Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          Mw2NbtAm+Kz+OjzlUDoZccKECaJcoEkLze2lrHXTTZ0=
Subject key identifier:   1A:11:CC:D8:37:72:62:18:70:EE:82:39:3B:BF:7E:2E:D7:4D:A5:E4
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       0195E190035DA8FAD44FFB8301E7AFC95853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          8B
Signing time:             Sat 29 Mar 2025 11:01:06 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:06 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:06 +0000
Files and hashes:         1: 1-nvTmfsGDKxN0Jc6TGbgXpDcqEw.roa (hash: gerCFxMGJhosjPPDpeT4WiZ2sY0YZspC4pma/+pnEY8=)
                          2: 1erCGEwwvuyXHF-XH5pLlXI19Xk.roa (hash: MqLD+eDF7X/w8GA0kSIbExfwynRJ90zAvTLg+8DzTHY=)
                          3: 5QubX3BsIOZmCr0lJWaWo_8taiI.roa (hash: Jf6CPMuS9TJ6fnoWKDQrgx5dNf/KjdcmveH/bpaz+Q8=)
                          4: 5wgkb4akqadzyJiHHieQcGtBNQQ.roa (hash: Di0bLzyl/Q3bCbGW5CHLC9W0TftfUiAh6aTSXzT7nug=)
                          5: 8Mnd-aabYi6gxcB8hByuplHiy3A.roa (hash: F5z3FeGBQAj6Qn9az/QGh8jfuMxcSrHf1y24nKzQ4ls=)
                          6: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=)
                          7: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: Y0pkGaXChQQV3MQb/USrivgQZ9jjbOIjM0NV/y84+ck=)
                          8: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=)
                          9: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=)
                          10: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=)
                          11: FX3UzX2cO5ERnTlsaAL3sjb5pqM.roa (hash: sf856XhluVLLaFcW6LL5qwxltKysuWcuVyaabODyAaA=)
                          12: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=)
                          13: QQ5JdZdcsAoWOsN0lcNfuSR1KXU.roa (hash: mOHdApB4PLrH4OsyY1d2WJlEAql5oBZn7Z/33FYWd/s=)
                          14: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=)
                          15: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=)
                          16: aVKFK0wz2sjp4oIHJ7bvgpmj5Ps.roa (hash: jYANj7lFuepk7MCeJ3sdnqsFL066bddW6pmGrkgE2G0=)
                          17: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=)
                          18: du1wumr7xYGJbc7K9EGp_C8KghQ.roa (hash: 9MrBUWrUA1+He9qgQ6KOaw7pAUr3HTlALJK0R8ucEhc=)
                          19: eAO9SMGOXJTy0KC68qvLydBHGGg.roa (hash: ZDtAk7aLVybRZS26TFypN3xxPIz041mxKe2dCr1iPdw=)
                          20: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=)
                          21: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=)
                          22: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=)
                          23: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=)
                          24: sEeMx7Xy6olm8O3Hb7-nIWkl8X8.roa (hash: 1kTUQGyENj5OE2dLqf3kwETU6u1mEMcH0DOZizfo6zI=)
                          25: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=)
                          26: zUj5rZ7lUDzlpIezHL1nBDeB21I.roa (hash: Un3pGpZRDSoKyLL0MzWtYyOcI00H8KCqWCE5WBBFhqQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:03:5d:a8:fa:d4:4f:fb:83:01:e7:af:c9:58:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Mar 29 11:01:06 2025 GMT
            Not After : Mar 30 11:01:06 2025 GMT
        Subject: CN=1a11ccd83772621870ee82393bbf7e2ed74da5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:37:2f:70:33:8f:ba:28:b9:d3:96:4b:81:
                    d9:a1:b2:eb:b7:d8:95:7a:bb:a9:57:af:d8:ff:23:
                    2b:74:17:9c:b4:b0:29:79:62:2c:6c:d7:25:dd:7d:
                    0c:27:50:c3:19:1a:8a:c3:2a:25:2e:16:64:0b:e4:
                    b7:f9:75:be:15:cf:0a:91:df:7e:91:7a:5e:9b:5a:
                    83:a1:f3:7f:f7:81:7a:36:6f:52:30:4c:13:bc:82:
                    7c:02:65:89:99:3c:b5:f8:94:22:f6:83:01:5d:5b:
                    30:27:2b:b2:52:32:15:9b:a3:7a:60:bd:15:8c:5b:
                    1e:31:70:fe:0f:62:1b:c4:6b:3c:22:5e:93:02:10:
                    f2:a0:44:8b:e5:54:c9:3e:c3:16:17:09:2e:3d:64:
                    a0:c0:72:b3:ca:fe:55:d5:83:6b:d0:df:56:7e:11:
                    43:70:64:a4:ee:49:31:79:c8:90:7c:0d:a7:20:e0:
                    22:ed:60:c8:6f:42:52:2c:a2:2f:c0:ef:55:40:ba:
                    d8:6a:fa:9c:2c:af:b1:b1:a7:85:cf:c8:87:e2:91:
                    21:c5:12:27:86:7a:63:85:83:ff:4c:14:60:c0:5d:
                    9e:6f:b9:11:63:ce:2e:f3:bb:6d:80:d8:43:17:67:
                    1f:aa:9e:ab:e0:91:19:50:25:f9:9b:d2:70:e5:b6:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:CC:D8:37:72:62:18:70:EE:82:39:3B:BF:7E:2E:D7:4D:A5:E4
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:06:61:4b:7f:0d:5a:7b:81:cf:b3:b9:c8:2f:db:ee:37:45:
         39:af:1b:8b:5d:85:1d:a3:fc:67:6e:8d:4d:32:f8:91:75:74:
         81:dc:e9:90:05:00:16:cf:d1:21:90:10:2f:f1:9a:4c:81:02:
         d9:fd:8a:5f:90:09:f5:b5:28:88:ca:4f:38:db:17:ac:d4:60:
         bf:6a:11:74:f7:71:c6:92:0f:5f:ca:80:6c:ab:6a:20:63:6a:
         9c:0d:47:ce:13:db:5b:92:d1:b0:87:da:17:a2:98:76:3e:b8:
         cb:e4:10:a5:bb:2a:6b:17:2e:6e:8c:7d:57:f5:4a:a8:7c:1c:
         ee:90:d9:68:35:11:41:6e:05:72:22:c6:7e:d5:fc:3f:30:bd:
         60:0e:82:50:14:f0:ef:1d:4b:9b:c6:9a:9c:e2:41:14:af:44:
         a8:85:43:3a:0e:8f:9e:04:75:c7:b0:e6:0e:39:5a:a9:de:9f:
         12:fc:e6:40:13:0f:06:09:15:d8:5f:73:30:a7:6d:21:53:27:
         48:aa:0f:29:48:5e:38:87:e5:86:42:48:2b:fa:48:7f:eb:c3:
         a4:60:84:64:10:c7:37:0d:13:24:24:c2:2a:db:dd:a9:4c:f8:
         cb:66:6f:21:71:38:6f:92:17:8d:74:c5:69:b6:12:28:d2:5a:
         97:18:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----