cc:dd:9e:f5:
                    c1:c3:05:ba:cc:83:34:10:f5:0d:ee:fb:f4:83:6f:
                    96:d9:63:ff:79:86:0a:cf:02:a9:2e:fd:16:90:d4:
                    4e:1b:06:69:81:5b:80:7e:c9:e9:c3:08:1b:dd:07:
                    77:c7:6e:af:1a:22:d3:47:d9:dd:a8:13:37:7a:f0:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:25:D9:59:6F:C4:BB:22:16:C6:0F:03:FC:55:CA:EC:BD:3C:82:EA
            X509v3 Authority Key Identifier:
                keyid:4B:14:6E:42:62:59:4A:98:A9:4A:FF:E0:78:74:1E:9B:70:87:5D:EC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SxRuQmJZSpipSv_geHQem3CHXew.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:a0:69:ae:bb:d5:2c:6c:5e:6b:8c:3e:1e:d7:78:c3:04:
         e2:3b:39:46:ba:67:04:26:22:94:b4:69:f2:97:7c:b3:80:09:
         b6:0e:46:2d:52:b8:47:bf:fa:fb:cd:97:8c:0a:f9:7e:66:73:
         7a:e8:7f:4c:37:a1:49:c2:b8:b1:eb:a4:b6:e2:d1:35:84:fb:
         9a:2a:85:88:5b:5f:cb:43:20:29:2a:2b:59:44:ef:e3:f6:38:
         2e:d7:cb:0c:a4:fd:82:20:37:7a:58:15:89:66:57:61:76:69:
         13:c3:8b:3a:64:20:b5:45:6a:f8:d7:be:9d:13:12:0f:57:95:
         41:a9:ed:9f:5d:05:8a:ab:be:df:da:82:d7:05:99:0f:eb:65:
         2c:82:93:dc:25:01:63:29:db:1e:80:6a:6d:2a:3a:7f:f2:c5:
         4b:54:c9:34:84:b3:d5:d9:f5:6e:94:72:ba:43:c9:2e:24:8f:
         3a:2a:f8:94:47:2d:ef:da:22:85:b0:a0:2b:ee:7c:96:40:b0:
         cf:13:fe:89:36:ca:d8:35:90:e4:39:fe:a3:d6:34:fa:5b:da:
         60:17:e1:e1:da:54:0c:19:4f:51:2a:e5:90:e4:b6:6f:1f:ae:
         7d:84:95:b9:1c:d0:78:50:15:46:fd:57:ad:57:32:13:5c:2e:
         69:93:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----