Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
File:                     KrmiSem1jILhRV6yM5RVsDHn3d8.mft (raw, json)
Hash identifier:          JQX1JjoJ4o8848KYyjcfe7Qv2Uh5mMJAhD/wCtX1FG4=
Subject key identifier:   08:5C:09:CC:53:14:0E:C0:AD:13:2B:95:5D:03:81:84:73:7F:06:C8
Authority key identifier: 2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF
Certificate issuer:       /CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
Certificate serial:       01962F068724C4D21652A2C9ECE51EC0F255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: KrmiSem1jILhRV6yM5RVsDHn3d8.crl (hash: sMM7fGRX/RvvH0A1oFSX5LT9B8ln1gze6OMonndPD08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:87:24:c4:d2:16:52:a2:c9:ec:e5:1e:c0:f2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=085c09cc53140ec0ad132b955d038184737f06c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:c7:80:2c:dd:5a:44:2c:bc:65:42:e9:f6:
                    e2:52:cf:e7:13:10:31:18:2e:d0:87:c3:a0:f2:41:
                    a0:24:b5:2f:a7:e2:d0:5d:36:e4:e2:4f:e3:ff:4f:
                    5d:22:57:28:9e:82:e8:72:6e:6c:ee:25:b0:f9:17:
                    0b:d4:52:60:03:df:64:94:31:ab:d8:dc:d0:9f:8c:
                    af:d5:11:d4:e6:80:86:46:31:3f:33:cd:55:73:09:
                    5a:6f:fd:13:53:cc:d1:6e:d4:7a:02:2e:16:46:35:
                    3a:c9:1e:c4:77:dc:e8:5e:41:f3:65:61:d8:87:f2:
                    37:58:8a:9a:6b:69:51:22:68:f3:2a:96:b9:85:4f:
                    f3:c6:33:56:68:6b:66:1c:a7:72:dc:44:74:d1:3b:
                    f6:dd:40:18:7c:33:4d:f9:7d:4f:65:b5:eb:90:56:
                    33:cc:67:52:80:bb:70:a3:c6:95:77:5f:4d:12:05:
                    ca:ed:c3:7b:61:86:af:c4:48:b3:17:03:26:a0:1c:
                    8e:86:87:2f:d9:1c:38:73:65:e2:d0:8f:93:b1:a9:
                    52:e7:31:b9:82:20:4c:99:8b:00:cb:c7:d4:11:f7:
                    be:43:7c:05:b3:e8:1b:06:94:03:d2:d5:12:28:49:
                    53:04:7d:aa:b6:6b:fd:a9:b8:a0:37:7e:4f:b9:82:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5C:09:CC:53:14:0E:C0:AD:13:2B:95:5D:03:81:84:73:7F:06:C8
            X509v3 Authority Key Identifier:
                keyid:2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:25:3e:34:59:69:53:df:96:6c:ca:cd:e2:01:d4:ab:c9:b0:
         49:a3:43:e9:da:27:fa:a6:3e:19:6d:78:db:98:8d:01:34:49:
         2f:87:9d:ae:61:75:b1:bc:43:f6:72:b6:c8:e8:74:d5:36:18:
         84:f0:54:4c:35:d0:77:43:b8:33:fc:82:d7:c1:b9:52:a2:dd:
         32:50:84:7e:60:94:99:c9:56:b4:55:fa:86:74:4e:b6:53:3b:
         b1:ba:de:ff:c9:27:31:8d:6c:eb:ba:24:47:68:ff:7e:74:cb:
         8e:8d:cf:c5:be:ec:f3:bc:09:3c:f1:ed:28:ae:a8:d7:87:b0:
         e8:cc:47:37:1e:42:68:d8:38:77:89:a9:e3:4e:f8:2c:8e:f4:
         ad:f0:6e:cf:4c:e7:10:dd:ec:1c:9b:1b:31:42:e8:ab:19:4e:
         a2:39:05:24:01:08:5a:78:61:50:68:60:ff:75:40:a2:c8:51:
         54:42:b7:74:0b:8b:63:e3:71:81:0c:74:04:cb:56:f9:4b:d4:
         13:ff:13:4f:72:f2:7c:7e:d6:e6:41:81:a9:d9:ae:d6:c4:8c:
         77:71:20:79:bc:69:4b:3d:d7:a1:e3:02:77:d4:3f:a3:f2:f7:
         01:2a:b4:ad:2e:a7:9c:ba:bf:f6:ac:d1:ed:cf:7f:f5:55:ee:
         01:1d:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----