Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File:                     AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier:          KkUW3BPi1u39BAAnUqmTY8niRtbkz8JuV1bYENfbYQI=
Subject key identifier:   3A:96:F9:55:AC:44:4D:F9:0F:B1:01:13:FB:75:4F:D3:7C:1E:5E:7C
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer:       /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial:       0194BCA96BAB9416223051D3C220A976E3FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number:          1136
Signing time:             Fri 31 Jan 2025 14:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:07 +0000
Files and hashes:         1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: htZrnQY0izjMzTDt38hVAsTeCre5S6YxfNdT/j44ZY4=)
                          2: yq2V4sIvuFvaoLe_dif3a50e_mc.roa (hash: bRZVRiZ8fuSs+QqdEAV2unTOx/QBFF2bKk0iFVKmz2Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:6b:ab:94:16:22:30:51:d3:c2:20:a9:76:e3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
        Validity
            Not Before: Jan 31 14:00:07 2025 GMT
            Not After : Feb  1 14:00:07 2025 GMT
        Subject: CN=3a96f955ac444df90fb10113fb754fd37c1e5e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:0f:cc:e1:1b:5c:99:d7:af:da:2a:a3:b1:
                    c5:92:a1:d1:17:ff:8b:95:80:9e:03:7e:e1:75:82:
                    95:7d:bf:e9:d6:2d:47:72:62:84:65:d9:04:95:02:
                    50:b4:ed:8e:4d:ee:ba:5b:2b:ed:46:a8:eb:ee:ec:
                    13:e1:d6:90:8f:c6:7f:d7:cc:85:24:74:ac:3a:ed:
                    ae:3b:bb:fd:bf:42:1a:56:6a:fd:fe:9c:98:ee:a2:
                    7d:05:99:54:1a:19:1a:15:10:9f:bf:77:97:57:3f:
                    3b:e9:a2:32:ee:f4:0e:37:ac:90:90:fa:b9:8e:71:
                    fe:c4:d1:6b:24:76:51:01:db:a2:ad:70:1b:d8:2e:
                    8e:a8:9c:f6:e6:e6:19:12:b5:cf:65:8c:c5:1b:a4:
                    78:44:7c:2d:eb:39:e2:d4:f9:1b:e9:61:8d:7b:b3:
                    7d:54:dd:0e:ff:17:ef:6a:1d:fc:8b:f7:27:25:56:
                    a8:2a:72:e2:eb:b9:56:a0:22:95:a2:8e:63:58:d1:
                    bb:07:3b:70:44:83:0d:34:90:c0:08:e6:34:06:37:
                    e2:5d:9d:81:37:50:36:33:09:4d:f5:5a:fd:59:b2:
                    26:a1:47:90:8e:90:58:50:24:cc:c1:d1:2a:44:2f:
                    68:64:08:60:8d:e5:f0:1a:c9:51:11:c8:aa:6f:e0:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:F9:55:AC:44:4D:F9:0F:B1:01:13:FB:75:4F:D3:7C:1E:5E:7C
            X509v3 Authority Key Identifier:
                keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:67:e2:4f:98:b4:14:84:ce:ed:0c:3f:50:6e:19:8c:59:f1:
         1f:fc:f3:f7:8c:d7:3f:5d:dc:e8:cd:33:cb:38:92:fe:b9:aa:
         14:d8:6d:f7:86:d2:9c:92:8d:5c:0e:f8:6f:cf:9a:85:92:4f:
         10:32:ee:8f:57:57:04:14:9e:a3:2b:e0:6d:2c:67:ac:f2:42:
         62:7b:07:29:a9:41:02:73:9f:74:7e:61:4e:2c:30:a6:16:94:
         df:a7:47:25:bc:37:30:5e:f7:e8:60:39:1e:7a:fa:ae:02:eb:
         ab:98:ad:7f:63:50:1d:0c:52:bd:d5:58:a3:c1:ae:8c:91:3d:
         48:05:22:2f:b9:a2:8b:ae:07:92:71:84:e0:4b:eb:00:d3:0e:
         03:d3:e5:32:46:ed:0e:7e:7e:7d:90:ac:21:25:86:cc:bc:d5:
         28:fa:28:a4:f2:88:62:84:c4:e4:08:26:be:7f:80:7b:ea:97:
         da:4d:65:41:ac:6f:1b:37:29:c4:26:4c:b6:3e:16:7f:20:8f:
         7c:01:48:f5:a6:d1:51:26:94:60:e1:3a:d9:0d:09:68:c3:a1:
         c0:85:6e:52:a8:3c:fb:3f:65:74:69:76:5c:fa:e6:9e:01:0e:
         49:c9:e6:ee:94:62:8a:5b:03:04:23:1c:17:71:60:8d:08:df:
         7c:78:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:51 2025 by rpki-client