Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          oP5bYB+uYY0y9XtzLJ2HQsjw1E2sKBCTyaFXbv9uoPM=
Subject key identifier:   F0:06:96:D0:14:36:EF:27:AF:61:1B:7B:A0:BA:6A:4F:ED:70:8F:70
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       01962F0718603B78E291B3991884DAD90ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          03D8
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: 4VHtXgk7yhYC8aWYZLOtsr9eOC7vO2bCZB1v/Fw3v1A=)
                          2: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (hash: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:18:60:3b:78:e2:91:b3:99:18:84:da:d9:0e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=f00696d01436ef27af611b7ba0ba6a4fed708f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:7c:1e:88:fc:3a:a4:7c:4b:2e:98:07:12:
                    52:cd:7a:4d:ff:5e:78:b0:7b:d7:fa:29:2b:3c:83:
                    1b:2e:ec:65:62:dc:54:70:da:4c:56:40:c8:a0:fb:
                    c5:e0:de:52:ff:88:df:0a:aa:3d:93:e6:f3:b1:85:
                    6a:e5:60:6b:06:60:35:6d:da:76:68:5f:2c:a6:0c:
                    d8:65:33:6a:9e:8a:43:3f:ee:3a:7c:b4:09:cf:ef:
                    d0:2f:3c:c9:12:bb:d0:03:61:1b:6b:6a:24:9e:de:
                    6b:4c:2b:09:1c:b5:a4:b7:c0:e6:4b:02:b0:a6:cd:
                    3f:f4:6d:3d:ad:9a:9c:34:39:f6:c4:15:5c:5c:1a:
                    69:61:c2:b4:99:98:f9:fa:fc:76:e5:68:11:93:0b:
                    a9:a7:bc:3b:6a:16:c8:2c:9a:b7:a9:4f:13:50:20:
                    12:77:d8:4a:0c:1a:ce:1e:06:0e:2e:ad:d8:53:d1:
                    58:85:a8:32:03:29:21:64:8d:9a:0a:66:20:a3:4d:
                    15:c7:30:c8:da:b0:c2:d8:f0:e0:0e:5a:17:f7:bd:
                    e9:4e:26:4a:17:5c:99:5f:f2:f6:9f:13:16:36:0b:
                    6b:4c:2c:ae:19:59:59:66:4d:4e:ed:1d:21:55:d4:
                    0e:df:1c:54:3e:bd:63:8b:41:b4:c5:58:73:c1:48:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:96:D0:14:36:EF:27:AF:61:1B:7B:A0:BA:6A:4F:ED:70:8F:70
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:46:d6:bd:67:10:e1:49:c8:71:a8:01:23:f1:32:73:73:
         fe:e9:de:24:09:07:db:0e:f9:6a:86:21:ba:ad:7a:6e:3a:d5:
         43:17:0d:5e:7c:c4:38:31:a3:e4:5e:22:74:cb:08:34:4e:96:
         cf:74:be:62:af:15:30:26:ab:76:24:fe:2d:92:bc:c0:ca:d6:
         3b:6a:4b:24:4c:19:6a:48:d1:7f:fc:43:d3:03:0e:4e:61:5d:
         93:4f:5b:a3:d0:9d:c9:72:47:d2:ee:e4:6e:5f:8b:67:e9:b7:
         67:77:bd:be:9e:11:6c:68:62:1a:9d:39:90:c0:14:4f:85:fc:
         96:f9:b2:06:0a:aa:8b:47:fa:c5:13:77:9f:07:7a:b6:f3:cf:
         73:42:ed:35:08:12:18:4d:e5:0c:39:c2:82:e6:bd:c3:d4:b6:
         4c:c0:9a:f7:ef:ce:5d:f7:dd:00:1f:32:35:56:2c:cd:59:21:
         98:8a:bc:d5:b2:16:33:7d:7b:04:b3:94:20:0b:93:e3:3b:47:
         aa:73:f6:4d:83:bf:96:6e:aa:35:11:f7:85:1f:a0:27:dd:a0:
         e7:0a:b1:29:32:28:6a:03:e3:ba:02:c3:8f:97:b2:33:f9:8e:
         28:d5:38:81:3d:1e:5b:35:8e:bc:a8:23:2a:b4:e0:f8:4a:f3:
         35:6c:d7:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxhgO3jikbOZGITa2Q7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZDU4MzIzZTdkNGY5MWMzNzI5N2NkMTkyNjU2NjAzM2Iz
ZjhhYmEwHhcNMjUwNDEzMTIwMTU2WhcNMjUwNDE0MTIwMTU2WjAzMTEwLwYDVQQD
EyhmMDA2OTZkMDE0MzZlZjI3YWY2MTFiN2JhMGJhNmE0ZmVkNzA4ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG58Hoj8OqR8Sy6YBxJSzXpN/154
sHvX+ikrPIMbLuxlYtxUcNpMVkDIoPvF4N5S/4jfCqo9k+bzsYVq5WBrBmA1bdp2
aF8spgzYZTNqnopDP+46fLQJz+/QLzzJErvQA2Eba2oknt5rTCsJHLWkt8DmSwKw
ps0/9G09rZqcNDn2xBVcXBppYcK0mZj5+vx25WgRkwupp7w7ahbILJq3qU8TUCAS
d9hKDBrOHgYOLq3YU9FYhagyAykhZI2aCmYgo00VxzDI2rDC2PDgDloX973pTiZK
F1yZX/L2nxMWNgtrTCyuGVlZZk1O7R0hVdQO3xxUPr1ji0G0xVhzwUikDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAGltAUNu8nr2Ebe6C6ak/tcI9wMB8GA1UdIwQY
MBaAFEXVgyPn1PkcNyl80ZJlZgM7P4q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTct
ZjNkZjYxNzdhMmJiLzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTctZjNkZjYxNzdhMmJi
LzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAhG1r1n
EOFJyHGoASPxMnNz/uneJAkH2w75aoYhuq16bjrVQxcNXnzEODGj5F4idMsINE6W
z3S+Yq8VMCardiT+LZK8wMrWO2pLJEwZakjRf/xD0wMOTmFdk09bo9CdyXJH0u7k
bl+LZ+m3Z3e9vp4RbGhiGp05kMAUT4X8lvmyBgqqi0f6xRN3nwd6tvPPc0LtNQgS
GE3lDDnCgua9w9S2TMCa9+/OXffdAB8yNVYszVkhmIq81bIWM317BLOUIAuT4ztH
qnP2TYO/lm6qNRH3hR+gJ92g5wqxKTIoagPjugLDj5eyM/mOKNU4gT0eWzWOvKgj
KrTg+ErzNWzXWg==
-----END CERTIFICATE-----