Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.mft
File:                     GUrMMTk1r1QzwrlFbXQmgvlh6rs.mft (raw, json)
Hash identifier:          iOy7Co39URafiFVTVCpe3fT+I6p+Z0Nk8/aT/P76G8k=
Subject key identifier:   0C:A5:85:91:24:F4:43:FB:8F:CB:5F:92:AB:66:24:D9:14:7E:BD:59
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       07EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.mft
Manifest number:          078F
Signing time:             Thu 26 May 2022 19:54:54 +0000
Manifest this update:     Thu 26 May 2022 19:54:54 +0000
Manifest next update:     Fri 27 May 2022 01:54:54 +0000
Files and hashes:         1: 7Uo8Bjsq5agzBm8Zl2xbIKwPhOU.roa (hash: DQpOI9ScQu5AIVAgHimPBFReoU+6fJg1xnwwnTtpBLA=)
                          2: BsCBHI4Rf9v0zbX-SfUkTI09g-s.roa (hash: 7crToXTdZX+mXWYpZqVtB4Wz7b29CnCKk1S2B5a1eE4=)
                          3: DbsQPCj3AeTiKYbRQId5Nf8mEm0.roa (hash: KgpxPpCDocutSNgtTGMPVcclwhB/R/kssLB5k2nygpk=)
                          4: DuEsqINeYbeYZHM7Ia-CH--NswU.roa (hash: cSp+1VGPfefEkgB6lxtcbaknA0OJeAw1R9L0JBt5Eec=)
                          5: FNFoSaxnw7FbEdRrpkvUr7prQZI.roa (hash: WKtTsbI7quSlZGTZrJqJY6Zvce/FU7wQPZApG6R09II=)
                          6: G3mFqriv6TC1S2oXUjcV9AzW1sg.roa (hash: TIcE1k4eRH46SFxpon2/ZLmhRmYRs+qUCsGUQlVUZmg=)
                          7: GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl (hash: O9v8a6YkXQ4q2TfdXyks4b7B+/mILB92jiIvc9TsDqA=)
                          8: GknYZFwKAd68JvyKXOTfOvYiXSU.roa (hash: yrU8ng8AyBVDE3jyaCwAWheLQZYI1e1BJupuiubOkEA=)
                          9: HTsYGQi4kERFYb28B2Rs6X0cMb4.roa (hash: PW0NTfcCxehXF3dJLm0964OS7mzv0GIJq5nu7WW8c/U=)
                          10: Isr3HXqDcYC7RuaNuwGYNnpV6lQ.roa (hash: Hobp72OvBPQ7Xcl/VYiKZBBsVPwowbzrf8BM5moZJR8=)
                          11: Mc0JRO3wekxGb1QGxoeNQJmZkNU.roa (hash: EmQdylnnE0XyW1Lsz/I4gQ5Zn41yGZpbKe2gA8ylqXE=)
                          12: Qb5nc17MwcIfZA8guzGE91RbzX8.roa (hash: soBwuwfVGFtYjdBZh4ZMhpar1pjUGxKjiaQClRwtGr4=)
                          13: iSVN_9MSDbyoXPDAHZEnFNVCzq8.roa (hash: UXirSfDfovIjDoJCjsCXhOJJr8h7Prb+mEJikTA27u4=)
                          14: lHllESHQ3tob0goC7apgTQ4LwwI.roa (hash: xhuftfw5dy+9PA2sUDR5igcmrykha3nwpLyT/zh/gZQ=)
                          15: p63wVFUdKV3moiIXTR8yj5uKyzE.roa (hash: WBAL/ZKKgl9yO6mm1laMN6mY89CSVw25H5xpSAteI7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 26 19:54:54 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0CA5859124F443FB8FCB5F92AB6624D9147EBD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:dd:f0:d3:cc:ac:99:2f:47:d1:f0:da:75:
                    cf:77:70:6f:07:31:c6:c6:64:f9:71:07:82:96:b9:
                    06:de:63:a2:c0:87:d5:7f:43:ea:6b:32:47:fb:4d:
                    90:ad:f7:bd:64:a5:4a:33:42:bc:f6:2e:42:25:99:
                    19:cb:55:58:24:60:82:1c:50:f7:38:51:e4:8f:00:
                    26:cb:4a:36:5e:2e:f1:a2:ec:e5:4c:07:04:07:36:
                    37:25:fa:a6:5c:87:ab:3e:08:5d:59:5f:cf:f5:8b:
                    31:f2:9e:15:35:56:fe:51:aa:1d:82:de:7c:df:c8:
                    19:e4:f5:68:31:39:d6:23:e9:d2:44:f9:27:46:ae:
                    97:ec:29:32:30:32:2a:a6:f7:b0:cb:a7:fb:03:ab:
                    9c:21:5d:20:7d:8c:56:ce:65:21:89:40:77:22:77:
                    08:77:f2:a9:c8:02:5b:a2:24:ff:da:76:90:7a:35:
                    7a:22:07:da:6d:3a:30:c2:36:92:07:15:2e:d4:bd:
                    72:2b:55:de:55:f6:07:f1:a6:69:b6:94:34:31:52:
                    7c:e5:f8:7d:b1:b2:bf:7d:b9:58:7d:4f:47:7c:7f:
                    e6:bf:62:3d:3d:6a:c8:37:24:9c:5f:84:10:63:45:
                    ff:a5:0d:52:36:6d:97:19:7b:e3:30:ee:74:dd:6d:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A5:85:91:24:F4:43:FB:8F:CB:5F:92:AB:66:24:D9:14:7E:BD:59
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:e8:7e:be:66:97:4c:af:cf:d0:05:12:bf:14:8a:28:e5:
         49:86:09:95:79:8b:e0:e4:75:5a:f4:4a:2b:43:1b:41:4d:6c:
         f3:8e:b5:27:0f:1f:2e:34:72:f9:53:bd:4b:ec:14:ef:55:08:
         00:37:66:b9:ab:19:c1:d3:2b:8b:25:a9:50:ce:75:74:93:9c:
         38:29:41:a3:c6:ee:a1:43:b5:68:f4:80:c2:a7:f1:9f:38:10:
         e4:a5:9a:73:a3:55:8f:92:90:0a:20:a8:71:b7:92:fd:f9:8a:
         dd:6a:4c:96:80:f5:65:0b:98:8d:79:d7:0d:13:dd:4c:12:9b:
         2c:99:21:c1:1a:9a:b6:76:f6:70:24:24:a3:08:9e:da:f6:4e:
         93:91:10:a0:37:50:7b:25:bd:d7:ff:f0:53:b0:f2:6b:c1:bd:
         ef:a7:5f:4d:58:4f:54:07:f2:36:47:77:9d:cc:90:10:1a:50:
         89:0c:65:0d:67:31:a7:d7:e6:28:07:85:dc:c9:20:65:ac:db:
         a2:df:d6:11:53:90:7d:3d:8e:a1:28:d6:2a:d1:93:d8:79:e7:
         9b:cf:a3:46:6c:4c:8f:91:00:a0:08:e8:18:7c:7d:28:f0:29:
         2e:e8:dc:5b:c7:54:2b:ea:9e:74:d1:e7:57:59:94:2d:2d:d6:
         3e:81:e7:b1
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICB+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTk0
QUNDMzEzOTM1QUY1NDMzQzJCOTQ1NkQ3NDI2ODJGOTYxRUFCQjAeFw0yMjA1MjYx
OTU0NTRaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDBDQTU4NTkxMjRGNDQz
RkI4RkNCNUY5MkFCNjYyNEQ5MTQ3RUJENTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6id3w08ysmS9H0fDadc93cG8HMcbGZPlxB4KWuQbeY6LAh9V/
Q+prMkf7TZCt971kpUozQrz2LkIlmRnLVVgkYIIcUPc4UeSPACbLSjZeLvGi7OVM
BwQHNjcl+qZch6s+CF1ZX8/1izHynhU1Vv5Rqh2C3nzfyBnk9WgxOdYj6dJE+SdG
rpfsKTIwMiqm97DLp/sDq5whXSB9jFbOZSGJQHcidwh38qnIAluiJP/adpB6NXoi
B9ptOjDCNpIHFS7UvXIrVd5V9gfxpmm2lDQxUnzl+H2xsr99uVh9T0d8f+a/Yj09
asg3JJxfhBBjRf+lDVI2bZcZe+Mw7nTdbVBxAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUDKWFkST0Q/uPy1+Sq2Yk2RR+vVkwHwYDVR0jBBgwFoAUGUrMMTk1r1QzwrlF
bXQmgvlh6rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L0dVck1NVGsxcjFRendybEZiWFFtZ3ZsaDZycy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvR1VyTU1UazFyMVF6d3JsRmJYUW1ndmxoNnJzLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0dVck1NVGsxcjFRendy
bEZiWFFtZ3ZsaDZycy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBY5Oh+vmaXTK/P0AUSvxSKKOVJhgmVeYvg5HVa9EorQxtBTWzzjrUnDx8uNHL5
U71L7BTvVQgAN2a5qxnB0yuLJalQznV0k5w4KUGjxu6hQ7Vo9IDCp/GfOBDkpZpz
o1WPkpAKIKhxt5L9+YrdakyWgPVlC5iNedcNE91MEpssmSHBGpq2dvZwJCSjCJ7a
9k6TkRCgN1B7Jb3X//BTsPJrwb3vp19NWE9UB/I2R3edzJAQGlCJDGUNZzGn1+Yo
B4XcySBlrNui39YRU5B9PY6hKNYq0ZPYeeebz6NGbEyPkQCgCOgYfH0o8Cku6Nxb
x1Qr6p500edXWZQtLdY+geex
-----END CERTIFICATE-----