Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File:                     NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier:          lP3g5ONx+mtHhtvl0f5J8IEL7EvjVoT20MNsthisDPc=
Subject key identifier:   89:A5:98:D0:EA:69:A7:F2:C3:5D:C6:81:49:82:2B:76:BB:32:EC:EC
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer:       /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial:       01962F745CABBF229E6A45C2B7B07C1D3A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: M5i8has4v9PUvHU8e0sd1Zf0pG/Z9ucrytpRaYoXKO0=)
                          2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5c:ab:bf:22:9e:6a:45:c2:b7:b0:7c:1d:3a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=89a598d0ea69a7f2c35dc68149822b76bb32ecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:b2:6a:79:d6:b9:a6:a2:ce:f0:a2:0a:bf:
                    e3:89:2a:6d:a9:53:e9:67:8d:24:c4:0b:36:0e:12:
                    da:82:43:35:bf:55:9b:65:57:52:0a:d7:19:62:63:
                    e1:a9:ed:94:e5:bb:8e:00:63:7d:a2:47:9a:14:e3:
                    dd:74:84:59:fd:68:09:b9:33:e7:57:94:96:58:bc:
                    7b:8a:27:cf:56:2c:bd:42:37:ce:a0:23:d5:ee:e8:
                    6d:95:59:4b:9d:59:49:8d:f9:7d:7e:69:06:8b:7d:
                    88:68:7b:35:c7:e0:ed:63:20:aa:90:87:59:8f:f2:
                    b8:15:a2:be:3f:bf:cf:fe:a4:36:a3:f2:60:b4:8e:
                    37:b5:94:54:f3:f0:67:20:ea:56:98:9d:94:ba:d6:
                    02:bf:fa:0a:fb:b8:1f:e8:be:3b:77:23:6e:da:b8:
                    09:49:43:38:a7:04:ce:f3:33:c8:01:7a:47:09:84:
                    8b:e4:f8:23:c8:a2:67:69:28:6b:0a:8a:2c:a1:de:
                    30:b0:31:72:57:5e:c3:05:24:c2:76:9a:54:4f:89:
                    cb:71:16:14:60:7b:b5:c9:27:97:6e:03:cf:0b:e8:
                    d7:11:96:e1:05:ce:d8:af:78:0a:5c:fb:bf:7e:68:
                    7c:16:e3:50:1e:25:8d:6a:26:60:41:95:12:44:ba:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A5:98:D0:EA:69:A7:F2:C3:5D:C6:81:49:82:2B:76:BB:32:EC:EC
            X509v3 Authority Key Identifier:
                keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:bf:04:94:3e:b0:da:b1:54:0f:a9:f0:62:d2:87:cc:14:
         28:80:9d:96:34:3b:29:63:a4:0e:1f:cb:77:29:57:61:59:fd:
         cf:ca:db:85:fb:bf:ab:a2:86:45:96:e8:78:c2:3f:8c:99:d0:
         86:70:95:03:85:e8:23:bc:b9:8d:0b:f2:fe:df:73:94:5d:2d:
         ec:1e:60:45:71:21:6c:72:5d:a2:ef:43:95:47:5a:37:88:28:
         8d:d8:e3:19:43:72:e4:b6:c2:25:23:e7:74:fb:fa:fd:e3:20:
         94:b2:14:1b:2f:6e:ef:ae:bb:e3:41:7c:21:f0:77:3e:74:ed:
         80:45:aa:c2:fa:48:8c:d6:71:42:54:76:32:3e:26:b8:ce:aa:
         06:f9:23:99:84:d0:25:2a:65:45:bf:2f:5b:f7:6e:fe:dd:9e:
         be:11:fd:5d:33:e1:16:0f:7a:6b:70:7b:55:8c:fb:27:b7:39:
         31:fa:5a:7d:cf:d8:e8:da:02:73:04:04:9c:64:c5:16:77:67:
         66:c4:0b:90:4b:d0:7e:b7:b9:84:45:24:f4:b3:18:c8:5f:6c:
         04:3a:5c:13:65:61:76:57:23:1a:59:b2:48:36:cc:3c:ab:94:
         37:49:bc:29:95:88:b9:6f:8b:50:14:a7:f8:7a:69:9c:07:a9:
         69:fe:0c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFyrvyKeakXCt7B8HTqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll
NTljYzcwHhcNMjUwNDEzMTQwMTE3WhcNMjUwNDE0MTQwMTE3WjAzMTEwLwYDVQQD
Eyg4OWE1OThkMGVhNjlhN2YyYzM1ZGM2ODE0OTgyMmI3NmJiMzJlY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBSyannWuaaizvCiCr/jiSptqVPp
Z40kxAs2DhLagkM1v1WbZVdSCtcZYmPhqe2U5buOAGN9okeaFOPddIRZ/WgJuTPn
V5SWWLx7iifPViy9QjfOoCPV7uhtlVlLnVlJjfl9fmkGi32IaHs1x+DtYyCqkIdZ
j/K4FaK+P7/P/qQ2o/JgtI43tZRU8/BnIOpWmJ2UutYCv/oK+7gf6L47dyNu2rgJ
SUM4pwTO8zPIAXpHCYSL5PgjyKJnaShrCoosod4wsDFyV17DBSTCdppUT4nLcRYU
YHu1ySeXbgPPC+jXEZbhBc7Yr3gKXPu/fmh8FuNQHiWNaiZgQZUSRLrHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImlmNDqaafyw13GgUmCK3a7MuzsMB8GA1UdIwQY
MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt
NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx
LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtS/BJQ+
sNqxVA+p8GLSh8wUKICdljQ7KWOkDh/LdylXYVn9z8rbhfu/q6KGRZboeMI/jJnQ
hnCVA4XoI7y5jQvy/t9zlF0t7B5gRXEhbHJdou9DlUdaN4gojdjjGUNy5LbCJSPn
dPv6/eMglLIUGy9u766740F8IfB3PnTtgEWqwvpIjNZxQlR2Mj4muM6qBvkjmYTQ
JSplRb8vW/du/t2evhH9XTPhFg96a3B7VYz7J7c5Mfpafc/Y6NoCcwQEnGTFFndn
ZsQLkEvQfre5hEUk9LMYyF9sBDpcE2VhdlcjGlmySDbMPKuUN0m8KZWIuW+LUBSn
+HppnAepaf4MRg==
-----END CERTIFICATE-----