Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.mft
File:                     oW8qgWKnVST_Ung_gTLDMAfaTZg.mft (raw, json)
Hash identifier:          nxrFXaQLD+2uzj80iXpILkeAmKfEp/31gz0IQVnxUI8=
Subject key identifier:   0B:CA:E8:09:17:E4:8F:47:6C:C6:E6:9C:3D:B0:14:FF:C5:1A:D8:E8
Authority key identifier: A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
Certificate issuer:       /CN=a16f2a8162a75524ff52783f8132c33007da4d98
Certificate serial:       0193471779DBA46D852FE1B7275A5D0EAE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.mft
Manifest number:          010B
Signing time:             Wed 20 Nov 2024 01:02:21 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:21 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:21 +0000
Files and hashes:         1: 5X6pofiCuJYId6j0aa-sS5IwMv4.roa (hash: QkWonhSsv/FwtvWZiy0vf5+CYQsfqsQAxOn2vSi8nBE=)
                          2: LWliqhN0QNI3b_5LxBc5Md-_W6E.roa (hash: Kl3YYXUzfRK1hMikcauShr4LiePi/Ylo8Ofv5BgcJhw=)
                          3: fYpXvKMxnQmV9RSTCKlvEsNI1bE.roa (hash: KXcEmnbF+jxnypwHHNYz+IWx3aHGdM/f7I0Oi+C3j30=)
                          4: oW8qgWKnVST_Ung_gTLDMAfaTZg.crl (hash: +Q/ovSFGG1D4r8dzElzyvzSUyrjGiUwff2LKT6S2W5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:79:db:a4:6d:85:2f:e1:b7:27:5a:5d:0e:ae:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16f2a8162a75524ff52783f8132c33007da4d98
        Validity
            Not Before: Nov 20 01:02:21 2024 GMT
            Not After : Nov 21 01:02:21 2024 GMT
        Subject: CN=0bcae80917e48f476cc6e69c3db014ffc51ad8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:02:48:f9:fa:08:dc:10:7a:79:42:3e:0c:
                    d6:54:ac:24:94:86:99:11:40:2c:6e:78:56:d7:61:
                    37:1f:a0:67:a4:d1:de:61:49:d7:16:e1:39:0a:8f:
                    4a:43:18:46:40:15:82:aa:09:32:51:df:0b:1d:6a:
                    89:d7:96:c6:52:6c:52:ef:07:a1:c3:fb:64:b5:38:
                    45:be:84:2b:56:8a:1e:c8:c0:3a:e5:47:e9:29:85:
                    dd:3b:00:a3:f8:3d:89:72:cf:1d:ce:ce:f3:9e:1b:
                    d6:f3:72:59:ca:66:56:61:41:e9:a9:6e:21:aa:a5:
                    63:47:dc:a8:86:f5:4e:7d:65:2b:8b:dd:39:44:f4:
                    20:3f:4d:0b:16:66:e9:13:49:d8:22:3b:bb:d8:a4:
                    64:18:56:14:62:06:09:61:a7:68:bf:31:0f:4b:8a:
                    86:b5:80:16:bd:aa:83:e0:eb:bb:8a:92:95:45:7f:
                    84:37:6f:8b:19:7d:ec:1c:c6:0b:2f:b7:b9:28:a7:
                    3d:e0:06:a9:7a:66:76:ee:f6:fb:a3:c4:03:fe:a0:
                    ca:62:04:9c:b3:df:9f:16:69:88:0f:6a:79:6c:fc:
                    c4:ff:53:0c:7d:df:b6:a6:23:82:48:1e:08:8e:74:
                    65:51:4f:e5:d3:03:01:60:c1:ac:44:88:db:03:a9:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CA:E8:09:17:E4:8F:47:6C:C6:E6:9C:3D:B0:14:FF:C5:1A:D8:E8
            X509v3 Authority Key Identifier:
                keyid:A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:56:83:14:f1:0f:34:16:ad:2c:81:1c:d5:9d:33:43:14:
         47:14:a9:f7:fa:a8:21:80:22:4c:03:d8:c8:15:bb:c7:f3:c2:
         47:a0:ae:3f:99:0a:e5:ac:0e:a0:19:d5:ba:48:51:54:e8:77:
         b7:46:64:0a:01:13:90:a4:c7:b3:0b:92:3b:7e:f8:44:da:40:
         7b:56:f9:61:08:fc:7e:d6:4a:ae:51:26:c3:98:99:7a:5c:81:
         48:76:26:c6:b0:fe:4b:fa:ec:e3:16:2a:6d:e6:c8:1b:79:b6:
         7d:47:87:ff:f3:45:19:11:a6:84:ad:96:31:3a:06:f9:0f:43:
         ee:91:66:f5:01:e3:02:5a:f0:00:48:e3:fd:79:74:ab:fb:aa:
         bc:a8:77:40:eb:13:cf:c1:db:bb:ab:67:1a:99:7f:12:4f:e6:
         26:59:97:10:c0:a4:a4:c6:a4:70:21:14:b0:78:ce:d5:eb:37:
         1a:10:21:75:d1:68:97:74:e1:18:db:4f:a1:ec:d7:35:5d:a1:
         9f:db:01:b5:e2:de:60:23:d6:e6:04:ae:6a:74:06:59:db:a7:
         b8:4e:4d:98:83:c7:57:50:1a:fb:9d:b5:23:c8:bd:57:89:65:
         86:08:c2:64:00:5f:28:49:4e:57:a3:37:50:d4:c0:37:8e:dc:
         80:85:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----