Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft
File:                     OQtnNoyRuF6EiIxe0ugk0TkIELs.mft (raw, json)
Hash identifier:          RIjZtd+jyfUPsc/zlG8K5x3JqoZgcxsHEypsViTmES4=
Subject key identifier:   27:58:22:0C:B6:9E:0F:7E:C3:D2:2A:BA:E0:3F:79:8F:1B:E7:45:BB
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       0188B9F3F2D09E8D85C40544369E7AF4E538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft
Manifest number:          0B67
Signing time:             Wed 14 Jun 2023 12:49:12 +0000
Manifest this update:     Wed 14 Jun 2023 12:49:12 +0000
Manifest next update:     Thu 15 Jun 2023 12:49:12 +0000
Files and hashes:         1: 04tQKmJxpw5a_b-EF6iBQa4WFjA.roa (hash: Vb1OcyBzNiD0apfkmXTI/tl5yZAuOUFqb49r3SLi9sQ=)
                          2: 0dbCw_00L1n0YXM_jI0qyIv7MZo.roa (hash: lkrTEDOL/DPqIrp3sgVYrhLUuH+uVrhs5a6fhRFkq4c=)
                          3: 27fNlT0tm_jfRD8dxpaMjcx7M08.roa (hash: YxDVoMwm6zM8WQwsMKjLeJA0fwwpB2fYCK9WNTxmEkI=)
                          4: 32JTJQzTsBFiJ54zVAm74pgT4rE.roa (hash: 8z3sHY/yO6nqtjFQbylfSicTAFVmZrQ+zsXRzUDlrNQ=)
                          5: 34oXijUgpx31K5aixj4ijHH9TiI.roa (hash: Yl/BD6P220qRhAvrT+W8YJ3W9i/Vm346vZMTSBqD/lo=)
                          6: 3t4znPFFXkn0J1nUf_cgvsa392c.roa (hash: yB5HX71UVjTC2r7BdPPA5Wp8YwWbJqaD7JuwPSvF66U=)
                          7: 53saNNhaQowSeDowEVQ74HKyjyo.roa (hash: cDlfIJepo8Z53efUDiycrfwpvOJk4MGWjM9kjM9jk3U=)
                          8: 5adDL3XVldEjP7DefY32EF8fQpc.roa (hash: c/GoUhGYgmb6aJrM60aAWis3g2tGn7ZtTogk5u1enk4=)
                          9: 7hM4kKR9GTFxKq7zR4PVfXiT4QM.roa (hash: E57XpSx/iGsV2VFX/hJWB3ZgXnlvu6Wgn+Ts2PlW+uo=)
                          10: 9VH2AAKE8lKgbLSrdOy8GE0YaLM.roa (hash: VOJy9ErhPk0chdRKnn/8EgS017KsnUVcynah3Y4wayY=)
                          11: 9cBTZ6HyFMEpHGbFB8UNZtDgp5s.roa (hash: 7c32CImN4DHYtwMWQlexyptYtayGYAYE4gueM9dnYAM=)
                          12: H-y3MCaJqz_Q9_4jZedv8td94JA.roa (hash: TiwvksvNmheWtF4oaxxzfkVyucUZ97ZXqRZao7LrenY=)
                          13: II-MR3mUMxrdZB3WCnolCS0GtNU.roa (hash: tsvwKd3f84MsDX9d1Hf668A5BaUZt2T4m+dCE5oQCI4=)
                          14: M6sPZoRGo34wqVGAHe8UWl-pZfE.roa (hash: xMwb4uaZe+xEcMcdYP2RnpSe/7FWjsKubBKZQzdkstY=)
                          15: MMHziuq_-7OcW2ZsPd1Lr4JNP6I.roa (hash: 9uqHtFWyBuRluDMmWScLvGWiEpgtaerQHy6tocvQRgA=)
                          16: MyOZ1quz4TkIkkgYdbteFdpqYyw.roa (hash: yUMCv9/jjrKYwZ5lBhkN8M1xFlcNtD2SiUN3DMmfwhE=)
                          17: NJmC8RwogAURTtDwbC5U7w9aIk0.roa (hash: +ewiGOWyJdY2bjVcyUWQ1hev6hY4s+9tB7YVshQniL8=)
                          18: NONhZzqq9BofDQc0BUdYsNNhs64.roa (hash: 5R/Y5HF07FB9fTR0ZiUG726p6ZqPoxVGyYSUekAL6/0=)
                          19: OQtnNoyRuF6EiIxe0ugk0TkIELs.crl (hash: 9sRlroZKPj0Lpu4z0ezbpX2sw0d230bwhLRRQ0QWCfI=)
                          20: RB0Ys2ywjB-B_A2SwIoq02zNI7w.roa (hash: HkIaoeKvjm2Raa9l8tsNnorQRdEC/ChFh/oFVMnZ/d8=)
                          21: XLDNjeWhqQl1K58OSc5KF0T9AU4.roa (hash: HGJR7yliYZeOTm1dhD29pmJWyrRnefMtZIzUqkP/jgc=)
                          22: YVhYsJEC2Uaux6hQhI5A9tPkPiM.roa (hash: kN+gpEZ6fPWFoyY2K++m9z1jWgHjtuXNHtytgigZGNw=)
                          23: ZwEb4pEKYQs9NU95hmiWfyLYwh0.roa (hash: ELBhXSVhMI10MEgf7uW6j8dqS+eQ/eURawudYHggMWQ=)
                          24: ZxlnMUMB8zCpjYFH1hRp9aAQ7iY.roa (hash: 3+wJ4QuhwtLkXxcnRPlO8WEgV881Y83q4MJggq4HZ/Y=)
                          25: c9LYsWEQIFzl6i9xmj93FkUIlJM.roa (hash: IWuzcBPRvqcOve3HuovGaCmj/Qt7vDUTBypNuDqL30w=)
                          26: hAMYFHxjrRgbBs58DwziP6q46ro.roa (hash: ubQ6f53MaEbGEKgeDS7Z8vUiOAGmsBz1W1qa7GwFo/c=)
                          27: s6GQDb_VvUssJCmnmnm0xb8DzqU.roa (hash: /0ZFD/9bXmx9Pr5Vb1kWn8xQYoGoKDdJC9SJY4dUvpY=)
                          28: y-DSBPBA4ncdPLaR5jeqt1a1Kr4.roa (hash: 05GJhPl4QkJDcSW5ASzElCcQJQufCj50d/ZHfbsu6AI=)
                          29: zywMK1glgY3VqENuTLNLW38L-Mw.roa (hash: ec4G01qCUeUSQGJ9rRoHfmS54sXPxDKvPaX9i+nOMDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:f3:f2:d0:9e:8d:85:c4:05:44:36:9e:7a:f4:e5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jun 14 12:49:12 2023 GMT
            Not After : Jun 15 12:49:12 2023 GMT
        Subject: CN=2758220cb69e0f7ec3d22abae03f798f1be745bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:3a:ae:4a:b0:96:32:05:82:92:b4:b0:5f:
                    96:a3:e7:c6:49:54:07:a9:23:6f:8b:a9:94:30:63:
                    22:1f:ad:af:cb:dd:aa:81:c4:04:6b:49:ef:83:d3:
                    3f:9a:4a:48:7d:7d:ab:98:c8:75:3d:b5:5b:c7:ae:
                    de:3c:c8:54:8a:bf:b3:2d:56:36:4f:e4:4e:2b:be:
                    db:92:74:6a:df:b7:4d:38:d5:05:23:71:2d:5a:91:
                    9f:74:53:1b:e1:b3:6a:72:76:23:d9:c6:03:63:09:
                    4d:d2:75:1e:14:e1:40:67:6b:88:67:b7:86:d2:50:
                    a4:12:33:bb:c2:87:65:e1:ea:28:9f:2f:57:6d:be:
                    1f:c6:33:fd:e3:f5:8f:5d:34:b0:e4:80:7b:b4:8b:
                    f0:3b:59:de:17:03:b7:c7:9e:32:d6:97:f8:65:49:
                    76:28:78:07:e3:f9:75:77:21:32:1a:47:46:b8:bc:
                    42:df:a4:e6:59:8a:c4:42:e3:71:01:1b:bb:01:37:
                    54:87:8a:d9:9d:12:b5:88:46:93:f2:4f:2a:62:3f:
                    19:4b:84:fa:25:7f:95:65:8b:5f:c1:f7:3a:a8:4c:
                    ba:dc:01:47:15:ca:55:12:19:a8:aa:e8:37:44:b9:
                    3f:4d:dc:a4:90:3f:1c:37:3f:3f:05:62:89:44:19:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:22:0C:B6:9E:0F:7E:C3:D2:2A:BA:E0:3F:79:8F:1B:E7:45:BB
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:f9:d2:6b:14:c3:08:18:b6:38:32:7d:18:37:7b:51:a3:
         ae:9f:0c:6d:fa:b2:23:58:b7:7b:61:09:4f:86:a0:63:48:41:
         0c:e1:d3:03:1d:34:46:3a:34:39:6a:8b:03:af:46:9b:26:6d:
         83:20:90:5d:eb:4f:f3:77:d3:2d:88:48:2a:43:82:c4:24:7d:
         6b:95:38:ce:7d:1f:5b:49:8d:0c:18:e9:70:d8:f7:47:80:b9:
         60:84:7d:03:e7:fb:a8:6e:ef:f0:30:5f:fd:d9:37:c0:22:4b:
         27:9d:66:fa:7c:69:17:b9:52:bb:64:e3:34:2c:f3:29:80:ad:
         e2:72:bb:6e:6b:db:a4:08:3c:00:79:48:a3:a2:66:1f:c0:2a:
         16:21:2d:60:99:e8:15:d7:a6:70:56:0d:02:32:ee:74:dc:dd:
         7d:3b:a8:69:2b:32:6a:e0:f5:51:9a:04:0a:5c:1a:4c:f3:ce:
         ed:7a:63:70:77:23:5d:94:d6:7f:74:f1:25:52:60:a6:42:f4:
         28:d1:11:6a:8c:4a:22:ae:28:6b:3c:cf:69:c5:a3:fd:25:95:
         37:06:df:1f:b9:00:35:a7:e6:44:7b:99:8a:38:65:6e:49:cf:
         67:27:80:f3:4e:49:7b:b7:a9:ac:d4:8e:bc:26:be:0a:7d:65:
         8e:1b:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----