Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File:                     r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier:          ZL/SSWV4vAlq2x7KX23gC2fsi8mtevgsoE21O/wACyQ=
Subject key identifier:   A9:BF:2B:82:2B:9F:77:60:BD:6C:CB:27:61:20:BF:89:8C:E6:F7:0E
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer:       /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial:       01962E2AE1D6B61C8C06DDFBEC9EE61EC9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number:          11D9
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
                          2: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
                          3: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
                          4: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
                          5: YdvdhoRpy_JXRjRWmkCEQY06GUI.roa (hash: TbsRq0lwWgkwqZTblVQ4eG6aMqkkSiOMP5tHnWR2zXI=)
                          6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
                          7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
                          8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: Y4YPexNQ51w2KXGRTRlzgOKGqXJpXVr1q5aIQIilENM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e1:d6:b6:1c:8c:06:dd:fb:ec:9e:e6:1e:c9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=a9bf2b822b9f7760bd6ccb276120bf898ce6f70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:f4:7a:97:b3:d1:b7:64:af:3f:fb:9e:32:
                    d6:1b:ef:fe:cd:4d:40:49:58:c2:20:54:8e:0a:2d:
                    2b:82:16:86:6b:c2:dd:62:9b:0e:71:1d:96:1c:f6:
                    28:ed:fe:ca:a2:09:9e:77:a1:d9:88:d3:93:b9:6e:
                    8a:49:24:e3:c9:39:12:00:f8:06:a6:b3:54:5e:bb:
                    29:21:21:76:80:8c:93:e4:57:18:13:65:b0:02:28:
                    e3:a8:de:52:aa:c7:81:b5:68:d5:cf:a3:ba:40:c5:
                    23:8a:ce:e2:03:5f:0e:00:8b:eb:2a:0a:d4:78:b7:
                    16:42:15:d1:c4:6d:3e:06:dd:0f:db:1f:0b:0f:19:
                    2a:97:63:30:73:ff:68:9f:dd:0a:b5:f9:eb:f4:e3:
                    8b:53:a0:f8:09:0f:03:7e:da:bc:2b:8e:4f:93:72:
                    5e:69:de:55:33:5a:07:46:00:dd:06:1b:19:09:af:
                    87:d8:d6:8d:49:89:44:7d:84:7c:36:df:ba:85:ae:
                    df:02:a7:50:6c:57:e5:b9:43:a2:95:30:18:31:96:
                    9b:cc:ec:51:da:70:fd:18:2a:c9:58:93:30:00:09:
                    28:40:ac:ae:52:48:52:15:57:f9:6d:e0:27:6d:ea:
                    7c:71:48:a5:88:fb:b5:cd:4f:96:84:9a:68:cb:37:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BF:2B:82:2B:9F:77:60:BD:6C:CB:27:61:20:BF:89:8C:E6:F7:0E
            X509v3 Authority Key Identifier:
                keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:c7:99:91:cf:c8:66:ba:03:5e:ab:cf:22:1c:89:82:94:
         91:fb:30:71:61:ba:ae:6f:aa:7e:66:5d:f7:ee:02:05:e3:80:
         6c:1c:93:a0:31:76:85:ce:9f:c2:25:c8:0a:37:b0:e9:d7:57:
         74:7f:bd:b3:ad:04:c0:4a:9e:9c:f2:90:82:97:ef:fc:ae:e2:
         ca:63:97:e1:6f:1c:f5:1f:59:7e:65:60:c0:63:a4:c8:21:0c:
         dc:6f:44:41:c9:0b:4c:72:6c:74:d7:0b:c0:ff:fb:e3:5a:35:
         fe:71:29:58:dc:f1:02:bd:56:30:1d:8b:43:df:17:b5:47:23:
         4f:52:06:a0:7a:a9:ce:2d:34:3b:27:12:fd:77:37:81:19:e1:
         0e:f5:79:88:83:c5:c0:fc:2c:48:36:09:3e:66:4e:08:9a:c4:
         97:e2:bc:49:8d:5e:50:c9:04:8d:7d:d8:d7:1b:40:37:96:4f:
         a5:26:7f:67:e3:38:05:97:e3:df:93:18:c8:96:b3:17:b9:9f:
         e4:04:fa:17:bc:c2:1d:d2:a7:82:6b:06:65:6b:06:f6:3a:04:
         80:31:7b:63:44:f4:93:bb:99:2d:eb:47:ad:f9:c6:66:62:a2:
         dc:2f:af:a9:a2:42:17:af:e9:ec:23:b8:cf:2c:d7:dd:e5:d5:
         7c:e3:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----