Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File:                     46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier:          6m5r+GeSVWfGSMEBZwen33QrhuFN6mno5UhvJhc8F7o=
Subject key identifier:   06:D7:DB:44:D1:91:E1:12:C9:8F:65:34:9E:9F:99:5C:73:2B:6A:09
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer:       /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial:       01962F7435CBE740EE39664EFB6A30F0B057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number:          0A43
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: gIzDd1cKsC8FE985eWUwKHPfj6WrR/TFSx0zLy7DVJk=)
                          2: iPsc5cdyBdI5OoAXm1WxUyXcwKs.roa (hash: uev/ryB2qmGhnPuUk4GEhG25G76cZsNfJpVAjKwYXdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:35:cb:e7:40:ee:39:66:4e:fb:6a:30:f0:b0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=06d7db44d191e112c98f65349e9f995c732b6a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:76:19:80:95:07:b2:e6:3a:64:b7:f9:13:
                    2f:fd:df:16:2e:37:81:6e:de:90:a2:f5:ec:0b:e3:
                    81:c9:96:a7:be:2c:f0:bb:89:8e:1b:4c:30:86:4d:
                    24:af:1c:e8:ea:09:a5:54:b9:28:45:ee:73:31:b7:
                    e7:1c:66:6c:70:86:31:0a:cc:c9:ca:08:de:9d:3d:
                    ee:52:6f:0d:fa:10:9b:96:4b:92:ef:43:bd:47:a9:
                    85:01:5c:a0:80:19:34:21:13:46:a1:64:33:17:3f:
                    79:5b:cf:68:18:12:76:c0:c6:22:57:e7:d2:37:5b:
                    11:ab:32:18:2a:5e:49:d5:7b:bc:6a:57:0e:e7:63:
                    3d:c1:b7:41:30:be:3b:26:68:60:3c:d1:7b:9f:a5:
                    6d:13:b0:64:2b:48:e5:2d:b1:73:5c:f4:5d:e5:4f:
                    37:e4:91:3f:7e:01:7e:d4:bb:4b:ca:3c:74:29:73:
                    b9:05:bd:f3:1f:b1:45:8d:83:b8:ad:0b:ad:08:09:
                    51:5f:a2:23:ec:ec:09:31:77:72:9a:64:a4:a8:b3:
                    97:d7:04:5c:de:6b:f7:1a:e0:20:a5:12:51:c8:ba:
                    94:5f:91:0f:86:ce:23:b2:7d:b8:0d:71:47:5d:9d:
                    e4:2d:b2:9c:82:cd:80:40:31:84:ec:ab:62:7c:85:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:DB:44:D1:91:E1:12:C9:8F:65:34:9E:9F:99:5C:73:2B:6A:09
            X509v3 Authority Key Identifier:
                keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:3b:3a:a0:86:8e:36:57:38:e8:2e:c3:19:7e:c4:a4:4f:
         fe:59:fb:5a:64:9d:c7:38:24:3c:66:63:b3:51:45:93:e6:44:
         27:e4:6a:16:80:93:d3:aa:f9:bc:e9:bc:57:33:35:5d:75:09:
         c7:63:81:5a:70:ec:33:53:bd:f9:ac:60:cb:17:f2:6b:49:77:
         21:f4:28:45:92:d2:13:a1:e7:7a:51:6f:53:7c:c1:9e:2d:37:
         d1:48:f5:49:ea:7e:15:f8:5a:3e:ce:85:11:01:76:60:1c:f3:
         68:f2:c1:47:fa:fd:d8:28:da:46:3a:5e:ff:85:a7:c4:9d:41:
         03:fc:53:79:0b:f8:57:bf:a6:fa:79:4b:ef:a4:49:62:5e:87:
         3e:72:c9:1e:26:ba:e4:05:29:17:f2:aa:d0:96:2c:7e:f0:f3:
         04:4e:2f:ad:37:68:6b:dd:99:ff:18:3a:69:ca:cf:80:fc:2e:
         e8:77:f5:08:19:ca:09:89:f6:74:d0:88:e7:df:82:40:a2:4a:
         0a:cb:a6:09:46:c9:95:4c:ff:61:dc:ee:49:65:e0:83:1e:81:
         02:cd:27:4b:68:82:97:bd:c3:57:1e:8b:4b:5e:8e:4d:e6:06:
         0b:60:58:ec:03:b9:e5:5a:94:f0:f1:a3:6e:e9:b0:63:54:3e:
         ff:d8:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----