Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.mft
File:                     Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.mft (raw, json)
Hash identifier:          YkDTMPVrToCguG5R6x++wMIBi9WZ+BxoUrReGIGgY1A=
Subject key identifier:   72:0D:2B:B8:84:87:D8:47:9E:8E:9F:D8:7A:21:EC:D5:1E:D4:58:CD
Authority key identifier: 5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4
Certificate issuer:       /CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
Certificate serial:       073E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.mft
Manifest number:          0738
Signing time:             Thu 26 May 2022 19:57:00 +0000
Manifest this update:     Thu 26 May 2022 19:57:00 +0000
Manifest next update:     Fri 27 May 2022 01:57:00 +0000
Files and hashes:         1: OqQWNKmyOHJXOixIzfi_uHnl0UI.roa (hash: 7BaIYOXIsubEQwETlg4C+sfXUTqHrQWFB+zHFm/D/Bs=)
                          2: Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.crl (hash: ndE/pBSnr/eBzqTyXUw0xV9RFz3we/MMiewfocUkZfo=)
                          3: ZCDmFK6myX0trZnMeCTL1FbqDpM.roa (hash: cf9Oe7Uifsh9T8KRfzhhIlsyfOxUljEKYHoqkvXJxIY=)
                          4: ssYX_o0GH0Ab01u9qfMuSBKLlzE.roa (hash: 7TPov26Bm2eaRT+n/UY1D8cqG3A9dv32n9PoDeWrFhQ=)
                          5: uV9TObnAyrBm7H7JIKb1xmUYKiE.roa (hash: d/g9b+SlBhQZSbXllO1tdNObYAI5UNub3nJxG079LtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
        Validity
            Not Before: May 26 19:57:00 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=720D2BB88487D8479E8E9FD87A21ECD51ED458CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:30:c7:1e:61:d6:0c:43:a2:f8:de:39:6b:
                    aa:3c:6d:fc:53:2c:7c:16:71:99:a4:8c:7e:46:9b:
                    db:97:d6:85:79:c2:e8:d9:7b:44:33:ea:b6:11:87:
                    ed:39:2b:64:5c:4a:ad:9c:e0:e4:f7:69:08:45:b9:
                    c0:82:01:6d:4d:28:a5:34:91:8c:34:77:7e:bb:3c:
                    80:ae:8f:77:52:b3:62:f0:c2:4c:3c:2c:52:35:ab:
                    3c:fd:a6:4b:5b:38:06:5f:55:ab:2e:85:28:7c:1c:
                    d2:9d:52:ca:7c:3d:5c:a8:1b:88:a3:d6:50:bb:60:
                    96:fe:8f:9f:f4:08:1c:cd:7e:6b:5e:c1:1a:8d:a1:
                    e8:b2:d4:58:ab:0c:b0:b1:f4:61:d6:3d:a4:8c:e3:
                    8d:f7:15:d2:f1:b4:07:bb:4d:64:15:4d:a1:a5:5c:
                    30:a0:ea:56:75:36:17:24:ec:ef:a2:aa:93:5a:29:
                    16:43:56:69:29:37:fc:35:42:a0:a2:12:10:44:e3:
                    58:4d:4a:b5:a7:79:ca:f8:a0:5d:6f:3e:ba:30:ad:
                    fb:70:ee:8e:84:f3:7e:33:aa:07:4a:78:87:11:e6:
                    27:ba:74:ec:b0:63:f7:61:11:19:07:42:d7:fc:fb:
                    19:a5:d4:55:6e:bd:7a:da:98:e5:ac:fa:6c:eb:40:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0D:2B:B8:84:87:D8:47:9E:8E:9F:D8:7A:21:EC:D5:1E:D4:58:CD
            X509v3 Authority Key Identifier:
                keyid:5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:c8:f0:a6:96:db:85:b3:90:4a:eb:aa:fb:c4:bd:d7:ca:85:
         fe:65:29:0c:f0:01:fd:23:77:85:18:77:c2:29:34:fd:d2:f1:
         32:dc:4c:2a:23:fc:ba:a2:13:0e:c2:0d:b3:47:9c:09:95:65:
         4b:1a:b6:3c:30:ae:37:24:39:11:2d:a9:ec:81:80:ac:b6:c9:
         f7:df:fe:0d:4b:7a:98:71:c0:47:e4:0f:2f:9e:03:35:88:cf:
         20:e6:f0:ca:eb:83:5f:d4:ef:ce:82:7c:db:46:bb:41:12:57:
         5b:82:d1:40:2f:bf:3d:58:2a:e8:b5:dd:a1:d8:33:49:92:49:
         bc:4e:4f:c5:78:72:8d:7b:7c:5a:0d:0e:69:20:10:83:3a:0e:
         df:b1:2e:d3:4c:3e:dc:c1:86:e1:f9:77:3a:37:af:3c:a1:1d:
         35:fa:c6:94:87:51:80:4c:4f:79:67:d3:65:f1:56:a4:ec:63:
         f2:58:03:57:a4:fd:18:f5:c9:f0:6f:a1:6b:d4:09:ab:15:7a:
         8c:78:fd:52:29:19:05:f2:f7:ae:f9:91:e0:35:8f:58:60:ff:
         7d:c5:fd:2c:b3:7b:c7:ae:d3:a7:6c:35:9e:d0:fd:30:87:12:
         3e:dd:fd:d1:a3:be:ee:bc:b9:25:66:14:65:87:45:75:fa:89:
         6d:07:e3:90
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUYx
ODc1QzIwNzVBMTUyOTc3QzNEM0IxRTFCOEJCQzQyRjMyNjRENDAeFw0yMjA1MjYx
OTU3MDBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDcyMEQyQkI4ODQ4N0Q4
NDc5RThFOUZEODdBMjFFQ0Q1MUVENDU4Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW4DDHHmHWDEOi+N45a6o8bfxTLHwWcZmkjH5Gm9uX1oV5wujZ
e0Qz6rYRh+05K2RcSq2c4OT3aQhFucCCAW1NKKU0kYw0d367PICuj3dSs2Lwwkw8
LFI1qzz9pktbOAZfVasuhSh8HNKdUsp8PVyoG4ij1lC7YJb+j5/0CBzNfmtewRqN
oeiy1FirDLCx9GHWPaSM4433FdLxtAe7TWQVTaGlXDCg6lZ1Nhck7O+iqpNaKRZD
VmkpN/w1QqCiEhBE41hNSrWnecr4oF1vProwrftw7o6E834zqgdKeIcR5ie6dOyw
Y/dhERkHQtf8+xml1FVuvXramOWs+mzrQCgRAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUcg0ruISH2Eeejp/YeiHs1R7UWM0wHwYDVR0jBBgwFoAUXxh1wgdaFSl3w9Ox
4bi7xC8yZNQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEy
L1h4aDF3Z2RhRlNsM3c5T3g0Ymk3eEM4eVpOUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWHhoMXdnZGFGU2wzdzlPeDRiaTd4Qzh5Wk5RLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEyL1h4aDF3Z2RhRlNsM3c5
T3g0Ymk3eEM4eVpOUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDVyPCmltuFs5BK66r7xL3XyoX+ZSkM8AH9I3eFGHfCKTT90vEy3EwqI/y6ohMO
wg2zR5wJlWVLGrY8MK43JDkRLansgYCstsn33/4NS3qYccBH5A8vngM1iM8g5vDK
64Nf1O/OgnzbRrtBEldbgtFAL789WCrotd2h2DNJkkm8Tk/FeHKNe3xaDQ5pIBCD
Og7fsS7TTD7cwYbh+Xc6N688oR01+saUh1GATE95Z9Nl8Vak7GPyWANXpP0Y9cnw
b6Fr1AmrFXqMeP1SKRkF8veu+ZHgNY9YYP99xf0ss3vHrtOnbDWe0P0whxI+3f3R
o77uvLklZhRlh0V1+oltB+OQ
-----END CERTIFICATE-----