Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.mft
File:                     UQv-Ay6N9f3vO6gcnwm314W5o6Y.mft (raw, json)
Hash identifier:          JxsSKm22O5jO49dvPv1QvpMXq66WdXWV0JL/aXgw2Kk=
Subject key identifier:   BE:3A:D5:E7:65:5A:F3:6E:79:B2:86:9E:4D:07:DA:35:82:3B:97:CB
Authority key identifier: 51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
Certificate issuer:       /CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Certificate serial:       2363
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.mft
Manifest number:          235A
Signing time:             Thu 26 May 2022 19:27:05 +0000
Manifest this update:     Thu 26 May 2022 19:27:05 +0000
Manifest next update:     Fri 27 May 2022 01:27:05 +0000
Files and hashes:         1: Ccm1FEkMpsmuPWcfQwVQ9_HtVFM.roa (hash: SmDMXb+YaXyTvPZNFRQT0mqzpTJCJvnyxaCYbuLdx8A=)
                          2: UQv-Ay6N9f3vO6gcnwm314W5o6Y.crl (hash: j5eGYw7OTUS14qzliy+NLgaqPwvpVI1Qu1NnSAJwaFI=)
                          3: bJaBHFCprZE4yWq3FpGKGo5VAYw.roa (hash: UNZcN2o7Ry/zwonIAbPCixA9ZDnqzxToof41oJ5ANEY=)
                          4: c3aQoDB8EcvEBaWFDWoS6Ffa1II.roa (hash: MBQqtWhKWtNeEEEZyciRnq6v0i7xaELTtUjw1trcsFg=)
                          5: hAyG87EXmqjAE_JKmsF643ZMvhk.roa (hash: EeN7+YNgIg8fNMeqQ7xlIp3eZ1beSEPjRLsmULDMoWY=)
                          6: pUeztTPUbqxBd8SxKEyh366LcsM.roa (hash: XkGoR9k3Bc2pxn2zZ9O40sXlYTFs8BYilG3crs6Atqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9059 (0x2363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
        Validity
            Not Before: May 26 19:27:05 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=BE3AD5E7655AF36E79B2869E4D07DA35823B97CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:89:5c:11:c1:42:52:4f:78:34:f3:31:06:
                    b1:fa:a0:22:ea:74:f5:33:00:fe:a4:42:df:ce:d8:
                    c6:3b:3f:ff:12:84:af:4c:41:ba:61:b5:c0:07:1f:
                    57:74:3c:26:83:36:0e:d5:2d:e1:60:82:25:58:85:
                    55:42:f2:4e:b0:be:99:96:5a:74:b6:0e:13:12:b8:
                    38:79:6e:cc:e7:c9:34:be:1d:af:c8:08:63:7b:ac:
                    40:01:04:d6:82:6d:c2:c7:48:97:0a:4d:b0:60:d0:
                    dd:da:88:b7:82:e6:bd:1a:17:b5:a7:dd:c6:2e:96:
                    02:10:71:7d:ce:8b:10:af:3c:87:19:20:96:22:ef:
                    5d:59:66:47:d3:7d:6f:17:8c:41:11:b8:49:a3:1e:
                    b3:b2:f5:64:0c:00:62:22:0d:8c:dc:d8:d8:f5:62:
                    9b:17:be:df:91:9a:3e:7b:10:b3:05:4a:94:0c:86:
                    ab:d6:f2:99:3d:39:b2:78:60:42:ef:e3:20:83:c8:
                    e0:a9:19:d9:7b:6a:b0:ea:09:db:94:59:1a:df:0b:
                    8f:90:6b:7f:e8:9c:e1:0b:be:fd:e3:10:0f:28:40:
                    41:9e:4e:c0:c0:a7:7a:5d:93:22:8a:f6:12:01:5a:
                    52:5c:9b:dd:9d:32:56:4f:e9:07:14:dd:88:ba:34:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3A:D5:E7:65:5A:F3:6E:79:B2:86:9E:4D:07:DA:35:82:3B:97:CB
            X509v3 Authority Key Identifier:
                keyid:51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:dc:39:e5:a1:7d:40:1c:f8:88:dc:e6:ea:fd:79:df:a2:
         ff:c9:04:a7:78:b3:ba:4e:ea:26:5c:fa:f7:d0:19:06:67:59:
         6c:3b:09:45:65:ab:b9:4f:f8:e4:12:e8:7b:d4:e3:53:00:9c:
         5a:20:07:4e:0f:51:4b:2f:71:7f:a9:da:48:c1:52:b6:f2:64:
         ed:e5:bd:da:e0:d8:01:5d:cb:92:e9:7d:4c:77:30:12:a3:49:
         d7:88:c1:dc:8a:be:f9:66:2b:06:91:0a:d5:ac:22:94:05:1c:
         3c:43:c0:a3:c4:12:35:75:96:19:1e:90:19:b6:fa:c8:d2:df:
         e8:ec:25:34:73:d2:8b:08:1d:50:b2:b2:54:24:a4:61:d2:d6:
         54:af:00:a3:d5:0a:fd:73:5a:e7:0d:56:a0:9c:bc:17:bf:bd:
         91:2f:f7:30:fe:4e:88:ee:ea:89:de:11:5c:ed:f4:dc:31:c1:
         7f:46:13:db:e5:92:5e:80:26:f5:e8:d3:9e:15:d8:12:fe:a5:
         0a:4a:76:fa:f6:b4:85:2b:e7:a0:e8:02:fa:e1:48:aa:d2:db:
         72:69:e6:48:9e:24:3a:22:3f:3e:aa:31:39:27:27:0d:9e:cb:
         b0:db:15:d6:38:2d:40:7a:0d:f6:5b:4a:51:56:f7:2a:30:2e:
         c3:c7:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----