Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
File:                     fgdwhBDMdkNEuM-k8-NopeJStlA.mft (raw, json)
Hash identifier:          QcODhYbnqzP9334eehOoDFAphbYr+gz0fb+31LULzNg=
Subject key identifier:   0E:17:7C:EE:0D:9C:2F:1D:E7:99:60:58:6E:C1:EA:C4:B2:EB:3C:CB
Authority key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Certificate issuer:       /CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Certificate serial:       0199DBF20014AEE6CDDAB4C003368C652A9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
Manifest number:          0AF8
Signing time:             Mon 13 Oct 2025 05:01:34 +0000
Manifest this update:     Mon 13 Oct 2025 05:01:34 +0000
Manifest next update:     Tue 14 Oct 2025 05:01:34 +0000
Files and hashes:         1: fgdwhBDMdkNEuM-k8-NopeJStlA.crl (hash: /AZBXYW2h4uXiGq4q+T6x+ZhggsBIQCi5pTAPNAhLDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:db:f2:00:14:ae:e6:cd:da:b4:c0:03:36:8c:65:2a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
        Validity
            Not Before: Oct 13 05:01:34 2025 GMT
            Not After : Oct 14 05:01:34 2025 GMT
        Subject: CN=0e177cee0d9c2f1de79960586ec1eac4b2eb3ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:86:9b:06:d3:f7:57:b9:2c:37:e5:fd:e6:
                    f0:78:04:7c:2c:94:d8:a5:33:00:bd:01:f0:bc:b3:
                    96:f8:36:e3:ed:a1:f1:7b:a4:99:78:5c:7e:57:87:
                    3e:50:46:ee:8c:e4:25:2a:89:57:d9:f2:29:40:88:
                    f2:90:e3:ff:1d:58:60:b0:ad:51:fa:13:2b:22:67:
                    ea:26:d3:87:68:15:aa:e6:ee:25:a8:c4:97:ec:54:
                    d9:f2:12:32:08:e9:7b:23:87:17:e1:6d:af:c3:c6:
                    ba:d7:68:00:64:00:77:c5:97:da:12:d8:af:fc:db:
                    ec:ed:c5:36:92:e0:07:b1:de:52:94:c4:dc:39:bb:
                    33:4d:e6:09:d1:ba:de:34:43:9e:d5:d9:53:87:e1:
                    b7:ef:c3:a1:72:cb:be:e7:24:9a:14:3e:9b:cc:4d:
                    7a:8e:a7:2c:bb:8f:07:4a:8b:bd:e5:c8:6a:d3:c9:
                    dd:f8:3f:ba:fd:29:5e:fd:62:af:33:f6:d1:30:74:
                    f0:6c:78:53:60:c8:b5:d5:c4:86:79:62:af:cf:6b:
                    c5:93:14:d1:da:06:91:4c:c7:2a:a8:9a:e6:09:fd:
                    f3:a4:0a:34:53:14:ad:f0:33:73:6c:d1:84:d0:92:
                    b2:e0:6e:99:2f:1f:4c:2b:64:bd:f2:06:1d:bc:04:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:17:7C:EE:0D:9C:2F:1D:E7:99:60:58:6E:C1:EA:C4:B2:EB:3C:CB
            X509v3 Authority Key Identifier:
                keyid:7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:7b:43:70:f6:68:ed:1c:98:21:6b:cb:8f:8e:4e:7f:cd:
         fb:cc:a6:e9:8a:14:83:7a:11:26:30:a4:ff:a6:f4:47:ab:ab:
         fa:7e:9f:35:62:44:3a:67:d4:e0:e1:ea:2f:1c:78:20:5b:b1:
         57:1a:b3:34:f3:3b:2e:6f:f9:61:81:b4:8c:90:c2:ba:de:a0:
         e2:4a:db:89:d7:46:59:52:58:74:0a:ed:a8:37:e3:34:d1:94:
         74:da:b7:6e:0c:2a:86:e0:bd:b4:30:c1:91:bd:be:2f:08:82:
         b1:26:a1:d8:ce:9e:b4:e1:0a:ff:26:52:e8:0c:8d:74:e5:b1:
         20:b0:78:f9:16:7a:63:0d:9f:34:e3:9b:0e:33:0f:7f:bd:ec:
         a1:ec:60:18:6c:12:37:d1:ed:3c:a7:e3:1f:ba:33:c7:30:f8:
         4d:4b:5c:bf:9a:1a:0d:6c:7d:39:8f:91:46:ff:dc:4e:5f:1f:
         47:23:c9:d4:52:28:20:3a:71:61:25:77:9a:b8:f9:8d:7b:0c:
         c5:f2:47:49:f2:f1:67:73:7e:16:58:e8:94:b6:be:38:3d:af:
         58:02:70:a9:49:d3:2c:64:a4:e3:3b:70:e4:f4:79:5f:1b:68:
         a1:b4:0e:1b:cc:dd:6f:3d:98:11:6d:d1:38:6d:f0:6f:fa:18:
         af:cf:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:07:32 2025 by rpki-client