Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          8IRqw/STzY2wBIwwVxqETEgunMPwq2KM+BEZC7arZmk=
Subject key identifier:   B5:2E:D1:4A:23:DD:AA:20:1F:3D:49:A3:65:EB:8A:E5:56:F9:5A:BA
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       13BDCC2A5BE8A4D3AFFA3877A2F29065A3C39977
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          0382
Signing time:             Sun 13 Apr 2025 09:28:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:23:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:56:36 +0000
Files and hashes:         1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=)
                          2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: Ckp9HTxxhx2EQkE4ypoAHfmExktAKgtLGCxjhsm6YwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:cc:2a:5b:e8:a4:d3:af:fa:38:77:a2:f2:90:65:a3:c3:99:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Apr 13 09:23:36 2025 GMT
            Not After : Apr 14 11:56:36 2025 GMT
        Subject: CN=B52ED14A23DDAA201F3D49A365EB8AE556F95ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:ca:ac:cd:7d:53:e7:23:2e:3b:de:cf:7d:
                    c3:34:da:7a:63:aa:25:1a:5f:99:70:72:53:1a:c6:
                    a6:ab:d3:ce:71:40:4a:38:2e:35:e9:68:ba:b3:2d:
                    a5:72:35:3e:6c:50:6c:12:cd:72:da:c7:e6:4a:c6:
                    2a:5f:f3:e3:f0:a8:fb:8a:2e:cf:61:81:22:f0:0e:
                    2c:7d:85:0c:8c:be:70:8b:d8:8a:58:fd:81:d8:73:
                    88:ac:87:ec:40:ea:c0:b8:9d:3f:d1:d0:bc:a6:09:
                    53:92:18:4e:1e:2c:ce:26:73:3b:69:f2:88:ce:7d:
                    6e:28:f6:eb:4e:c8:fe:8c:ee:49:94:5d:2d:5a:7b:
                    bb:8b:6d:c2:44:e1:e5:fd:4a:41:2c:55:07:20:01:
                    3d:4b:e8:62:f6:8a:d1:b6:77:57:a1:85:a7:ec:1d:
                    05:f2:d4:fc:3f:33:63:d2:1d:1c:12:58:47:f0:e5:
                    2f:26:35:ec:96:4a:7c:a4:3e:27:19:e2:30:38:d3:
                    08:f3:cf:92:0d:cd:73:58:93:11:31:26:4f:50:49:
                    b9:03:9f:23:7b:9d:c0:5f:33:cd:61:33:38:d0:fd:
                    2d:6a:2d:f2:42:2f:cb:a6:86:8d:e4:83:30:24:75:
                    82:02:b5:8f:0a:81:03:a6:39:df:bd:a6:be:74:05:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2E:D1:4A:23:DD:AA:20:1F:3D:49:A3:65:EB:8A:E5:56:F9:5A:BA
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:88:29:7f:02:d2:8b:8e:1b:bd:94:2a:14:d1:ec:95:51:
         64:59:5e:d1:2e:98:3f:0c:e9:86:d1:86:cd:98:f6:a6:2e:18:
         07:20:1f:65:e7:f3:6e:b4:5a:fc:a1:99:bf:68:d6:5a:6c:32:
         39:ba:de:e0:1b:87:51:a3:64:50:50:96:b3:24:c1:6a:2a:05:
         96:78:55:18:13:2e:c4:a3:1d:71:9f:04:67:f1:b7:f7:89:fa:
         4d:05:e2:ff:8d:12:8a:6a:a1:13:3f:07:66:ef:a4:fa:7c:2e:
         b8:33:64:b7:6e:ac:59:9b:42:c5:3b:cd:2b:1d:51:76:92:7c:
         90:97:a3:b5:bc:4f:57:56:a3:ff:ad:06:67:24:97:42:9f:f1:
         f2:7c:41:3f:c7:9e:cf:d6:5d:89:f2:31:eb:ef:4a:e4:41:5a:
         4b:60:21:78:e3:b2:b2:c5:24:5b:13:1f:f3:73:fc:f3:a0:9c:
         4d:0a:16:20:2c:d9:72:a7:74:f0:7b:88:15:b1:4b:55:0f:eb:
         4a:0d:dd:a7:85:e4:70:8c:31:57:0b:76:c6:3f:6b:24:10:80:
         07:06:26:7b:ae:45:e0:92:9c:28:d3:5c:77:2d:81:7f:a1:3d:
         8e:a5:65:04:c7:0e:19:9c:5d:03:40:50:3e:d2:d1:39:6b:13:
         15:62:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----