Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/Y9dYTpffdDNHYIb2BX6l5k16bZA.mft
File:                     Y9dYTpffdDNHYIb2BX6l5k16bZA.mft (raw, json)
Hash identifier:          siYNSNXkdaABiGKCXC+ICr5MwDuloHBnwU9IHrqD8q0=
Subject key identifier:   71:21:48:95:34:05:A3:E5:11:7D:59:7A:C9:0D:8B:99:67:51:31:32
Authority key identifier: 63:D7:58:4E:97:DF:74:33:47:60:86:F6:05:7E:A5:E6:4D:7A:6D:90
Certificate issuer:       /CN=63D7584E97DF7433476086F6057EA5E64D7A6D90
Certificate serial:       0738
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9dYTpffdDNHYIb2BX6l5k16bZA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/Y9dYTpffdDNHYIb2BX6l5k16bZA.mft
Manifest number:          0736
Signing time:             Thu 26 May 2022 18:59:37 +0000
Manifest this update:     Thu 26 May 2022 18:59:37 +0000
Manifest next update:     Fri 27 May 2022 00:59:37 +0000
Files and hashes:         1: D7X78mO_LjVRyMPxk8Boqbl33O0.roa (hash: s6fRPafzBn1ZwgnvWOTz/8QlrFgQ5dZi6REDwDF6NMU=)
                          2: Y9dYTpffdDNHYIb2BX6l5k16bZA.crl (hash: 8ib6CKlkchOx3AYOWirj3hvQzuYNIWV+3X/SLWaHAMY=)
                          3: YCf3zN8Y7G_jAySxCHN_cNeP5W8.roa (hash: 8XfeYZ29guX5qV1EPwhNDYi7HKA1VgDTD2nMf4PNRWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D7584E97DF7433476086F6057EA5E64D7A6D90
        Validity
            Not Before: May 26 18:59:37 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=712148953405A3E5117D597AC90D8B9967513132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:2f:e0:9e:f4:1c:50:17:4f:38:9b:f0:53:
                    a7:12:d3:e6:34:e7:50:29:89:d7:52:5c:37:2d:b9:
                    17:92:3f:63:b3:a7:ca:f8:bf:f4:85:86:60:d3:c5:
                    18:5f:ac:2e:1c:5d:f3:68:17:6f:57:f7:be:d0:b9:
                    97:dd:7d:d7:11:dd:59:3d:59:3c:c5:de:9d:bb:0b:
                    ce:40:b1:45:51:de:78:e3:d0:2e:9e:30:3b:55:dd:
                    fa:3f:b1:d8:cb:06:36:e5:71:ac:f0:12:2e:cb:97:
                    2d:f2:31:1a:2c:d1:2f:89:76:49:e8:4f:13:6a:76:
                    53:e0:0d:b4:e7:a8:d3:b3:b6:d6:ab:64:08:b5:83:
                    75:53:82:df:db:e3:93:55:e1:0d:2f:b9:31:80:f6:
                    c2:7b:b4:94:1b:73:bd:82:85:96:52:20:40:c3:07:
                    fc:8d:5f:35:23:02:93:10:82:5d:57:14:a4:78:5f:
                    dc:e5:a0:63:53:51:54:e4:22:37:d2:54:ff:0f:13:
                    62:81:cc:13:2a:b4:56:52:16:92:87:5d:2b:a4:8c:
                    3d:47:16:17:de:58:ce:f2:e5:bc:76:23:4c:00:25:
                    d0:a4:5f:00:4c:8e:65:bc:7c:5d:39:4b:b2:21:d2:
                    6a:b5:49:12:c8:93:05:e5:5c:19:05:82:82:5e:3f:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:21:48:95:34:05:A3:E5:11:7D:59:7A:C9:0D:8B:99:67:51:31:32
            X509v3 Authority Key Identifier:
                keyid:63:D7:58:4E:97:DF:74:33:47:60:86:F6:05:7E:A5:E6:4D:7A:6D:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/Y9dYTpffdDNHYIb2BX6l5k16bZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9dYTpffdDNHYIb2BX6l5k16bZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/Y9dYTpffdDNHYIb2BX6l5k16bZA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:f0:d6:0a:e9:d6:90:b6:05:50:4c:7f:a4:da:ba:96:1c:
         6c:d7:87:b2:49:56:09:ae:13:19:15:4b:cc:27:72:ce:50:37:
         4f:e3:80:34:02:37:85:05:d3:a7:1a:0a:77:a5:1d:f7:12:29:
         ff:07:02:3f:0c:0b:8e:86:26:43:28:f3:70:ad:1d:df:de:37:
         bb:ee:69:94:cb:51:c9:ac:51:4c:6a:a7:84:ff:a4:e2:fb:59:
         8e:13:75:f2:ac:7c:c3:09:38:9d:e2:74:59:76:73:a4:fc:70:
         90:fb:f3:96:32:27:48:ca:59:dd:15:8a:33:12:48:ca:07:c4:
         08:31:88:06:d1:1b:51:c8:15:06:23:81:79:4d:d3:d2:77:9b:
         7c:e8:d2:c9:1b:cd:1b:41:ff:91:27:f0:e0:4d:da:44:83:58:
         e4:f1:54:36:ef:27:42:26:b5:1b:c6:2b:bf:3b:18:1a:09:db:
         4a:a8:67:b7:1a:9f:d6:33:a6:2d:b1:64:2d:6e:4b:c8:4a:5e:
         36:36:a8:38:2c:79:35:04:2c:c0:de:27:55:25:66:c9:1f:bc:
         84:1b:af:fa:ff:51:2d:89:b0:c9:aa:4d:0e:01:b0:d8:66:01:
         2a:27:20:c9:d3:78:8a:53:19:7e:52:1b:88:0a:8b:45:fb:f6:
         90:63:86:7d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjNE
NzU4NEU5N0RGNzQzMzQ3NjA4NkY2MDU3RUE1RTY0RDdBNkQ5MDAeFw0yMjA1MjYx
ODU5MzdaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDcxMjE0ODk1MzQwNUEz
RTUxMTdENTk3QUM5MEQ4Qjk5Njc1MTMxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcjy/gnvQcUBdPOJvwU6cS0+Y051ApiddSXDctuReSP2Ozp8r4
v/SFhmDTxRhfrC4cXfNoF29X977QuZfdfdcR3Vk9WTzF3p27C85AsUVR3njj0C6e
MDtV3fo/sdjLBjblcazwEi7Lly3yMRos0S+JdknoTxNqdlPgDbTnqNOzttarZAi1
g3VTgt/b45NV4Q0vuTGA9sJ7tJQbc72ChZZSIEDDB/yNXzUjApMQgl1XFKR4X9zl
oGNTUVTkIjfSVP8PE2KBzBMqtFZSFpKHXSukjD1HFhfeWM7y5bx2I0wAJdCkXwBM
jmW8fF05S7Ih0mq1SRLIkwXlXBkFgoJeP/OPAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUcSFIlTQFo+URfVl6yQ2LmWdRMTIwHwYDVR0jBBgwFoAUY9dYTpffdDNHYIb2
BX6l5k16bZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIx
L1k5ZFlUcGZmZEROSFlJYjJCWDZsNWsxNmJaQS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWTlkWVRwZmZkRE5IWUliMkJYNmw1azE2YlpBLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIxL1k5ZFlUcGZmZEROSFlJ
YjJCWDZsNWsxNmJaQS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBOOvDWCunWkLYFUEx/pNq6lhxs14eySVYJrhMZFUvMJ3LOUDdP44A0AjeFBdOn
Ggp3pR33Ein/BwI/DAuOhiZDKPNwrR3f3je77mmUy1HJrFFMaqeE/6Ti+1mOE3Xy
rHzDCTid4nRZdnOk/HCQ+/OWMidIylndFYozEkjKB8QIMYgG0RtRyBUGI4F5TdPS
d5t86NLJG80bQf+RJ/DgTdpEg1jk8VQ27ydCJrUbxiu/OxgaCdtKqGe3Gp/WM6Yt
sWQtbkvISl42Nqg4LHk1BCzA3idVJWbJH7yEG6/6/1EtibDJqk0OAbDYZgEqJyDJ
03iKUxl+UhuICotF+/aQY4Z9
-----END CERTIFICATE-----