Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File:                     Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier:          QyY9L4ZigGadeC23yWXNaqdCcHEp+gJml9CWmTglwZQ=
Subject key identifier:   67:CF:3E:74:01:EB:75:4F:88:BB:64:E8:CF:AE:7B:65:D0:DE:A5:72
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer:       /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial:       01962E990A4E12D5862FCF66856616765825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number:          088F
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: rlyxnaic4M0G6tP3b2y2//qcUEJQAFrKavw3Iu5v/uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0a:4e:12:d5:86:2f:cf:66:85:66:16:76:58:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=67cf3e7401eb754f88bb64e8cfae7b65d0dea572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a6:66:d3:48:ae:a5:6f:9a:bf:24:9b:4e:46:
                    9b:72:4d:e5:32:28:b8:cd:04:57:61:a6:2d:b4:f2:
                    9f:a5:ce:f9:f1:f1:7f:8f:ec:ac:6b:75:5f:88:00:
                    18:b8:3b:04:b0:e1:06:a5:20:f4:10:5f:09:0c:d1:
                    0e:36:7c:a7:47:76:2b:2d:b7:33:55:10:8d:c3:28:
                    2d:8e:2f:b0:39:6b:9d:43:8e:16:54:35:f1:b1:70:
                    a3:a4:ba:e5:1d:6e:9b:94:d2:f6:65:a4:25:69:ce:
                    2c:b1:91:fc:d5:04:ab:f9:77:bd:ce:7b:a3:74:d1:
                    6d:a9:6a:be:dc:e8:15:0c:bc:d8:05:c6:a6:61:2e:
                    c9:76:88:0c:17:ce:6d:8f:4b:db:65:b6:55:0f:d4:
                    ca:54:2f:40:1c:d9:71:40:9f:51:9a:58:82:19:af:
                    9a:ad:ad:39:bb:87:70:a1:49:ba:56:52:d4:b2:5a:
                    4d:e0:6a:93:d8:ea:95:93:0a:ae:9d:56:ae:fb:98:
                    1c:bd:f5:ca:6a:a6:72:1b:33:01:fb:f2:3a:7a:b8:
                    b1:74:59:71:bb:6c:c7:e6:d9:c5:10:47:24:07:5a:
                    76:3c:ec:28:39:c1:ce:15:67:54:9c:87:bd:b2:16:
                    1e:94:35:bc:9b:0f:ec:70:dd:21:63:3f:b3:8a:76:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CF:3E:74:01:EB:75:4F:88:BB:64:E8:CF:AE:7B:65:D0:DE:A5:72
            X509v3 Authority Key Identifier:
                keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:d4:33:3d:d7:89:42:83:ec:d3:80:f0:74:6b:41:73:a1:
         26:2c:29:8e:3d:34:d5:04:26:d9:81:6c:05:cf:b5:2f:be:01:
         ac:3b:cd:26:e8:72:4b:a7:a6:64:ba:80:0d:28:d8:f3:34:3c:
         79:19:b4:8a:87:60:8f:1f:c9:2a:51:50:2c:d0:8b:3a:60:8a:
         4e:31:86:e2:cc:16:6e:71:21:a4:ff:74:d9:8b:12:b1:b8:54:
         0c:da:1d:34:21:21:bf:bd:d3:ef:ac:08:3a:e8:c7:06:d0:3c:
         49:d1:75:ef:ef:95:59:a5:4a:2d:b5:5c:4a:39:52:7a:f2:e7:
         3d:a9:60:79:c4:30:ca:18:40:54:b4:94:85:ba:db:90:73:4f:
         f0:b9:ab:d3:34:61:07:7c:ff:b2:d1:31:2a:c3:94:6d:6b:a4:
         62:9f:c5:3b:df:96:ba:73:4d:8a:35:99:a6:53:ce:b4:a6:5d:
         15:c8:1e:74:d7:08:1b:3f:89:60:8f:15:83:95:ea:6f:6f:c5:
         93:ce:17:6c:af:eb:82:11:fb:fb:4e:e6:ef:94:62:c1:cd:7d:
         55:2e:08:e8:86:6e:88:9f:23:9e:58:b3:ad:e7:b6:b6:02:89:
         99:b0:48:2d:d1:81:a5:14:78:f7:33:2d:da:2d:5e:d5:de:66:
         1a:9b:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----