Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File:                     flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier:          SFtSb1GV2HRuC4QOMFRT6VE9GUuVVVUJAh0U7GfA7Lo=
Subject key identifier:   0C:4F:A6:D5:4B:3C:C3:83:BB:1C:D1:C3:5E:88:3C:1E:75:13:4D:E7
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer:       /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial:       01962FAB56FEFB96BA60810ABA8013151E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: RifzfLzV9R9CzxMWstwUOLQcl/O8/ilW5eqgts7ANbE=)
                          2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
                          3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:56:fe:fb:96:ba:60:81:0a:ba:80:13:15:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=0c4fa6d54b3cc383bb1cd1c35e883c1e75134de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:2d:75:45:92:54:f5:33:61:e1:2b:12:fb:
                    d0:a6:07:8e:15:c0:4e:5f:cb:23:bf:1e:52:e7:94:
                    f9:a9:98:20:68:43:2d:0f:fb:f7:26:f9:94:d6:eb:
                    e6:a5:24:6b:fb:76:6c:db:2c:15:4b:06:e0:4c:ee:
                    1b:2c:c5:01:40:c6:58:54:08:78:0c:82:f2:22:c5:
                    15:ba:c5:67:20:57:56:c4:99:ad:c1:29:76:3b:1c:
                    5a:ef:43:f3:f1:4c:e3:77:68:1e:ef:36:27:46:78:
                    09:a7:bd:eb:a8:d5:ea:50:c3:d8:c1:19:97:e3:6d:
                    a6:f8:77:4a:7c:13:58:07:92:6b:ed:16:6a:6c:c9:
                    f1:da:ef:db:fb:01:41:75:16:fa:13:fa:33:b6:cd:
                    bd:fa:39:d3:ed:8e:42:1a:f9:f6:8b:89:0e:06:a6:
                    ab:8b:f9:bb:cd:e2:03:b6:fd:13:e8:60:c9:13:e5:
                    67:70:f3:a5:65:77:04:ee:d6:2a:41:29:3b:d6:2b:
                    cd:37:03:8a:e4:e1:e9:57:5f:c4:be:94:91:11:a0:
                    39:2c:3c:d0:64:7f:92:17:8e:96:60:24:32:8f:08:
                    09:3d:f9:14:61:d7:9e:1d:97:3e:90:97:05:2d:16:
                    da:c2:23:b8:ec:53:ca:1a:b7:76:ce:89:80:14:93:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:A6:D5:4B:3C:C3:83:BB:1C:D1:C3:5E:88:3C:1E:75:13:4D:E7
            X509v3 Authority Key Identifier:
                keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:9c:06:f7:50:a3:66:bc:10:9f:4f:0a:15:c4:dc:ea:87:
         82:16:ad:f6:f7:18:21:9d:1e:19:4b:d5:cf:92:56:78:76:da:
         59:d9:39:2a:11:ce:d4:c2:a2:b5:fe:8a:fc:e4:79:ad:8a:a5:
         94:a1:26:29:36:95:e0:ac:55:b7:44:77:63:5b:20:02:9b:dc:
         3f:b3:34:b4:1e:b1:cc:2c:b3:86:2c:cf:e9:80:4b:01:37:3f:
         ab:1f:a8:88:ce:83:0b:5a:7b:ed:49:67:2b:12:2e:59:33:df:
         9a:eb:ac:ec:b0:42:0f:1f:b4:74:7c:03:4f:6f:17:3b:80:1c:
         7b:0a:07:62:2a:9a:88:e1:47:6f:6a:a5:14:d6:2a:fd:2c:62:
         01:cf:cb:db:c9:7d:d2:9f:1b:c7:02:7a:64:ea:5c:45:58:77:
         18:4d:ce:0e:f3:2d:3e:be:a1:44:cd:a9:29:71:93:67:cf:df:
         d6:34:dd:70:ac:12:f6:78:25:22:3a:c7:b3:a0:96:08:a8:4a:
         b9:b8:bd:1e:a3:55:5f:f6:ab:11:49:20:4b:63:be:98:95:d3:
         6d:78:83:81:75:67:0b:5b:c1:46:34:33:09:84:79:54:b5:64:
         53:f9:cf:7f:df:81:b1:5b:fb:d2:88:37:a8:f4:0a:1d:25:5f:
         a6:88:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----