Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          mJ4WOVqj28CaRR1HIYS8yDMgVOxxxmXn5CCvctk+prE=
Subject key identifier:   B6:63:08:5A:27:87:8A:B4:F4:C1:2D:07:08:D4:60:32:65:10:74:31
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       39B830806E3D52DBB82A60EC9F03E362B8275EAE
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          0320
Signing time:             Fri 31 Jan 2025 08:17:53 +0000
Manifest this update:     Fri 31 Jan 2025 08:12:53 +0000
Manifest next update:     Sat 01 Feb 2025 08:40:53 +0000
Files and hashes:         1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 1+lMdnjYdbL4iWHh6STKSM8k3Z78ot5HK73iYhaXx98=)
                          2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: O9Z/l6VbTUtulDD27Jy8OxH7UlOkm/2dLWrg2mfSBTI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b8:30:80:6e:3d:52:db:b8:2a:60:ec:9f:03:e3:62:b8:27:5e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Jan 31 08:12:53 2025 GMT
            Not After : Feb  1 08:40:53 2025 GMT
        Subject: CN=B663085A27878AB4F4C12D0708D4603265107431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:ec:9d:ac:31:20:85:a2:27:de:c1:3f:16:
                    ed:15:8d:3c:e6:2e:a5:61:0d:6a:87:42:b7:d3:1d:
                    a0:95:33:bb:2e:50:16:3f:c9:92:1b:54:32:05:c0:
                    a4:1d:3c:76:b1:cf:45:da:cc:f4:b4:e3:31:3d:63:
                    94:f4:eb:e9:c8:c5:2d:c8:b3:2c:a0:9b:7a:4a:41:
                    78:ac:86:dc:a6:dd:a3:db:b0:09:8c:38:e0:00:a0:
                    e9:68:bf:19:59:0f:9c:10:cd:20:24:ca:ad:ec:d9:
                    26:da:7a:9c:cf:31:78:d5:6c:55:94:6a:f5:97:de:
                    bb:d0:08:cd:52:e4:fd:e7:99:62:50:27:ae:99:65:
                    24:79:5f:f2:91:69:a0:f3:83:d2:4e:88:fd:a7:a7:
                    35:40:db:be:8c:b6:03:90:c9:77:60:70:44:4e:48:
                    40:d2:28:e4:68:71:56:b5:9e:cf:6a:f0:b0:02:51:
                    fd:7c:10:21:2c:57:92:a7:31:4c:43:fe:cc:bd:d6:
                    d9:e5:88:c8:41:70:53:15:43:d9:11:d2:6a:a8:14:
                    01:07:17:1f:47:4c:44:d7:18:35:7f:03:b3:84:95:
                    33:49:e2:d2:9a:76:7b:85:88:1b:7a:a5:c2:23:99:
                    22:a3:dc:94:7d:fc:14:81:0d:24:cd:fe:45:e6:0a:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:08:5A:27:87:8A:B4:F4:C1:2D:07:08:D4:60:32:65:10:74:31
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:2f:fe:68:10:51:09:3c:06:c6:51:e0:40:d5:20:3a:93:0a:
         fe:c3:2c:9d:83:19:50:72:a7:8b:f9:6e:fe:3f:7c:fd:c8:8f:
         71:d4:5e:7c:84:e1:b5:8c:d0:55:f0:f5:5e:67:c6:53:ce:bd:
         a5:e5:26:bf:77:7a:c9:f0:51:ca:1d:65:b0:b5:fe:bb:e4:50:
         31:f9:ef:dc:1a:54:74:a8:7b:18:b9:6e:8f:3c:5a:e1:27:66:
         49:ac:f9:e5:22:3f:d0:e8:b6:7e:f3:c3:43:3b:d9:22:ca:e1:
         ef:f6:d9:f5:30:5a:77:d3:8b:26:3f:e9:d7:41:21:79:35:80:
         db:99:c2:d8:e5:f5:f6:7b:ac:cb:27:fc:df:57:b1:30:fc:72:
         6a:27:0c:99:64:a3:a1:32:23:69:c8:8c:f8:21:84:59:76:9c:
         af:04:1f:e7:f1:84:73:7e:44:aa:7a:8b:63:a7:ac:b4:f2:d9:
         a3:aa:e4:1e:72:1e:18:cf:51:c8:20:74:36:13:1b:fd:4a:ba:
         a3:f6:72:63:28:05:d9:06:d7:46:a9:bb:fa:88:80:70:bb:a7:
         79:e0:12:19:b8:4c:4c:10:a1:18:e5:4a:fc:3b:a4:ff:a2:dc:
         0a:e3:d8:b5:c1:e0:fb:5b:b6:aa:79:1d:41:73:da:43:fb:03:
         9b:86:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:22:12 2025 by rpki-client