Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
File:                     ntj8_zGTrFO7SwfEjT3SnvWI640.mft (raw, json)
Hash identifier:          YwfkS7WnZvyT82stZtLLMtKNiYpRFf6lua3kdCAMols=
Subject key identifier:   00:10:94:61:23:85:FC:DE:3B:FF:17:71:7F:0E:2B:8D:E7:3C:C2:9F
Authority key identifier: 9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
Certificate issuer:       /CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Certificate serial:       01962E98913BBB9CDD0773B1AA5F2E58DADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: _4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa (hash: 2z2Ynum4MWOgBN264LV/zt9+ZOq8rZ9Pv93EhuMN5M8=)
                          2: ntj8_zGTrFO7SwfEjT3SnvWI640.crl (hash: 9rhWICpBfh89G9iCllgvtIscjR3G9DPWGciB28s28bY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:91:3b:bb:9c:dd:07:73:b1:aa:5f:2e:58:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=001094612385fcde3bff17717f0e2b8de73cc29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:b4:69:c9:3a:f6:91:97:dd:3f:bd:88:97:
                    cd:a0:b1:25:da:1e:40:66:cb:82:ea:e3:a2:64:a4:
                    0a:68:5b:80:24:2e:6d:06:b5:16:b2:a7:2c:48:f8:
                    8b:f4:d6:8f:ac:a1:03:55:c6:10:6d:77:ce:99:c0:
                    4d:c2:6f:d7:ac:3a:0d:88:3c:30:c9:54:22:f5:4e:
                    a4:a3:18:66:6e:85:60:19:4a:0c:bc:11:e7:07:68:
                    00:bd:4e:fb:30:bf:f6:5c:f5:6c:ab:c7:8b:cc:58:
                    d8:ae:b3:29:2b:4f:b1:05:2e:90:9a:4c:73:0f:b5:
                    fd:aa:32:2c:94:b5:2c:f7:42:51:c1:a0:05:3c:39:
                    31:be:b8:db:24:1b:d5:0b:e2:b2:30:66:a7:f9:6f:
                    4b:91:8c:56:3b:4e:77:b6:4a:d8:4d:f1:6b:7d:cd:
                    2f:9b:e0:7a:a3:5f:63:d2:94:d6:46:fb:02:10:e9:
                    28:5e:21:4e:35:08:76:88:4c:6a:24:8c:ec:25:12:
                    af:dc:a4:a2:e8:e7:f9:61:27:84:88:a2:14:84:2c:
                    29:ff:24:eb:3c:61:b9:74:41:06:b4:7f:35:e7:87:
                    c5:33:a8:88:9f:5d:f2:ec:7a:e3:f9:e5:3a:3d:ab:
                    7a:69:67:b7:bc:13:f8:7d:cd:f4:df:1f:01:ca:63:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:94:61:23:85:FC:DE:3B:FF:17:71:7F:0E:2B:8D:E7:3C:C2:9F
            X509v3 Authority Key Identifier:
                keyid:9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:d9:6a:86:d9:8d:c0:28:99:dc:52:81:c2:43:be:7c:3b:
         25:cc:89:12:d5:33:a8:0b:f5:0a:34:6b:5d:f7:ee:1f:de:3c:
         3d:02:a2:0b:b3:33:2c:69:37:00:32:8a:ff:20:3d:34:7d:44:
         07:1b:be:50:dc:7d:8c:bb:c2:3d:d7:07:e9:3b:73:47:da:dd:
         51:7b:5e:eb:2b:c2:b2:b8:9a:a6:ad:86:12:e6:51:fa:04:b0:
         91:67:a6:ff:ff:f9:10:d7:19:53:bb:aa:13:a0:86:42:fa:74:
         9a:28:55:29:c1:70:88:9c:88:0a:09:98:5b:a4:26:1d:2c:52:
         e5:ad:46:4d:3c:68:d1:e7:b3:ca:c3:47:d7:8a:04:85:a5:ee:
         07:9c:32:8b:7a:64:cf:d9:c6:2c:00:58:fc:e3:2e:c9:ac:c2:
         b4:fa:ec:b6:33:e7:42:a1:ab:f1:a9:af:bb:84:68:a9:5c:d6:
         62:da:a5:3d:7a:07:68:20:63:99:8a:a7:00:bc:2c:5a:61:29:
         8c:a5:9d:e9:ca:d9:3e:cd:df:24:4d:8c:bd:f0:83:3d:7f:77:
         7e:01:43:91:db:09:77:03:98:01:f2:2e:f4:ca:04:e7:03:17:
         a7:16:7a:b8:5b:90:95:ba:1c:cc:24:98:ac:7f:77:f7:b8:c9:
         31:f5:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----