Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File:                     FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier:          dSM8Ard/O5x4K7ni9wIZjn0on5yd+6NX+sAAtk16PyQ=
Subject key identifier:   E9:C8:ED:58:D4:83:1B:61:FB:B4:2F:65:A5:1F:AC:88:9B:E1:A7:F7
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer:       /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial:       01962DF3D4A2E62210A632D6DF21189586AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
                          2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: 7F+kjyMBZhqGQSZPp+EO3PejttJ0XHxHNZAbKsKFJhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d4:a2:e6:22:10:a6:32:d6:df:21:18:95:86:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=e9c8ed58d4831b61fbb42f65a51fac889be1a7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:d8:0c:fe:7d:d9:51:fd:0f:18:29:93:e8:
                    28:5e:dc:b8:02:3e:52:7f:47:70:42:49:2a:57:07:
                    27:39:ee:04:ad:a9:af:96:be:1a:51:d1:ad:75:c2:
                    d5:d7:3d:46:be:81:4e:4a:74:41:9e:87:11:e0:91:
                    a9:54:c9:5e:49:9f:df:29:fc:5b:43:25:f6:2b:e5:
                    b0:ce:bb:4f:5c:14:96:7c:cd:47:08:64:26:69:ff:
                    c6:a3:6d:0c:0b:4b:a5:0c:9e:06:1f:58:c5:27:be:
                    90:55:eb:b2:2a:80:91:72:67:6f:74:e0:68:3a:0d:
                    94:68:39:8a:30:3a:27:b0:2a:e4:32:c0:af:f2:6b:
                    64:e5:06:fd:c8:80:16:b4:28:78:8c:ee:56:51:1b:
                    c8:92:6e:bb:20:f1:c7:61:4e:0e:ff:a2:8c:18:71:
                    51:72:0a:10:40:55:50:c6:71:ba:fe:fe:04:ce:d3:
                    d9:98:52:e4:bd:0a:ea:66:a5:16:9a:8c:fc:41:9b:
                    7c:e5:16:80:46:a0:a5:76:3e:ad:2e:57:59:76:88:
                    6c:5f:43:6b:75:5a:34:0d:25:51:79:83:e5:43:2e:
                    21:8e:ca:df:d3:a0:90:a6:bd:cc:bb:0a:0c:08:b5:
                    42:46:95:68:f0:6b:82:d4:3a:f6:6d:00:71:49:30:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C8:ED:58:D4:83:1B:61:FB:B4:2F:65:A5:1F:AC:88:9B:E1:A7:F7
            X509v3 Authority Key Identifier:
                keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:39:93:0a:b4:c1:d6:77:3b:cd:6c:f7:e9:76:52:a9:7d:88:
         9b:2c:da:b7:32:82:d6:5f:9e:c4:75:81:dd:68:ae:fb:c3:5a:
         4b:d6:1a:da:a6:e8:f0:50:77:d3:b2:95:09:47:13:56:48:30:
         88:61:ca:8d:1f:9f:10:d5:af:39:75:b3:6c:6d:e9:4e:71:fb:
         ef:a4:17:a9:21:8e:96:91:db:bb:db:ae:89:b1:3e:b4:f7:02:
         f0:2d:67:53:67:c4:4d:e4:f2:6d:c9:93:c6:c4:10:ca:8d:f1:
         b2:e6:4f:09:65:6e:fa:67:7a:84:30:6d:2b:dc:a3:22:c1:8d:
         8f:8a:67:84:04:ca:0c:30:33:78:a5:e5:fd:cd:e0:e0:d4:00:
         1a:d2:8d:20:ba:c1:37:c5:9f:df:da:2e:e6:c0:0e:06:0a:3f:
         2d:28:06:58:63:fe:62:05:53:4d:43:b1:94:fd:50:fe:31:2e:
         d5:68:f3:60:22:bf:4d:13:a8:4e:8d:5f:95:bf:1c:2d:ad:d1:
         4c:69:3c:31:05:7c:ce:9f:08:4f:cc:63:fa:39:b9:8b:3a:f1:
         07:d8:63:74:21:5e:8c:3b:81:6b:af:1a:d9:b0:4b:1e:51:94:
         39:6c:6a:b5:cb:c7:29:71:72:7c:6d:a8:87:40:64:af:ac:cd:
         bb:5d:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----