Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/QLTus34ihRvRhQ16Yye1CsapaZQ.mft
File:                     QLTus34ihRvRhQ16Yye1CsapaZQ.mft (raw, json)
Hash identifier:          Sz2i9vF0+urYfkZmpt1InHkIlJqTtvmDHT4Rz8VrgMY=
Subject key identifier:   3B:14:D3:8A:53:C3:C4:87:52:82:88:E9:4A:24:EC:94:1C:2E:57:FB
Authority key identifier: 40:B4:EE:B3:7E:22:85:1B:D1:85:0D:7A:63:27:B5:0A:C6:A9:69:94
Certificate issuer:       /CN=40B4EEB37E22851BD1850D7A6327B50AC6A96994
Certificate serial:       06D1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QLTus34ihRvRhQ16Yye1CsapaZQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QLTus34ihRvRhQ16Yye1CsapaZQ.mft
Manifest number:          06D1
Signing time:             Thu 26 May 2022 19:56:03 +0000
Manifest this update:     Thu 26 May 2022 19:56:03 +0000
Manifest next update:     Fri 27 May 2022 01:56:03 +0000
Files and hashes:         1: QLTus34ihRvRhQ16Yye1CsapaZQ.crl (hash: RwyV5VsRPZuv2OUUjO4/tFx7CrEkupDirnrYulwY4+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B4EEB37E22851BD1850D7A6327B50AC6A96994
        Validity
            Not Before: May 26 19:56:03 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3B14D38A53C3C487528288E94A24EC941C2E57FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:47:18:9d:d4:57:18:7b:b1:01:38:eb:ad:
                    fc:07:ac:28:52:4c:28:3f:8a:2d:23:da:3a:89:73:
                    f7:a4:7d:2a:d2:e0:bf:37:52:ae:cf:52:d7:61:be:
                    7c:37:85:9c:f1:3f:f7:90:8f:84:61:36:7f:db:26:
                    a5:ef:22:94:1b:a6:df:f0:82:0c:fa:dd:95:49:ed:
                    5c:77:70:ef:c2:fa:20:81:89:fe:73:a3:d3:e1:e8:
                    53:1d:9e:16:f5:88:3a:57:19:05:e2:58:b8:a5:b8:
                    cb:37:c6:97:32:fe:2c:b9:6e:02:3e:ce:27:2b:ff:
                    75:93:47:69:65:f6:7d:00:ad:9b:42:a6:50:54:16:
                    34:51:bc:fb:23:b6:d0:3a:0d:48:c4:70:43:d7:a4:
                    79:b6:3d:54:8a:20:a5:47:0f:81:05:e3:e6:df:0d:
                    57:6d:ed:18:77:61:86:1b:4a:df:8a:c6:9a:0c:22:
                    f0:80:ad:43:e9:03:2e:f2:e4:61:0b:23:00:b5:74:
                    3b:22:a8:9b:03:a8:33:54:9a:8b:7d:c7:c6:18:61:
                    04:1b:f2:cc:b7:55:a4:55:15:5e:18:7c:8e:b1:80:
                    27:35:84:5e:72:fa:a4:99:a7:07:09:cd:1b:3f:2b:
                    c6:0b:5f:43:43:16:46:cf:67:16:04:80:26:4e:bf:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:14:D3:8A:53:C3:C4:87:52:82:88:E9:4A:24:EC:94:1C:2E:57:FB
            X509v3 Authority Key Identifier:
                keyid:40:B4:EE:B3:7E:22:85:1B:D1:85:0D:7A:63:27:B5:0A:C6:A9:69:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QLTus34ihRvRhQ16Yye1CsapaZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QLTus34ihRvRhQ16Yye1CsapaZQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QLTus34ihRvRhQ16Yye1CsapaZQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:38:8c:5d:82:d6:26:bb:18:45:a7:d3:a4:5a:d4:26:31:62:
         1b:7b:71:e4:f3:0a:eb:0e:40:1a:fb:cc:cd:80:4d:86:14:cf:
         69:0a:28:cc:2c:a0:07:f2:95:fa:21:d3:34:91:9d:c8:73:c7:
         58:c2:ab:ca:ec:68:2f:e1:9f:18:f6:ca:2f:e0:a0:32:c7:96:
         f9:f8:5a:2a:39:73:53:95:b3:c8:2f:0d:3c:73:93:83:78:31:
         05:80:26:38:56:37:ef:48:6a:e0:5f:62:bd:a0:ae:09:78:aa:
         09:e6:18:1a:79:dc:57:65:df:68:7e:48:6e:ae:1a:71:5f:09:
         95:fe:3a:ea:5c:bc:fd:8b:f6:31:d7:f2:53:02:8f:dc:6b:31:
         8d:6b:bb:92:f4:0a:6f:0f:df:ea:a1:cd:ff:58:db:1e:85:05:
         38:2a:4b:4c:6d:aa:e7:69:63:28:8f:65:fa:96:44:0f:6e:08:
         d0:a3:c2:5c:c9:74:1b:40:92:2b:21:3f:f0:2c:f5:6d:69:65:
         0f:8c:c9:ad:f2:6c:55:5d:88:4d:4b:3a:e0:3f:f8:75:ae:46:
         2f:a8:db:d7:9f:d4:2a:3c:f4:bf:89:f7:aa:98:87:23:b2:fe:
         71:c1:bc:35:c0:fd:2c:94:ad:e7:5a:4d:7c:f0:10:64:f9:aa:
         74:1f:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----