Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.mft
File:                     zXCU6n-vRTkDaBtyTCAAEXoScSE.mft (raw, json)
Hash identifier:          3dYpeGFJOhnCcbVRWGDXgj2TRhjBfgS7GUCjmS7Emac=
Subject key identifier:   BF:13:ED:60:73:B3:25:A1:26:50:87:22:39:67:6E:94:BD:1A:70:6B
Authority key identifier: CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21
Certificate issuer:       /CN=CD7094EA7FAF453903681B724C2000117A127121
Certificate serial:       0B36
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zXCU6n-vRTkDaBtyTCAAEXoScSE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.mft
Manifest number:          0B33
Signing time:             Thu 26 May 2022 21:56:18 +0000
Manifest this update:     Thu 26 May 2022 21:56:18 +0000
Manifest next update:     Fri 27 May 2022 03:56:18 +0000
Files and hashes:         1: 8OVjT2xkaxXlZXhT3GNcTurGIIw.roa (hash: rCLoVxguIsNI1DESISrFJB8CTP0BGVGNNCl8evygyNk=)
                          2: duxjTORrmTPKBF1l0BfjK-wTXjQ.roa (hash: LZPcMBatCmr6iHDUAShsxxiWqqRsA4HycrWaRSyKPlU=)
                          3: zXCU6n-vRTkDaBtyTCAAEXoScSE.crl (hash: DVXZn5YSWKBxkyDoS8Bj87PmyXj4bsS4njvAkOeIHek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7094EA7FAF453903681B724C2000117A127121
        Validity
            Not Before: May 26 21:56:18 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=BF13ED6073B325A12650872239676E94BD1A706B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:98:eb:a9:18:1b:aa:d2:eb:75:e1:16:ad:
                    21:73:23:64:63:40:22:46:44:ab:64:6b:08:4f:6a:
                    f6:27:4b:6c:0f:35:16:ff:4d:63:87:67:aa:08:ed:
                    23:47:cd:ff:04:b9:8e:41:0e:b3:35:25:96:1c:c8:
                    e1:c3:7b:00:f8:5f:1f:6f:3a:bf:5e:30:2d:fb:72:
                    8f:6a:78:75:b8:a8:82:e7:6c:26:7f:1d:5f:50:e7:
                    15:94:5f:9b:02:01:86:7a:a1:73:d7:b4:32:fb:00:
                    16:4c:8e:61:49:5c:7d:cc:6c:c3:2d:11:8a:e5:d7:
                    1e:99:e1:c6:2f:fc:62:ca:16:4e:f6:08:d0:d7:12:
                    fa:74:1a:ad:25:56:83:24:90:b0:5b:38:cf:a8:6e:
                    74:0e:4f:e0:9e:eb:99:6f:0d:63:ce:56:c8:98:b7:
                    04:3a:a6:39:41:cd:05:85:66:10:ac:08:17:48:c8:
                    e5:c5:21:4e:5c:cb:b2:69:40:3c:d1:7e:14:46:0c:
                    ca:13:3c:b0:8d:b3:5b:40:e1:4c:14:e4:04:0a:c0:
                    77:9a:3a:e4:b0:09:59:e1:e2:43:86:db:c9:15:41:
                    af:c7:97:46:45:7f:e6:26:5c:6c:a9:eb:f7:0e:49:
                    7c:bb:40:71:26:a1:2d:2b:78:cd:27:fd:9f:99:1a:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:13:ED:60:73:B3:25:A1:26:50:87:22:39:67:6E:94:BD:1A:70:6B
            X509v3 Authority Key Identifier:
                keyid:CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zXCU6n-vRTkDaBtyTCAAEXoScSE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:36:6a:2f:b8:c6:5c:7c:10:af:f3:f9:78:28:76:50:e1:
         b3:44:36:94:70:f5:99:6e:1b:1b:6c:ab:d9:13:d4:fd:78:0e:
         09:32:80:f5:63:ab:39:f4:f8:87:30:8f:8d:79:c0:c6:be:5c:
         a7:3f:e2:63:7a:2f:3a:06:3b:aa:54:09:d6:f3:0e:91:e9:00:
         f4:06:05:1a:4d:27:61:76:83:5b:35:02:69:f6:83:9e:77:62:
         82:c8:c5:07:74:2e:49:01:18:92:a7:8c:c2:a3:5c:4a:6a:9b:
         84:6a:c8:bb:c3:90:4c:0c:ec:0c:b0:ac:c9:20:a3:b1:d7:4c:
         08:c9:1c:61:d5:07:af:00:a9:aa:20:11:f3:8c:0d:e8:2c:e2:
         dd:93:7b:64:62:4b:38:7f:fa:86:0d:a5:7d:78:45:ae:72:25:
         ec:22:28:c8:37:1b:19:f8:ef:fe:e9:4a:fd:bf:59:cd:cd:01:
         f2:c4:f0:a9:47:f2:8b:75:97:c9:f8:8a:73:bd:2c:c6:8a:39:
         59:ef:6c:53:0a:da:4a:88:77:7d:4c:f3:1a:0a:2f:8e:8e:e5:
         12:32:3f:f9:9d:95:ed:ff:ac:fb:2b:51:26:73:ee:43:53:d0:
         1d:40:ed:14:e0:ab:4b:af:77:94:68:70:86:ab:c8:4d:6f:12:
         57:33:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----