Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/98/qrHNTWM8V0QxSCpI3NKOE-d5lG8.mft
File:                     qrHNTWM8V0QxSCpI3NKOE-d5lG8.mft (raw, json)
Hash identifier:          LiVCCqKYxY1z4ZnM6EkorhgQgtIUgBPcD4r1k1fvvh0=
Subject key identifier:   04:42:FA:69:A2:34:37:9A:0C:B7:66:94:D1:99:6D:56:C3:E8:93:E9
Authority key identifier: AA:B1:CD:4D:63:3C:57:44:31:48:2A:48:DC:D2:8E:13:E7:79:94:6F
Certificate issuer:       /CN=AAB1CD4D633C574431482A48DCD28E13E779946F
Certificate serial:       0732
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qrHNTWM8V0QxSCpI3NKOE-d5lG8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/qrHNTWM8V0QxSCpI3NKOE-d5lG8.mft
Manifest number:          0732
Signing time:             Thu 26 May 2022 19:57:04 +0000
Manifest this update:     Thu 26 May 2022 19:57:04 +0000
Manifest next update:     Fri 27 May 2022 01:57:04 +0000
Files and hashes:         1: qrHNTWM8V0QxSCpI3NKOE-d5lG8.crl (hash: LYTfVndktKoZSLnPZocm7X3t0KM26aQtT29dgyYFsmc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB1CD4D633C574431482A48DCD28E13E779946F
        Validity
            Not Before: May 26 19:57:04 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0442FA69A234379A0CB76694D1996D56C3E893E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:74:27:44:99:05:48:99:54:ba:7a:1e:52:
                    bd:48:1b:c8:56:a0:31:4f:0d:f5:f1:be:87:ff:65:
                    70:74:b7:d1:9b:a5:0e:e9:cc:be:30:06:b9:70:b2:
                    ee:92:8a:57:a9:a7:eb:93:cf:ca:bd:9c:cd:11:4e:
                    54:88:f6:b8:e4:99:e2:d4:b3:51:88:ad:2c:96:fc:
                    2b:02:0e:ee:97:dd:60:c9:b6:66:b0:52:bf:ec:3b:
                    83:b8:be:15:8a:f3:03:27:48:88:e9:e2:02:3c:14:
                    0d:87:87:c0:58:f9:4a:20:a5:d7:29:02:65:21:76:
                    e5:0e:9e:65:a8:5d:93:d3:8c:55:26:4d:33:7d:d4:
                    12:0b:81:e5:67:7d:09:c8:03:f2:b4:a5:99:e8:91:
                    8c:40:52:8a:8c:c4:b8:ef:27:21:9e:90:7a:f4:b1:
                    cc:20:87:47:40:e7:13:d2:25:bf:40:bd:71:01:26:
                    ce:52:c3:28:07:f2:3a:93:52:bd:2d:1b:27:47:65:
                    f1:27:a4:c6:69:92:a0:75:43:07:ac:9a:7e:05:28:
                    39:c8:dd:42:39:e1:d1:a3:1b:e7:af:f3:ad:a7:61:
                    44:0c:4f:0d:05:a5:71:34:5b:fb:81:45:77:8d:5b:
                    1d:d1:65:65:37:1a:d6:ed:50:3b:7c:ce:d9:df:84:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:42:FA:69:A2:34:37:9A:0C:B7:66:94:D1:99:6D:56:C3:E8:93:E9
            X509v3 Authority Key Identifier:
                keyid:AA:B1:CD:4D:63:3C:57:44:31:48:2A:48:DC:D2:8E:13:E7:79:94:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/qrHNTWM8V0QxSCpI3NKOE-d5lG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qrHNTWM8V0QxSCpI3NKOE-d5lG8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/qrHNTWM8V0QxSCpI3NKOE-d5lG8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:e8:26:5a:00:7a:26:32:31:d0:1c:90:43:9a:16:b6:cc:
         6e:6c:34:41:55:58:25:d0:5a:88:d9:94:34:0f:6c:0c:e8:8f:
         d3:7d:3e:bd:99:22:9f:b0:ee:f8:8c:03:41:e8:df:10:4d:39:
         2d:c1:f1:24:6d:5e:b0:06:33:c3:d6:9b:ab:4c:9b:dc:1b:b0:
         b3:94:a8:7e:ca:e6:5c:53:8b:91:e0:6b:f0:51:34:70:1e:02:
         11:aa:79:9f:cc:0f:e7:a1:57:17:af:92:d0:7b:08:60:16:27:
         a3:94:da:bf:fb:70:8a:2e:ce:22:2a:03:74:cf:4d:cc:54:5a:
         a0:bf:bd:fe:5c:27:ba:80:f4:0a:13:0d:a0:d0:ff:51:29:2f:
         9b:43:c4:8d:fb:ef:62:a3:e1:61:25:80:80:f3:ef:8d:88:0e:
         17:76:7d:ec:0a:af:13:f6:79:0e:79:c9:ee:ff:d7:60:1e:00:
         6c:3f:86:e8:56:6a:06:2e:7b:8a:0b:25:16:3d:3d:61:75:11:
         ae:4e:e6:26:1f:0f:13:fd:66:2b:6a:9e:6f:b1:92:92:44:23:
         64:48:dc:a2:63:78:00:5c:fe:20:70:1f:f8:c2:27:b2:50:69:
         3e:d0:d4:ad:8f:78:75:e7:f0:c9:37:e0:f4:e3:db:05:5c:77:
         d8:60:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----