Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2673/3uVM5pPNd6zxYRqdamTHe-5pvhg.mft
File:                     3uVM5pPNd6zxYRqdamTHe-5pvhg.mft (raw, json)
Hash identifier:          Afheuu4WdzoAJ7D+Mib+//8s+iCaK6XD6sMRdqr6xhs=
Subject key identifier:   B4:E6:A4:A6:47:F7:C0:3D:7A:41:08:A2:9D:51:01:F0:C2:EC:06:92
Authority key identifier: DE:E5:4C:E6:93:CD:77:AC:F1:61:1A:9D:6A:64:C7:7B:EE:69:BE:18
Certificate issuer:       /CN=DEE54CE693CD77ACF1611A9D6A64C77BEE69BE18
Certificate serial:       15D9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uVM5pPNd6zxYRqdamTHe-5pvhg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/3uVM5pPNd6zxYRqdamTHe-5pvhg.mft
Manifest number:          15D8
Signing time:             Thu 26 May 2022 19:00:09 +0000
Manifest this update:     Thu 26 May 2022 19:00:09 +0000
Manifest next update:     Fri 27 May 2022 01:00:09 +0000
Files and hashes:         1: 3uVM5pPNd6zxYRqdamTHe-5pvhg.crl (hash: Q8hyYTKGK0EnWskyzJmO5iIi9ab1gmIZX5zbMgJsltk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5593 (0x15d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE54CE693CD77ACF1611A9D6A64C77BEE69BE18
        Validity
            Not Before: May 26 19:00:09 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B4E6A4A647F7C03D7A4108A29D5101F0C2EC0692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:81:e0:11:6e:0f:d2:28:a0:98:73:1a:68:
                    68:1f:54:7f:26:21:46:68:fb:91:a2:9f:94:02:43:
                    f1:f1:e2:43:93:22:a4:e0:30:cd:31:eb:d3:50:60:
                    3c:07:12:2b:82:eb:77:eb:d5:be:6f:b5:69:18:de:
                    fe:f1:5d:44:d8:2f:09:f6:47:68:15:4e:bd:8b:60:
                    b0:38:30:a9:4f:41:8a:69:e6:3f:39:9f:6d:a2:ab:
                    c7:8d:8b:89:85:ac:13:01:9e:b9:df:e8:30:2a:6e:
                    15:c7:c2:1e:13:e3:80:c6:ff:ab:ef:8d:5a:91:da:
                    80:f3:36:58:0e:de:32:58:32:3a:d9:99:a8:49:24:
                    c5:a7:52:f8:78:5f:e3:39:5c:f3:15:47:8b:24:3c:
                    1a:4d:ef:a5:ff:3f:0f:90:c0:b8:db:b8:37:98:b1:
                    2c:00:8f:68:d5:06:e9:00:f1:29:19:ae:8e:33:a6:
                    7b:22:2b:8e:72:ac:1a:85:e1:c7:b4:cf:89:21:d6:
                    4f:14:fc:03:ec:0e:42:95:f3:35:c9:04:f8:20:76:
                    45:59:46:ab:77:c2:5c:42:85:f6:83:14:20:b6:d5:
                    68:64:82:36:69:df:17:32:65:0b:68:02:8e:e3:c9:
                    db:6a:c3:2a:c6:74:b7:82:49:81:cd:ba:75:77:2a:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E6:A4:A6:47:F7:C0:3D:7A:41:08:A2:9D:51:01:F0:C2:EC:06:92
            X509v3 Authority Key Identifier:
                keyid:DE:E5:4C:E6:93:CD:77:AC:F1:61:1A:9D:6A:64:C7:7B:EE:69:BE:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/3uVM5pPNd6zxYRqdamTHe-5pvhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uVM5pPNd6zxYRqdamTHe-5pvhg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/3uVM5pPNd6zxYRqdamTHe-5pvhg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f8:af:bf:d5:f7:0d:55:8e:ad:2f:58:fc:34:a0:2e:89:d2:
         56:48:f8:1b:8f:74:3c:06:be:8c:a7:bb:9f:48:4f:bd:db:75:
         bc:25:9e:80:28:79:da:0e:c9:26:77:ea:94:5f:41:90:31:a9:
         15:0f:67:d2:0f:e4:d4:62:6e:4e:75:5a:18:b5:0a:72:05:07:
         4c:98:48:18:95:64:fa:2e:73:93:03:b0:c9:4d:cf:24:8d:a3:
         c2:e2:39:ae:12:3c:20:af:f4:1f:77:64:32:23:f4:f7:a8:87:
         00:8c:1a:f9:cc:45:de:cf:55:7a:e1:15:0a:9f:28:ae:17:00:
         45:89:ee:98:58:17:be:bd:59:69:e3:0a:6a:f2:62:0b:25:39:
         cc:d3:f9:5b:c9:b8:ac:9e:61:e7:7b:bd:1e:07:aa:b7:8b:f4:
         db:fc:7a:7e:9e:50:b2:70:3f:f3:db:40:ae:84:87:91:54:f5:
         93:fe:88:86:e1:23:3d:35:ec:1d:a6:a1:ad:88:e5:77:bf:1d:
         56:68:c1:1b:f0:fd:bd:34:4a:cc:11:75:a9:37:73:13:1c:c4:
         ac:49:43:b2:23:87:4b:e4:3b:b7:7e:aa:44:07:7b:d7:19:7d:
         e9:fc:ef:79:dc:ab:3f:f2:f8:98:39:e7:62:c6:3c:56:69:26:
         df:56:cd:1d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVF
NTRDRTY5M0NENzdBQ0YxNjExQTlENkE2NEM3N0JFRTY5QkUxODAeFw0yMjA1MjYx
OTAwMDlaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEI0RTZBNEE2NDdGN0Mw
M0Q3QTQxMDhBMjlENTEwMUYwQzJFQzA2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUy4HgEW4P0iigmHMaaGgfVH8mIUZo+5Gin5QCQ/Hx4kOTIqTg
MM0x69NQYDwHEiuC63fr1b5vtWkY3v7xXUTYLwn2R2gVTr2LYLA4MKlPQYpp5j85
n22iq8eNi4mFrBMBnrnf6DAqbhXHwh4T44DG/6vvjVqR2oDzNlgO3jJYMjrZmahJ
JMWnUvh4X+M5XPMVR4skPBpN76X/Pw+QwLjbuDeYsSwAj2jVBukA8SkZro4zpnsi
K45yrBqF4ce0z4kh1k8U/APsDkKV8zXJBPggdkVZRqt3wlxChfaDFCC21WhkgjZp
3xcyZQtoAo7jydtqwyrGdLeCSYHNunV3KlsNAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUtOakpkf3wD16QQiinVEB8MLsBpIwHwYDVR0jBBgwFoAU3uVM5pPNd6zxYRqd
amTHe+5pvhgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3
My8zdVZNNXBQTmQ2enhZUnFkYW1USGUtNXB2aGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzN1Vk01cFBOZDZ6eFlScWRhbVRIZS01cHZoZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzMvM3VWTTVwUE5kNnp4
WVJxZGFtVEhlLTVwdmhnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALT4r7/V9w1Vjq0vWPw0oC6J0lZI+BuPdDwGvoynu59IT73bdbwlnoAoedoO
ySZ36pRfQZAxqRUPZ9IP5NRibk51Whi1CnIFB0yYSBiVZPouc5MDsMlNzySNo8Li
Oa4SPCCv9B93ZDIj9PeohwCMGvnMRd7PVXrhFQqfKK4XAEWJ7phYF769WWnjCmry
YgslOczT+VvJuKyeYed7vR4HqreL9Nv8en6eULJwP/PbQK6Eh5FU9ZP+iIbhIz01
7B2moa2I5Xe/HVZowRvw/b00SswRdak3cxMcxKxJQ7Ijh0vkO7d+qkQHe9cZfen8
73ncqz/y+Jg552LGPFZpJt9WzR0=
-----END CERTIFICATE-----