Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/996/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.mft
File:                     hLN7OF1Mvz8xANLh-1AkVpc1Ic0.mft (raw, json)
Hash identifier:          E7uZT28OynUdR4rRU9Rw5qDDaWYfyP1OHZ8kmGKTdOc=
Subject key identifier:   86:5D:BC:D5:9B:AD:DB:50:B6:93:2F:2E:15:6D:98:AC:A3:05:9C:4E
Authority key identifier: 84:B3:7B:38:5D:4C:BF:3F:31:00:D2:E1:FB:50:24:56:97:35:21:CD
Certificate issuer:       /CN=84B37B385D4CBF3F3100D2E1FB502456973521CD
Certificate serial:       0733
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.mft
Manifest number:          0733
Signing time:             Thu 26 May 2022 19:56:53 +0000
Manifest this update:     Thu 26 May 2022 19:56:53 +0000
Manifest next update:     Fri 27 May 2022 01:56:53 +0000
Files and hashes:         1: hLN7OF1Mvz8xANLh-1AkVpc1Ic0.crl (hash: aVdUsG8aLC4g601RFc5AEwteduvU+WdynhA9CHzEgnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B37B385D4CBF3F3100D2E1FB502456973521CD
        Validity
            Not Before: May 26 19:56:53 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=865DBCD59BADDB50B6932F2E156D98ACA3059C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:eb:5a:3d:73:6d:3e:b3:9d:3f:3a:25:c0:
                    28:b7:e3:09:de:5b:d7:75:11:01:77:4a:91:1f:02:
                    22:ee:bf:78:42:70:a1:10:b2:7f:91:f0:46:66:73:
                    fa:21:5f:d7:d7:e5:23:04:17:18:34:4b:db:8d:f4:
                    80:39:ee:26:20:f9:86:e7:7e:fe:ff:e8:89:25:94:
                    a2:ff:e2:ee:7c:66:3e:b9:63:7c:8b:f9:0e:27:a6:
                    74:4a:d2:64:0e:57:13:3c:8a:88:d8:64:b4:ea:6a:
                    e1:51:e5:f7:a8:30:0d:04:2d:51:24:99:00:f2:6a:
                    5b:5f:b6:50:13:5b:f6:d1:28:8c:f2:7b:ff:f8:86:
                    b7:6d:7b:51:05:aa:20:b4:ba:4f:f2:68:46:f1:02:
                    76:be:d1:46:9d:be:69:d2:51:cd:fc:74:f7:27:fe:
                    0f:96:91:19:60:52:b5:86:2f:30:78:4d:64:38:ad:
                    30:88:6c:6b:ce:72:9e:84:cb:21:aa:6e:79:1d:51:
                    f4:bd:5c:8e:8f:39:44:d8:2d:f5:4a:af:17:bc:21:
                    a4:35:60:e5:bd:74:a3:4b:35:f0:39:35:93:0a:6f:
                    5e:d6:e3:55:0b:20:5b:0c:e3:e1:51:f0:de:d3:05:
                    e6:56:e7:91:e4:b9:1c:71:fa:7d:aa:d0:94:7b:1f:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5D:BC:D5:9B:AD:DB:50:B6:93:2F:2E:15:6D:98:AC:A3:05:9C:4E
            X509v3 Authority Key Identifier:
                keyid:84:B3:7B:38:5D:4C:BF:3F:31:00:D2:E1:FB:50:24:56:97:35:21:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:f4:ad:20:85:36:5c:e3:11:1b:71:01:58:11:94:80:6e:
         e7:74:4d:12:d1:27:a0:4d:47:e6:02:85:69:9b:3f:4a:61:b1:
         bb:d7:d7:7c:19:b8:47:bf:db:40:c0:36:15:a9:46:27:9f:d4:
         59:4b:5a:94:60:d1:a7:c7:93:9c:97:54:f9:88:73:a2:3e:70:
         08:d2:ce:bd:07:8a:76:b2:28:08:3a:ac:26:7d:57:81:22:50:
         51:b0:ca:ed:14:cb:7b:49:15:6f:c5:e7:35:41:a4:87:ff:7c:
         eb:e6:8e:e5:f1:8f:dc:db:2c:14:d0:99:bf:02:f1:b7:1d:b0:
         3a:be:d4:8e:b3:42:5f:cc:71:e1:01:8c:a4:bd:16:f2:f7:c0:
         c3:b6:18:13:cd:20:d1:23:af:8c:ce:7b:f7:9c:05:9f:46:df:
         24:59:50:44:36:67:20:25:68:42:99:4d:a8:00:c2:de:ef:e2:
         e2:3b:79:65:a4:f6:4d:ac:a4:89:2d:cd:b0:cd:a5:ac:d1:39:
         8b:5f:41:79:32:4f:a6:82:9d:8e:6e:71:1b:e0:aa:0e:7b:11:
         9d:f9:7b:2a:9e:fd:a9:32:bf:4e:fe:52:18:0e:20:c0:8d:7f:
         5b:07:0b:0e:ea:f5:32:a0:49:1f:3c:2e:d5:55:3a:a3:b2:db:
         86:cc:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----