Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          pus5Y2HxS7KRdi3SwP5lTnFaaUMsoElqQPhsjmO2B0U=
Subject key identifier:   08:E1:84:D0:E2:79:9E:08:7A:9B:20:17:9B:F2:28:23:5D:A7:67:F5
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       01962FAB351A0FB376824FC6F2D31B69007F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          0D4E
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: l5dUMSXOfvZ5sAJ3+liBK5sm4Lq+SQwmErUqGkm8vVg=)
                          2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=)
                          3: G2wclPtQ-NTyFu49JfeZRSYyyxY.roa (hash: X+HR6/7YVlIIqv7OyveCmM7668weB9c1FsbPbUXjZ6M=)
                          4: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=)
                          5: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:35:1a:0f:b3:76:82:4f:c6:f2:d3:1b:69:00:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=08e184d0e2799e087a9b20179bf228235da767f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0b:46:85:f1:06:7c:99:ac:94:da:65:aa:3e:
                    80:91:d3:6e:30:d8:43:c1:94:2a:77:fa:6a:23:62:
                    21:19:6e:38:0d:31:a2:c4:74:bd:a7:73:0e:76:08:
                    ae:a0:1c:12:3e:f6:57:a6:67:61:72:6c:d7:f5:33:
                    8c:74:d3:db:ad:44:8c:ab:b6:ef:58:15:a4:98:fc:
                    d5:37:e8:5f:aa:81:6a:53:e7:53:c9:d0:2b:42:c8:
                    5c:60:c6:f1:14:ce:f6:4e:64:17:e4:ba:44:15:73:
                    e0:7f:35:a3:d5:33:55:a2:aa:b9:a8:f9:b2:d9:b3:
                    08:68:f4:cd:a4:e0:ed:3a:48:9a:5f:8a:0e:b5:3f:
                    9a:7e:3a:18:12:df:f9:c5:86:a3:86:be:c4:41:47:
                    87:2c:5e:89:43:79:37:5b:b5:2b:d6:e6:3d:53:8e:
                    0a:40:03:aa:c7:5d:1a:11:48:f1:65:d7:ea:24:8a:
                    49:74:fd:e2:75:02:8c:2e:aa:30:ee:38:bf:72:00:
                    1a:df:c6:25:77:27:49:cb:22:c7:ad:af:25:c2:35:
                    5e:e5:bd:2f:91:e7:1c:be:d4:c0:da:c8:26:66:f6:
                    a7:fd:db:fe:92:e0:d0:61:55:7a:0d:f6:dd:fb:1f:
                    58:95:ee:58:a5:40:22:29:92:5c:9c:a8:44:ea:fb:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E1:84:D0:E2:79:9E:08:7A:9B:20:17:9B:F2:28:23:5D:A7:67:F5
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:56:38:c3:43:ba:ce:6a:0c:9b:5f:ee:cd:dc:47:8c:56:24:
         89:74:d0:e6:fd:a5:df:d1:12:f5:64:a8:c3:9b:6e:43:a8:24:
         08:56:fa:37:c6:9b:97:84:86:4e:39:30:f2:f7:84:aa:cb:a9:
         df:52:11:4a:bd:50:cf:39:8f:e7:4a:5f:8b:7a:89:cb:a9:c6:
         fe:9d:4b:63:4f:7d:76:20:fd:52:cc:da:88:23:09:e1:de:51:
         85:82:99:ea:3c:4e:03:1c:11:de:86:84:db:cd:72:2a:af:dc:
         89:1b:4c:b0:15:a0:26:ce:33:17:a8:89:4c:06:46:c9:e8:e7:
         67:a7:73:2b:4f:b5:35:51:69:c8:1a:62:e3:47:db:c1:fc:3b:
         59:49:03:8f:79:84:ec:95:01:01:fc:b0:59:85:b3:1e:34:75:
         98:f5:44:43:2a:08:e5:0d:27:44:9e:3a:78:af:5d:82:1e:5b:
         fc:37:2a:f3:f4:73:8e:39:a3:c8:2e:44:69:00:82:d7:91:f5:
         22:ea:97:21:f1:05:8b:05:d4:e7:d2:d6:78:c7:25:c5:88:f6:
         d9:ff:e1:bd:b2:eb:8f:9f:38:df:8f:f3:1a:39:c6:51:ae:15:
         e5:f0:d3:6b:d1:4e:86:ac:f6:7c:fd:40:37:42:f4:c7:fb:dc:
         a4:56:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----