Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File:                     RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier:          s7ooUUbRYO9Nl4qOcl56VaYMEQkRkZPkT3hF+IvuFiw=
Subject key identifier:   E6:A0:66:9B:A2:84:74:54:82:D4:61:38:34:F0:9A:04:F0:DA:1A:8F
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer:       /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial:       01962E2B0F68F5050C9FB50EC0338BB5A540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
                          2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: b4US6kOAbqRkSmnLfWrNFue34SZYlsShJr/WFBODMVc=)
                          3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:68:f5:05:0c:9f:b5:0e:c0:33:8b:b5:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=e6a0669ba284745482d4613834f09a04f0da1a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:3f:c5:91:a2:5e:9b:3c:4a:c9:27:d9:b5:
                    0d:3e:d9:56:56:42:73:ea:74:79:88:b8:b3:78:10:
                    ca:95:29:4a:df:0a:0a:91:7b:3d:36:43:1c:6e:e5:
                    1e:30:24:1d:e1:eb:2d:f1:58:74:8e:d3:f3:71:6f:
                    4d:ea:d4:cd:36:01:d4:15:dc:4c:ac:87:d8:e5:17:
                    ed:56:7c:30:39:96:b1:0a:54:05:91:ca:9f:23:13:
                    66:96:0b:0b:d4:f4:c9:63:a4:ea:90:0d:e4:85:21:
                    ff:3d:05:80:70:72:8a:e5:e4:22:8c:49:6d:a9:fb:
                    b3:16:26:94:7d:2f:10:f3:05:3c:49:15:3e:a6:be:
                    66:26:10:6b:da:c8:60:10:d8:67:00:3b:83:02:6b:
                    d9:ef:e1:6a:28:1a:71:ec:ab:83:aa:88:a1:c8:cb:
                    95:f2:65:b7:fd:4d:24:2d:8f:22:55:c2:f5:dc:8c:
                    b8:67:fc:cf:e9:a6:7d:63:ee:8d:36:bb:e9:62:85:
                    95:39:b1:55:b1:ef:00:c4:4d:dc:39:a0:18:30:5c:
                    9c:75:27:fa:06:11:80:81:5d:3e:a3:7e:27:f9:d4:
                    86:d4:89:d1:bf:3e:ef:24:2f:92:0d:32:92:98:80:
                    61:0d:0e:3d:03:29:02:66:57:d6:02:c5:21:91:6c:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A0:66:9B:A2:84:74:54:82:D4:61:38:34:F0:9A:04:F0:DA:1A:8F
            X509v3 Authority Key Identifier:
                keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:59:9e:15:f0:28:65:80:b5:f8:d8:31:35:4c:ef:5f:30:
         6d:2b:62:1b:76:f7:56:47:c7:e0:18:4f:54:19:7d:19:17:92:
         bc:3b:8e:66:bd:b9:80:f4:5e:fa:ab:ec:91:14:8f:0e:b7:56:
         a2:b2:37:d7:66:11:43:88:f8:d6:85:f8:13:7a:e1:c0:f2:ee:
         e1:b4:36:3f:34:f7:de:8b:97:56:35:70:a5:90:13:98:3c:e1:
         5f:54:0f:04:06:11:85:af:53:5d:2b:19:32:a5:10:76:d1:68:
         09:ad:27:b4:c1:03:6f:b2:e0:1d:80:11:38:b1:ce:7a:6a:79:
         e0:74:16:b7:7e:e7:88:82:1f:3b:64:bb:ce:50:57:2b:e3:55:
         21:bf:2d:57:b7:68:46:d0:36:fd:1f:71:e8:00:1b:7a:46:8c:
         27:2a:5a:26:f1:c6:70:18:18:74:ca:9e:4d:ea:71:b0:c9:68:
         05:e5:47:0b:71:0b:d3:da:8c:29:3c:44:01:8a:f4:51:85:75:
         9f:b0:43:40:28:81:e7:86:08:5a:90:0c:51:ae:e5:67:cd:e5:
         d3:de:77:ff:75:6a:dc:54:a6:22:ea:5c:8a:46:18:af:57:7f:
         bf:50:f0:88:6c:15:a5:d9:6d:1b:b8:fb:c3:6c:5f:1c:a3:1c:
         0b:40:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----