Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/QH7nPCKBiO2ouKS4m0zVkgEUA4g.mft
File:                     QH7nPCKBiO2ouKS4m0zVkgEUA4g.mft (raw, json)
Hash identifier:          fVSCTmQtaoKe9HAznwEaxdmx2zvbR4XJeHGAwTc0URY=
Subject key identifier:   57:21:A3:10:2F:6E:19:CA:BF:F9:80:42:24:C6:EB:F3:0E:DC:74:72
Authority key identifier: 40:7E:E7:3C:22:81:88:ED:A8:B8:A4:B8:9B:4C:D5:92:01:14:03:88
Certificate issuer:       /CN=407EE73C228188EDA8B8A4B89B4CD59201140388
Certificate serial:       073D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QH7nPCKBiO2ouKS4m0zVkgEUA4g.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QH7nPCKBiO2ouKS4m0zVkgEUA4g.mft
Manifest number:          073C
Signing time:             Thu 26 May 2022 19:56:55 +0000
Manifest this update:     Thu 26 May 2022 19:56:54 +0000
Manifest next update:     Fri 27 May 2022 01:56:54 +0000
Files and hashes:         1: 2We9WMEv_m0n1_vHgXS9DcAKcKQ.roa (hash: zF3vJC8vlZF3jJBrENEVkpr7wEj5X8i0pJIiXNO1W5M=)
                          2: QH7nPCKBiO2ouKS4m0zVkgEUA4g.crl (hash: H4xtqCfUF5dxZ0vumchuogeBk3BUGC1fUavJh720jMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407EE73C228188EDA8B8A4B89B4CD59201140388
        Validity
            Not Before: May 26 19:56:54 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5721A3102F6E19CABFF9804224C6EBF30EDC7472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:d3:e4:f7:eb:e3:8c:d4:9e:38:f4:9c:22:
                    e6:8a:f3:a2:6a:42:15:c2:fe:ad:c5:7a:49:cc:5e:
                    29:35:1a:4b:ec:5a:10:80:0c:25:46:68:aa:8b:bd:
                    6a:89:f2:b6:1d:af:3c:d4:5f:27:bc:48:5e:56:f4:
                    fa:a0:dd:a7:52:13:76:20:8c:fc:97:67:02:2c:80:
                    a3:53:c3:9f:ce:49:88:2d:48:25:73:46:3a:73:5a:
                    c8:98:97:0b:86:c6:5d:52:e1:b3:bd:c4:8f:8f:22:
                    17:31:e7:f7:2b:bd:cb:d0:9c:74:2c:5f:9f:51:29:
                    03:f0:32:e8:e2:46:a3:18:1e:3a:86:ea:95:38:5a:
                    ec:8c:52:6d:35:16:2e:a4:dd:d5:06:94:b8:de:97:
                    6b:3c:fc:2d:b7:3e:03:26:a5:32:9a:94:63:26:1b:
                    ff:61:24:fe:6e:e6:82:8f:fd:46:c8:ab:4c:98:9f:
                    79:86:34:82:be:d3:c7:62:34:53:6e:ea:63:43:20:
                    1a:8b:87:29:52:21:5a:81:23:5b:86:df:b3:34:4e:
                    46:40:88:9a:ec:9b:5b:f4:a6:60:03:31:fa:89:4a:
                    13:0d:ba:68:d0:58:f7:f7:03:fc:92:50:31:aa:49:
                    3f:64:76:7e:81:6c:19:2b:ac:0a:85:fc:11:4b:55:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:21:A3:10:2F:6E:19:CA:BF:F9:80:42:24:C6:EB:F3:0E:DC:74:72
            X509v3 Authority Key Identifier:
                keyid:40:7E:E7:3C:22:81:88:ED:A8:B8:A4:B8:9B:4C:D5:92:01:14:03:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QH7nPCKBiO2ouKS4m0zVkgEUA4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QH7nPCKBiO2ouKS4m0zVkgEUA4g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QH7nPCKBiO2ouKS4m0zVkgEUA4g.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:88:6a:a5:fb:f9:e0:d7:0c:6d:d6:66:e8:1f:fe:9c:f2:
         7c:8c:3c:0e:e3:3d:a1:cc:0e:47:97:20:ad:e8:8e:8c:aa:a1:
         0f:f5:d5:54:90:51:04:35:aa:50:a1:90:74:b0:f1:cd:82:b2:
         33:63:56:f0:f2:40:89:df:ec:2d:1c:09:3c:62:9b:74:a5:a6:
         86:59:f2:7e:02:9f:0c:e1:a2:94:13:5f:06:d8:f1:34:23:c8:
         1b:94:a6:f6:20:3a:3d:ae:90:8a:be:00:82:34:05:7a:94:f8:
         43:a7:86:67:27:9e:5e:43:56:08:d0:1d:87:f6:42:aa:ac:4f:
         6e:38:24:24:3d:99:ed:8d:05:f8:ae:97:59:88:31:87:7f:50:
         2a:16:cc:ae:db:1a:5f:42:9c:c9:8d:86:bb:f1:23:ad:11:4b:
         40:bb:b3:13:93:37:dc:a9:4b:5e:29:8b:4d:84:68:68:6f:57:
         7e:a2:ef:dc:b1:c0:2e:2a:47:33:53:31:df:2a:57:a5:22:ac:
         2a:34:7c:b7:be:ab:41:01:4d:5d:44:77:3d:e2:ed:10:7e:c7:
         ec:a5:4b:8f:61:b1:65:a8:91:0c:f6:99:1e:9d:35:28:e3:a0:
         d8:4e:99:63:f5:ee:71:b0:1c:b1:fd:ae:36:f4:c7:c4:a4:52:
         f1:dc:f8:5c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA3
RUU3M0MyMjgxODhFREE4QjhBNEI4OUI0Q0Q1OTIwMTE0MDM4ODAeFw0yMjA1MjYx
OTU2NTRaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDU3MjFBMzEwMkY2RTE5
Q0FCRkY5ODA0MjI0QzZFQkYzMEVEQzc0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVkdPk9+vjjNSeOPScIuaK86JqQhXC/q3FeknMXik1GkvsWhCA
DCVGaKqLvWqJ8rYdrzzUXye8SF5W9Pqg3adSE3YgjPyXZwIsgKNTw5/OSYgtSCVz
RjpzWsiYlwuGxl1S4bO9xI+PIhcx5/crvcvQnHQsX59RKQPwMujiRqMYHjqG6pU4
WuyMUm01Fi6k3dUGlLjel2s8/C23PgMmpTKalGMmG/9hJP5u5oKP/UbIq0yYn3mG
NIK+08diNFNu6mNDIBqLhylSIVqBI1uG37M0TkZAiJrsm1v0pmADMfqJShMNumjQ
WPf3A/ySUDGqST9kdn6BbBkrrAqF/BFLVUDhAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUVyGjEC9uGcq/+YBCJMbr8w7cdHIwHwYDVR0jBBgwFoAUQH7nPCKBiO2ouKS4
m0zVkgEUA4gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY5
NC9RSDduUENLQmlPMm91S1M0bTB6VmtnRVVBNGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FIN25QQ0tCaU8yb3VLUzRtMHpWa2dFVUE0Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2OTQvUUg3blBDS0JpTzJv
dUtTNG0welZrZ0VVQTRnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAFogiGql+/ng1wxt1mboH/6c8nyMPA7jPaHMDkeXIK3ojoyqoQ/11VSQUQQ1
qlChkHSw8c2CsjNjVvDyQInf7C0cCTxim3SlpoZZ8n4CnwzhopQTXwbY8TQjyBuU
pvYgOj2ukIq+AII0BXqU+EOnhmcnnl5DVgjQHYf2QqqsT244JCQ9me2NBfiul1mI
MYd/UCoWzK7bGl9CnMmNhrvxI60RS0C7sxOTN9ypS14pi02EaGhvV36i79yxwC4q
RzNTMd8qV6UirCo0fLe+q0EBTV1Edz3i7RB+x+ylS49hsWWokQz2mR6dNSjjoNhO
mWP17nGwHLH9rjb0x8SkUvHc+Fw=
-----END CERTIFICATE-----