Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
File:                     847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json)
Hash identifier:          wiS2JPXmzGL987BfkiPo/zjHHyU+D3YTI672IyYlEnE=
Subject key identifier:   E4:7D:09:06:C6:D9:9E:E6:E5:07:19:97:AC:77:0F:9D:38:80:46:F6
Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Certificate issuer:       /CN=847138B5401830B89B52403C777718BB40B2B6B5
Certificate serial:       7977BCAB36A52B53BE62F25DE9AEFFE18257BE6B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
Manifest number:          04C2
Signing time:             Sun 13 Apr 2025 03:07:58 +0000
Manifest this update:     Sun 13 Apr 2025 03:02:58 +0000
Manifest next update:     Mon 14 Apr 2025 03:58:58 +0000
Files and hashes:         1: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=)
                          2: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: Ug9nwwu88ZYlxX5KBDME0gHUCMY5GotmAJ2mGFpkThA=)
                          3: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=)
                          4: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=)
                          5: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=)
                          6: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:77:bc:ab:36:a5:2b:53:be:62:f2:5d:e9:ae:ff:e1:82:57:be:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5
        Validity
            Not Before: Apr 13 03:02:58 2025 GMT
            Not After : Apr 14 03:58:58 2025 GMT
        Subject: CN=E47D0906C6D99EE6E5071997AC770F9D388046F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:81:2f:46:71:a4:52:7c:b9:7f:7d:06:ec:
                    ab:0c:75:da:3a:05:f6:f3:35:d9:bf:d8:a5:e8:af:
                    16:92:00:5f:7c:85:89:0d:f8:13:a3:d9:be:67:1d:
                    89:0f:43:40:f7:56:56:e5:6f:db:7c:36:b1:1f:c7:
                    3b:6b:f8:e3:4c:53:f1:f1:a6:52:17:1f:df:75:87:
                    43:a7:5d:54:01:3e:22:85:ce:c4:db:78:c4:ca:32:
                    8a:35:81:01:e1:33:9a:90:19:42:e9:0b:c1:02:b8:
                    e0:48:a2:72:ad:90:39:11:69:1d:c6:95:9b:2c:42:
                    02:9e:25:32:19:7f:4b:71:9a:34:5f:4c:2a:4a:e8:
                    a2:e8:b3:ba:5c:23:55:72:08:c7:91:ef:14:ac:dc:
                    c0:22:49:5d:95:28:f7:03:a8:30:ad:92:0a:69:cb:
                    9a:59:aa:54:1e:77:7a:78:ec:dc:cc:d5:bf:a8:ba:
                    ab:1f:c9:35:e4:4b:ed:0e:9d:0b:c0:2d:e1:77:41:
                    a3:1f:53:53:3c:a8:79:9e:ae:fd:44:3c:c0:8b:91:
                    e3:01:d0:db:b0:08:f8:7b:d1:dd:33:0d:15:09:fb:
                    be:e7:a6:17:dc:28:86:59:34:28:30:d4:44:b9:7f:
                    cc:8c:ce:93:f4:d5:70:28:4f:bf:c4:3e:09:96:de:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7D:09:06:C6:D9:9E:E6:E5:07:19:97:AC:77:0F:9D:38:80:46:F6
            X509v3 Authority Key Identifier:
                keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:de:8a:42:00:01:28:bb:70:21:d7:5f:61:39:da:27:1c:9f:
         23:27:b5:d9:91:6a:9d:8b:94:8a:a8:1b:9b:97:b5:e5:c2:e6:
         2e:e6:8b:e7:b8:18:71:23:2c:79:83:20:18:fe:9a:87:56:9d:
         f0:35:95:72:67:f8:b1:43:98:2d:90:27:54:73:69:6d:f8:39:
         e6:13:94:a0:cd:ac:42:97:57:c0:9f:91:fc:e6:75:1a:39:c9:
         8a:9b:ff:da:f2:04:07:f2:a6:2b:0d:2c:a7:a1:7c:9e:ff:7d:
         c5:3c:1a:51:8a:00:5c:0d:23:e3:14:fc:84:af:5d:a5:bf:e0:
         ba:f8:16:1c:0e:40:ce:5a:57:8f:7d:99:6f:a1:ad:d3:e2:70:
         99:c1:25:af:bf:1f:9b:a3:73:c8:5c:d3:d8:3c:2c:e7:cb:9c:
         3b:a9:6c:f3:07:72:12:d9:fa:dc:cd:71:a8:c6:49:22:02:1e:
         75:a1:e0:74:6c:3d:a5:79:cd:96:a8:bb:ae:cb:8a:ba:6f:84:
         ce:21:e9:87:70:59:05:aa:a3:e9:a3:dd:e1:95:c9:0f:50:6d:
         95:c6:5c:4b:0a:f4:7d:ce:aa:ed:86:bc:4b:f9:ce:c5:ac:03:
         43:60:63:62:20:96:d7:69:9b:bb:39:4e:bb:2b:dd:05:39:4e:
         e4:43:d9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----