Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/U8Llcrj5SP4FaAc093QX5BDHFqg.mft
File:                     U8Llcrj5SP4FaAc093QX5BDHFqg.mft (raw, json)
Hash identifier:          AnYm/5R6iN/gMerqhybzLT5JSG+Bb9ax0zn7DDPMQRQ=
Subject key identifier:   3E:5B:B8:83:35:F2:71:BE:C6:EB:6F:E5:FA:31:40:1E:9A:1C:BB:D5
Authority key identifier: 53:C2:E5:72:B8:F9:48:FE:05:68:07:34:F7:74:17:E4:10:C7:16:A8
Certificate issuer:       /CN=53C2E572B8F948FE05680734F77417E410C716A8
Certificate serial:       0CE9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8Llcrj5SP4FaAc093QX5BDHFqg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/U8Llcrj5SP4FaAc093QX5BDHFqg.mft
Manifest number:          0CD4
Signing time:             Tue 31 May 2022 11:30:54 +0000
Manifest this update:     Tue 31 May 2022 11:30:53 +0000
Manifest next update:     Tue 31 May 2022 17:30:53 +0000
Files and hashes:         1: U8Llcrj5SP4FaAc093QX5BDHFqg.crl (hash: jSRFd4kYwdA8J8J9G9W6aEqBIq2Iyz7rQ7Q1W4iJnEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C2E572B8F948FE05680734F77417E410C716A8
        Validity
            Not Before: May 31 11:30:53 2022 GMT
            Not After : May 31 10:59:38 2023 GMT
        Subject: CN=3E5BB88335F271BEC6EB6FE5FA31401E9A1CBBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:0a:d6:a7:c1:e0:5d:32:cb:3f:50:a1:4a:
                    67:67:14:53:14:db:8e:69:cd:9b:29:d4:37:b0:c8:
                    69:25:71:3b:6c:e7:03:5c:0b:f0:44:57:cf:23:45:
                    20:6f:5c:b9:5e:66:0e:03:71:57:b3:e9:c7:d8:aa:
                    5b:7c:51:82:fa:7f:ef:89:cf:cb:ec:24:13:95:47:
                    41:b9:2c:2a:69:cf:fc:2e:ee:77:40:93:52:5b:9b:
                    2b:3d:ff:28:42:59:4b:1a:25:8c:30:23:41:a8:d9:
                    79:f3:c3:f6:ba:ce:b7:7d:ee:c6:3a:fc:d4:46:3e:
                    89:b6:c8:01:01:1e:a4:46:e4:a5:27:c3:6e:d9:1f:
                    c5:79:9c:62:a0:34:71:7c:1a:5b:11:76:48:34:1a:
                    c1:31:36:e3:49:32:31:1b:38:1a:29:58:51:13:e8:
                    55:1f:5c:9b:8a:29:4c:8d:03:fa:a2:6f:5f:54:95:
                    fa:9b:68:e6:52:82:ae:1c:3a:59:a2:15:f9:10:f1:
                    8e:97:0e:4b:d6:63:3f:08:cb:66:27:7a:51:8c:86:
                    6e:6a:16:3c:cf:7d:63:49:b8:01:3a:95:4b:65:74:
                    8a:be:70:12:20:81:d3:20:9e:64:a8:3d:9d:76:33:
                    e6:a5:81:77:eb:76:88:59:bd:3a:1f:7b:7a:56:4b:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:B8:83:35:F2:71:BE:C6:EB:6F:E5:FA:31:40:1E:9A:1C:BB:D5
            X509v3 Authority Key Identifier:
                keyid:53:C2:E5:72:B8:F9:48:FE:05:68:07:34:F7:74:17:E4:10:C7:16:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/U8Llcrj5SP4FaAc093QX5BDHFqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U8Llcrj5SP4FaAc093QX5BDHFqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/U8Llcrj5SP4FaAc093QX5BDHFqg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bf:95:70:fe:dc:db:20:bf:16:f8:11:a2:7f:47:b6:5b:d7:
         26:6b:5a:0d:d2:a2:a2:64:40:29:4a:eb:71:b4:fa:2e:52:e6:
         52:a3:88:6c:c3:73:a8:55:8d:a0:96:81:fb:99:d7:e4:7d:3e:
         5d:cb:00:8e:cd:0e:74:cd:19:24:78:f0:94:67:e3:61:5a:d1:
         72:19:86:0b:6c:a1:c7:0d:a5:d9:46:47:44:36:e2:ce:03:81:
         88:35:0e:44:3e:6e:17:8e:b4:16:47:38:9e:41:84:e1:22:ed:
         3d:8a:fc:08:e9:bd:48:a9:42:95:a0:9b:c5:18:0d:cf:7a:51:
         5a:2c:bc:01:be:f6:00:66:b1:0e:26:ee:2b:c0:b2:35:14:24:
         a2:a8:02:62:3a:4e:47:73:2a:02:b3:b1:c6:f4:94:93:65:0e:
         ed:c8:5f:44:dd:c7:5f:d7:27:a8:1f:eb:37:42:dd:ec:b1:86:
         a2:80:ef:29:f9:c4:05:17:84:90:47:48:69:c6:48:2e:66:a2:
         02:c4:f1:90:e4:98:9b:89:94:76:74:63:6e:dc:bd:2a:6c:13:
         34:1a:8f:94:94:4f:b2:37:7e:5a:b1:32:74:c2:67:dd:52:3b:
         eb:98:48:a2:52:90:5c:85:cf:7b:73:6c:c7:b8:f2:6c:e9:6e:
         0c:c8:91:31
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTND
MkU1NzJCOEY5NDhGRTA1NjgwNzM0Rjc3NDE3RTQxMEM3MTZBODAeFw0yMjA1MzEx
MTMwNTNaFw0yMzA1MzExMDU5MzhaMDMxMTAvBgNVBAMTKDNFNUJCODgzMzVGMjcx
QkVDNkVCNkZFNUZBMzE0MDFFOUExQ0JCRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChrwrWp8HgXTLLP1ChSmdnFFMU245pzZsp1DewyGklcTts5wNc
C/BEV88jRSBvXLleZg4DcVez6cfYqlt8UYL6f++Jz8vsJBOVR0G5LCppz/wu7ndA
k1Jbmys9/yhCWUsaJYwwI0Go2Xnzw/a6zrd97sY6/NRGPom2yAEBHqRG5KUnw27Z
H8V5nGKgNHF8GlsRdkg0GsExNuNJMjEbOBopWFET6FUfXJuKKUyNA/qib19Ulfqb
aOZSgq4cOlmiFfkQ8Y6XDkvWYz8Iy2YnelGMhm5qFjzPfWNJuAE6lUtldIq+cBIg
gdMgnmSoPZ12M+algXfrdohZvTofe3pWS9sPAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUPlu4gzXycb7G62/l+jFAHpocu9UwHwYDVR0jBBgwFoAUU8Llcrj5SP4FaAc0
93QX5BDHFqgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzEv
VThMbGNyajVTUDRGYUFjMDkzUVg1QkRIRnFnLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9VOExsY3JqNVNQNEZhQWMwOTNRWDVCREhGcWcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83MS9VOExsY3JqNVNQNEZhQWMw
OTNRWDVCREhGcWcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
C7+VcP7c2yC/FvgRon9HtlvXJmtaDdKiomRAKUrrcbT6LlLmUqOIbMNzqFWNoJaB
+5nX5H0+XcsAjs0OdM0ZJHjwlGfjYVrRchmGC2yhxw2l2UZHRDbizgOBiDUORD5u
F460Fkc4nkGE4SLtPYr8COm9SKlClaCbxRgNz3pRWiy8Ab72AGaxDibuK8CyNRQk
oqgCYjpOR3MqArOxxvSUk2UO7chfRN3HX9cnqB/rN0Ld7LGGooDvKfnEBReEkEdI
acZILmaiAsTxkOSYm4mUdnRjbty9KmwTNBqPlJRPsjd+WrEydMJn3VI765hIolKQ
XIXPe3Nsx7jybOluDMiRMQ==
-----END CERTIFICATE-----