Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft
File:                     OQtnNoyRuF6EiIxe0ugk0TkIELs.mft (raw, json)
Hash identifier:          JIbWXGM5ARdvspqRAI0Wc48HnKkbVVnrtccd2GdIS3s=
Subject key identifier:   D7:76:E8:11:BF:AF:D5:A5:EE:A9:8E:78:9C:94:4D:E6:51:ED:F1:42
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       0188B83C5DB109D3FA7D70640823DF3CB8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft
Manifest number:          0B66
Signing time:             Wed 14 Jun 2023 04:49:03 +0000
Manifest this update:     Wed 14 Jun 2023 04:49:03 +0000
Manifest next update:     Thu 15 Jun 2023 04:49:03 +0000
Files and hashes:         1: 04tQKmJxpw5a_b-EF6iBQa4WFjA.roa (hash: Vb1OcyBzNiD0apfkmXTI/tl5yZAuOUFqb49r3SLi9sQ=)
                          2: 0dbCw_00L1n0YXM_jI0qyIv7MZo.roa (hash: lkrTEDOL/DPqIrp3sgVYrhLUuH+uVrhs5a6fhRFkq4c=)
                          3: 27fNlT0tm_jfRD8dxpaMjcx7M08.roa (hash: YxDVoMwm6zM8WQwsMKjLeJA0fwwpB2fYCK9WNTxmEkI=)
                          4: 32JTJQzTsBFiJ54zVAm74pgT4rE.roa (hash: 8z3sHY/yO6nqtjFQbylfSicTAFVmZrQ+zsXRzUDlrNQ=)
                          5: 34oXijUgpx31K5aixj4ijHH9TiI.roa (hash: Yl/BD6P220qRhAvrT+W8YJ3W9i/Vm346vZMTSBqD/lo=)
                          6: 3t4znPFFXkn0J1nUf_cgvsa392c.roa (hash: yB5HX71UVjTC2r7BdPPA5Wp8YwWbJqaD7JuwPSvF66U=)
                          7: 53saNNhaQowSeDowEVQ74HKyjyo.roa (hash: cDlfIJepo8Z53efUDiycrfwpvOJk4MGWjM9kjM9jk3U=)
                          8: 5adDL3XVldEjP7DefY32EF8fQpc.roa (hash: c/GoUhGYgmb6aJrM60aAWis3g2tGn7ZtTogk5u1enk4=)
                          9: 7hM4kKR9GTFxKq7zR4PVfXiT4QM.roa (hash: E57XpSx/iGsV2VFX/hJWB3ZgXnlvu6Wgn+Ts2PlW+uo=)
                          10: 9VH2AAKE8lKgbLSrdOy8GE0YaLM.roa (hash: VOJy9ErhPk0chdRKnn/8EgS017KsnUVcynah3Y4wayY=)
                          11: 9cBTZ6HyFMEpHGbFB8UNZtDgp5s.roa (hash: 7c32CImN4DHYtwMWQlexyptYtayGYAYE4gueM9dnYAM=)
                          12: H-y3MCaJqz_Q9_4jZedv8td94JA.roa (hash: TiwvksvNmheWtF4oaxxzfkVyucUZ97ZXqRZao7LrenY=)
                          13: II-MR3mUMxrdZB3WCnolCS0GtNU.roa (hash: tsvwKd3f84MsDX9d1Hf668A5BaUZt2T4m+dCE5oQCI4=)
                          14: M6sPZoRGo34wqVGAHe8UWl-pZfE.roa (hash: xMwb4uaZe+xEcMcdYP2RnpSe/7FWjsKubBKZQzdkstY=)
                          15: MMHziuq_-7OcW2ZsPd1Lr4JNP6I.roa (hash: 9uqHtFWyBuRluDMmWScLvGWiEpgtaerQHy6tocvQRgA=)
                          16: MyOZ1quz4TkIkkgYdbteFdpqYyw.roa (hash: yUMCv9/jjrKYwZ5lBhkN8M1xFlcNtD2SiUN3DMmfwhE=)
                          17: NJmC8RwogAURTtDwbC5U7w9aIk0.roa (hash: +ewiGOWyJdY2bjVcyUWQ1hev6hY4s+9tB7YVshQniL8=)
                          18: NONhZzqq9BofDQc0BUdYsNNhs64.roa (hash: 5R/Y5HF07FB9fTR0ZiUG726p6ZqPoxVGyYSUekAL6/0=)
                          19: OQtnNoyRuF6EiIxe0ugk0TkIELs.crl (hash: aI/kxe/iHCYEx3+Z/h5Kfpmq7FyPE7dAtU9ZOvMczdo=)
                          20: RB0Ys2ywjB-B_A2SwIoq02zNI7w.roa (hash: HkIaoeKvjm2Raa9l8tsNnorQRdEC/ChFh/oFVMnZ/d8=)
                          21: XLDNjeWhqQl1K58OSc5KF0T9AU4.roa (hash: HGJR7yliYZeOTm1dhD29pmJWyrRnefMtZIzUqkP/jgc=)
                          22: YVhYsJEC2Uaux6hQhI5A9tPkPiM.roa (hash: kN+gpEZ6fPWFoyY2K++m9z1jWgHjtuXNHtytgigZGNw=)
                          23: ZwEb4pEKYQs9NU95hmiWfyLYwh0.roa (hash: ELBhXSVhMI10MEgf7uW6j8dqS+eQ/eURawudYHggMWQ=)
                          24: ZxlnMUMB8zCpjYFH1hRp9aAQ7iY.roa (hash: 3+wJ4QuhwtLkXxcnRPlO8WEgV881Y83q4MJggq4HZ/Y=)
                          25: c9LYsWEQIFzl6i9xmj93FkUIlJM.roa (hash: IWuzcBPRvqcOve3HuovGaCmj/Qt7vDUTBypNuDqL30w=)
                          26: hAMYFHxjrRgbBs58DwziP6q46ro.roa (hash: ubQ6f53MaEbGEKgeDS7Z8vUiOAGmsBz1W1qa7GwFo/c=)
                          27: s6GQDb_VvUssJCmnmnm0xb8DzqU.roa (hash: /0ZFD/9bXmx9Pr5Vb1kWn8xQYoGoKDdJC9SJY4dUvpY=)
                          28: y-DSBPBA4ncdPLaR5jeqt1a1Kr4.roa (hash: 05GJhPl4QkJDcSW5ASzElCcQJQufCj50d/ZHfbsu6AI=)
                          29: zywMK1glgY3VqENuTLNLW38L-Mw.roa (hash: ec4G01qCUeUSQGJ9rRoHfmS54sXPxDKvPaX9i+nOMDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b8:3c:5d:b1:09:d3:fa:7d:70:64:08:23:df:3c:b8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jun 14 04:49:03 2023 GMT
            Not After : Jun 15 04:49:03 2023 GMT
        Subject: CN=d776e811bfafd5a5eea98e789c944de651edf142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:15:17:73:9d:a7:45:d3:44:cf:c4:d7:66:72:
                    7d:ee:3e:53:08:26:44:8d:27:81:cc:75:4d:2b:bc:
                    10:65:63:63:96:72:d3:34:fe:36:0a:ba:87:ad:9f:
                    39:2c:78:c4:0d:b7:be:11:a5:dd:cd:97:59:a5:67:
                    27:3a:cd:8f:7e:8a:53:06:26:1d:10:1c:22:33:bd:
                    97:47:a6:30:50:8e:49:90:63:65:51:6b:a5:53:b7:
                    d2:5d:29:57:cc:7e:4b:73:a6:ba:ad:07:05:2f:db:
                    a3:fd:f3:dd:24:fd:cf:d7:11:fe:89:55:68:c0:76:
                    94:ff:12:4e:ba:88:38:91:41:93:cb:10:37:f2:49:
                    00:86:10:1f:b2:08:60:cf:9f:3f:c1:76:55:e6:2d:
                    0a:a2:9e:7a:92:46:6e:f5:3e:88:4b:12:52:1a:88:
                    7b:0a:44:e4:6d:79:35:33:1f:46:bb:31:ff:cc:b2:
                    9d:c8:ba:5c:d7:55:8a:f1:ca:02:90:9d:14:28:32:
                    09:64:12:9f:70:ee:0c:09:18:0c:6e:31:99:3f:ae:
                    67:cb:7a:e7:c7:b0:ce:2a:84:04:56:a2:9d:db:ab:
                    ba:d8:11:97:1e:50:fd:dd:d8:4b:91:ba:bb:f8:e7:
                    9d:9c:f2:58:ff:27:9f:05:09:10:ec:d5:d4:07:ea:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:E8:11:BF:AF:D5:A5:EE:A9:8E:78:9C:94:4D:E6:51:ED:F1:42
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:be:83:79:2f:88:3c:58:21:0f:e5:e9:63:8b:80:08:b9:0f:
         eb:3a:7e:d0:58:15:ac:49:43:8d:2e:9f:e1:af:04:52:5d:9b:
         b2:44:d9:cc:de:4e:3d:09:61:34:16:6a:de:56:13:63:be:72:
         7d:91:87:97:95:b6:3b:6d:af:69:55:8a:de:36:44:c5:d3:af:
         be:c3:d9:a0:07:5a:bd:a7:d8:e6:3a:d3:8f:f5:84:f1:f7:b3:
         50:95:3d:ac:79:44:b6:44:77:be:1c:75:21:c0:80:68:7b:7d:
         ca:35:72:76:2a:1c:f6:af:20:ec:a4:ec:65:4a:67:4c:5c:c3:
         90:75:5a:e4:5b:8d:2f:a3:16:0a:fe:d7:5c:db:38:2c:d4:26:
         6e:fa:e8:3b:67:89:5b:21:e8:e1:28:d7:27:f1:8e:74:ad:de:
         c6:fd:8b:82:1c:64:3b:a1:05:61:a6:22:cb:bc:c8:38:e3:59:
         8b:8f:5f:e5:d6:9e:fb:b0:2a:36:aa:4c:56:d2:4b:1b:fe:d8:
         74:74:3d:9e:f5:8a:19:b5:d0:11:a3:1f:1d:d2:d8:65:85:f7:
         bb:f3:07:20:3b:b0:e6:1a:1c:e8:c9:05:d4:81:7d:56:92:53:
         00:47:8b:65:db:02:d7:53:10:79:0d:87:5c:f4:fa:bf:95:4a:
         ad:f1:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net