Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.mft
File:                     oW8qgWKnVST_Ung_gTLDMAfaTZg.mft (raw, json)
Hash identifier:          qf4Ph9VxrigHPAZMi5ED9jmFR2+iCMo/JiBOxp3jCdU=
Subject key identifier:   60:98:05:36:2E:0C:05:D0:36:C4:8A:F6:63:C2:C2:85:C9:C6:7B:E2
Authority key identifier: A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
Certificate issuer:       /CN=a16f2a8162a75524ff52783f8132c33007da4d98
Certificate serial:       0193B9069BF3610D7449978A6A9274B75D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.mft
Manifest number:          0146
Signing time:             Thu 12 Dec 2024 04:00:38 +0000
Manifest this update:     Thu 12 Dec 2024 04:00:38 +0000
Manifest next update:     Fri 13 Dec 2024 04:00:38 +0000
Files and hashes:         1: 5X6pofiCuJYId6j0aa-sS5IwMv4.roa (hash: QkWonhSsv/FwtvWZiy0vf5+CYQsfqsQAxOn2vSi8nBE=)
                          2: LWliqhN0QNI3b_5LxBc5Md-_W6E.roa (hash: Kl3YYXUzfRK1hMikcauShr4LiePi/Ylo8Ofv5BgcJhw=)
                          3: fYpXvKMxnQmV9RSTCKlvEsNI1bE.roa (hash: KXcEmnbF+jxnypwHHNYz+IWx3aHGdM/f7I0Oi+C3j30=)
                          4: oW8qgWKnVST_Ung_gTLDMAfaTZg.crl (hash: JVfaHVMiW/R5Xh3lWPqGO4b7nZ3mF+1koLUzYZlWaWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b9:06:9b:f3:61:0d:74:49:97:8a:6a:92:74:b7:5d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16f2a8162a75524ff52783f8132c33007da4d98
        Validity
            Not Before: Dec 12 04:00:38 2024 GMT
            Not After : Dec 13 04:00:38 2024 GMT
        Subject: CN=609805362e0c05d036c48af663c2c285c9c67be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:bf:4f:b3:4f:6e:f6:a9:e3:66:5e:27:32:
                    67:ea:a1:d4:f5:13:27:e3:1c:61:95:be:5f:4a:20:
                    80:51:08:2f:e3:38:5d:c6:d3:c3:96:b0:ba:8d:28:
                    0f:96:ce:96:73:f4:49:b0:7d:79:54:d3:a3:a8:4e:
                    e0:ae:ce:e0:a5:1d:7e:d9:33:7a:0c:b2:8b:df:83:
                    9d:7a:b8:3b:3c:2a:b0:a8:26:e3:04:b5:09:4d:b5:
                    5c:ec:1f:4f:95:e9:05:94:27:7f:8e:71:f0:50:0b:
                    2f:bf:6c:60:53:d3:55:b0:45:d9:46:b1:3e:3b:db:
                    94:61:31:f5:fa:27:cd:d9:31:14:0b:a6:03:a1:bb:
                    20:5b:52:4d:2b:ca:4c:fd:ba:ba:db:61:4a:33:21:
                    b8:a9:ae:f6:0d:80:7e:5d:2d:5a:7c:88:2c:f5:7f:
                    ed:95:f5:07:fc:47:c0:d7:c1:4b:12:ef:65:0d:b4:
                    51:c7:ac:53:29:b0:f7:fa:c7:19:63:49:bc:7c:5f:
                    af:26:11:74:5f:4b:81:28:2c:9e:06:d6:86:50:90:
                    66:4e:03:4d:a0:cf:dd:90:74:44:ff:f3:2c:62:d3:
                    01:e5:52:6e:ed:b9:50:13:c4:75:ce:b2:2f:64:ec:
                    53:08:bb:be:5a:c3:d8:67:b5:71:82:38:2e:6c:bc:
                    9d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:05:36:2E:0C:05:D0:36:C4:8A:F6:63:C2:C2:85:C9:C6:7B:E2
            X509v3 Authority Key Identifier:
                keyid:A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:67:a8:cd:13:09:07:b3:7a:d8:d4:89:3e:8d:be:92:9d:11:
         51:76:5e:8d:04:a6:46:b5:17:59:07:f1:d5:e0:cb:63:d0:13:
         c6:6a:cb:8d:c4:53:62:c8:75:27:b4:56:9c:2a:4c:23:20:af:
         47:f0:80:1b:6b:72:17:58:3b:fb:db:1b:f1:71:82:5e:bd:97:
         12:71:b7:65:c0:5e:a1:0d:0c:14:58:b8:ad:73:d4:dd:6b:a0:
         09:f8:da:a8:56:5c:aa:25:01:63:0f:30:75:ee:e1:95:1e:72:
         34:58:54:11:69:e9:29:4e:1c:d1:6f:f2:58:b4:fb:5c:c1:d6:
         a9:b6:9e:1f:52:53:9f:bd:9d:f0:6b:0f:94:b4:20:bd:11:f0:
         f0:6f:48:27:cd:1d:de:f7:cb:ac:8d:24:74:94:40:13:3b:a9:
         f3:12:a5:fc:9f:83:1a:34:f6:e4:c3:7e:b7:52:fe:2f:f4:ab:
         d8:48:e7:8d:14:ba:9f:37:e8:60:75:0b:1a:f3:25:5e:03:44:
         8a:e8:9f:6c:b6:df:38:84:c1:e8:d4:75:c2:94:2f:c5:fa:4a:
         bf:46:6f:a7:be:68:d5:6f:8b:f3:17:40:8c:e8:75:9f:07:57:
         93:03:53:f5:c8:61:3f:d0:93:f7:d6:84:69:e2:0f:7c:e7:84:
         1b:e1:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----