Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File:                     az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier:          eHaYc0quQhR3MDT10qYGS7SEqVkW8WdsW9vvYLh9daM=
Subject key identifier:   04:7F:60:F6:DA:02:F1:71:4E:FC:8D:0A:89:5D:04:1E:C8:16:35:7F
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer:       /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial:       01962F06C69E74639F57A9D0E967DA211D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number:          143A
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: oUqzviC0kn57coJNKGm31eeBDLcIQ1+bACgMuVlVjK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:9e:74:63:9f:57:a9:d0:e9:67:da:21:1d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=047f60f6da02f1714efc8d0a895d041ec816357f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:fa:2c:d7:10:0e:d5:37:22:ed:62:c1:b1:
                    29:92:1b:23:5b:3a:ca:06:c7:a4:66:c4:0c:f9:2e:
                    29:d8:64:02:bb:d7:df:ac:75:02:56:bd:ed:92:16:
                    a8:15:96:a4:d9:45:7a:ac:28:24:a2:e4:99:3b:d9:
                    49:7f:30:eb:82:c0:67:85:74:a1:25:94:cd:ea:3e:
                    d5:ca:08:71:99:bf:4d:3a:b5:20:15:50:ac:dc:18:
                    4e:b8:4f:1b:90:a8:6f:8d:25:c8:13:16:4f:f2:3b:
                    31:54:41:07:19:91:77:c2:12:5b:24:93:c5:7e:66:
                    52:e8:64:26:20:f8:fc:d1:16:f6:d8:27:4e:25:52:
                    32:f7:de:03:56:c3:ad:90:0d:c1:60:d5:4e:1e:83:
                    d0:ae:79:b2:63:5f:c8:f3:d4:11:b3:3b:90:42:5a:
                    e4:97:97:7e:21:3b:ff:8c:21:9c:62:95:73:ed:f9:
                    b8:2a:a8:9e:b4:42:9a:97:7b:cf:e6:90:68:bd:fc:
                    c8:e7:40:04:d9:1a:ad:1a:7a:e7:5d:06:b2:7e:d2:
                    b6:96:3d:50:99:3e:0a:cc:1d:7a:2b:2a:13:88:b7:
                    21:5c:fe:41:60:be:af:05:d2:a8:ec:e5:cd:e2:8d:
                    6b:4a:bc:50:e5:18:33:ed:19:32:ab:26:f9:9d:74:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7F:60:F6:DA:02:F1:71:4E:FC:8D:0A:89:5D:04:1E:C8:16:35:7F
            X509v3 Authority Key Identifier:
                keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:e3:e2:3c:23:1b:e9:d4:3e:b0:ba:da:c5:57:d1:30:f2:
         db:63:eb:ae:a9:96:88:15:2e:98:86:82:df:2c:c9:d4:3a:c5:
         ee:1f:71:83:a6:47:fb:f7:4e:26:ba:b8:da:8d:6c:ce:5d:9d:
         73:13:14:d7:a2:f2:bc:48:bc:03:a6:7a:91:41:bb:dd:e2:06:
         e2:44:94:03:0e:7b:d5:b6:5a:96:54:d3:64:f8:95:e8:a6:47:
         be:d1:8c:d6:c0:ff:0c:c6:c0:38:58:73:53:1f:19:5b:93:f0:
         00:7a:5a:f9:b1:48:75:f5:f4:e1:f1:6b:75:ed:2b:dd:f7:c4:
         6b:84:6b:6e:6f:0d:cf:3d:62:45:69:c2:25:62:58:76:a2:b0:
         ca:f0:e5:84:0d:6b:28:37:ca:97:29:c4:79:16:8c:17:fa:0d:
         d4:ad:58:0b:ae:91:3b:df:b7:3f:64:12:9c:97:5a:2d:ce:6d:
         a8:d5:74:1c:26:0e:5d:28:23:c1:10:13:9b:11:5b:80:e5:42:
         62:5c:d8:14:34:7c:4f:94:12:c9:85:9a:1c:69:e7:bf:d8:f8:
         02:f7:3e:35:95:fc:c4:9c:7b:fe:23:ad:b6:c1:b1:30:15:61:
         36:4b:23:4d:70:02:dc:f7:1f:cb:c4:0b:bc:60:6c:98:39:5a:
         6a:88:73:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsaedGOfV6nQ6WfaIR10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0
ZjNkZGMwHhcNMjUwNDEzMTIwMTM1WhcNMjUwNDE0MTIwMTM1WjAzMTEwLwYDVQQD
EygwNDdmNjBmNmRhMDJmMTcxNGVmYzhkMGE4OTVkMDQxZWM4MTYzNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lP6LNcQDtU3Iu1iwbEpkhsjWzrK
BsekZsQM+S4p2GQCu9ffrHUCVr3tkhaoFZak2UV6rCgkouSZO9lJfzDrgsBnhXSh
JZTN6j7Vyghxmb9NOrUgFVCs3BhOuE8bkKhvjSXIExZP8jsxVEEHGZF3whJbJJPF
fmZS6GQmIPj80Rb22CdOJVIy994DVsOtkA3BYNVOHoPQrnmyY1/I89QRszuQQlrk
l5d+ITv/jCGcYpVz7fm4KqietEKal3vP5pBovfzI50AE2RqtGnrnXQayftK2lj1Q
mT4KzB16KyoTiLchXP5BYL6vBdKo7OXN4o1rSrxQ5Rgz7Rkyqyb5nXSR5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR/YPbaAvFxTvyNColdBB7IFjV/MB8GA1UdIwQY
MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt
OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm
LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvnj4jwj
G+nUPrC62sVX0TDy22PrrqmWiBUumIaC3yzJ1DrF7h9xg6ZH+/dOJrq42o1szl2d
cxMU16LyvEi8A6Z6kUG73eIG4kSUAw571bZallTTZPiV6KZHvtGM1sD/DMbAOFhz
Ux8ZW5PwAHpa+bFIdfX04fFrde0r3ffEa4Rrbm8Nzz1iRWnCJWJYdqKwyvDlhA1r
KDfKlynEeRaMF/oN1K1YC66RO9+3P2QSnJdaLc5tqNV0HCYOXSgjwRATmxFbgOVC
YlzYFDR8T5QSyYWaHGnnv9j4Avc+NZX8xJx7/iOttsGxMBVhNksjTXAC3Pcfy8QL
vGBsmDlaaohzeA==
-----END CERTIFICATE-----