Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: YT1UKpS817XVCCM0ysW23uLzFw0nyMNt7/4yw5SRjR4=
Subject key identifier: 50:A3:72:81:8A:B9:05:D7:2E:6C:6B:2E:50:0B:D8:6A:F9:90:3D:88
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 0194BCA9968AEA3F176F89D99E9C5E09D419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 0CEA
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: iC87dXJn/sFBjAHHT2/iXi1hnRz1/ZoiNQczCZ6CGKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:96:8a:ea:3f:17:6f:89:d9:9e:9c:5e:09:d4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=50a372818ab905d72e6c6b2e500bd86af9903d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:88:3f:be:47:03:96:cc:7c:e6:d5:2b:a2:cb:
33:08:d5:9a:b3:f5:36:b7:c4:bf:53:47:72:9a:5b:
91:ba:b8:ab:c5:67:71:9d:3e:6d:57:10:19:59:9e:
02:03:b8:07:20:f2:b8:22:4c:c6:7c:92:4c:d6:d7:
ab:d9:27:d7:34:29:ca:b2:b5:38:a9:75:85:14:5e:
10:fa:74:8f:4f:d6:d1:de:49:4f:27:91:52:29:b4:
13:12:f0:7b:60:f8:75:1e:ba:0a:de:0a:5a:8a:7b:
34:95:dc:dc:7d:ce:d7:38:9b:e3:a9:93:43:db:16:
af:82:e2:ac:73:e8:b2:21:ab:5f:03:d3:fb:8f:60:
08:88:4a:d5:f9:da:7d:d7:c6:5b:d6:fa:99:b5:b3:
09:91:4e:cd:7d:20:26:c2:69:a1:39:c4:95:26:c7:
3d:51:e8:b9:eb:8a:2d:b0:78:46:3e:b8:42:d5:c6:
60:80:5a:f4:78:11:ff:e6:30:5f:81:1d:59:0f:bc:
52:56:9b:aa:89:a9:83:ed:4d:19:8f:b7:7f:99:b4:
3d:cb:7e:81:ef:07:a0:75:24:82:ef:2b:3b:76:05:
89:a4:89:6e:4d:b3:34:0d:1e:ea:12:b0:e4:f5:f9:
f1:5c:b0:61:5e:78:6a:19:03:b5:46:37:07:69:d8:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:72:81:8A:B9:05:D7:2E:6C:6B:2E:50:0B:D8:6A:F9:90:3D:88
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a6:40:32:e9:33:28:f0:23:84:bc:05:da:48:5e:94:4e:2b:
f0:dc:8e:64:51:81:62:6e:7e:2a:ff:08:62:64:2d:91:89:94:
99:c2:12:c0:c6:1f:6a:5a:21:dc:ab:55:f4:65:81:3b:db:d1:
cb:f8:9d:0b:3a:ab:8d:d3:b0:c7:7e:00:96:7d:06:05:81:55:
0c:e3:66:8d:32:d0:56:f3:f0:b4:ac:22:88:3d:08:8f:6e:c1:
93:40:c2:a9:f5:7f:ef:1b:ed:b0:30:fc:2f:7e:10:bd:e0:4b:
01:56:f2:ce:cc:29:88:06:63:ce:9c:0d:c8:5e:f2:8c:a4:0e:
db:2a:0d:20:b9:b4:f1:0f:52:7d:91:98:db:81:1a:85:4c:b8:
47:10:ad:9f:7a:34:94:6d:95:f8:b7:e5:3a:05:6b:df:a7:5e:
d2:e8:e8:cb:16:29:73:23:f5:d4:77:95:72:12:7e:81:ef:4a:
e0:e6:6b:cf:4c:bd:d8:81:6c:d7:43:7f:2d:d8:c7:54:53:17:
ed:8f:e1:ba:73:1b:88:33:a9:20:cb:cc:ff:1c:7b:57:1b:67:
59:80:ed:71:90:c8:1f:ce:22:4b:03:9a:15:37:70:c0:5e:8a:
93:7b:1b:43:3c:fa:c8:02:a6:1f:c7:3c:76:37:46:ba:72:df:
d4:1e:c1:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZaK6j8Xb4nZnpxeCdQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjUwMTMxMTQwMDE4WhcNMjUwMjAxMTQwMDE4WjAzMTEwLwYDVQQD
Eyg1MGEzNzI4MThhYjkwNWQ3MmU2YzZiMmU1MDBiZDg2YWY5OTAzZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/og/vkcDlsx85tUrosszCNWas/U2
t8S/U0dymluRurirxWdxnT5tVxAZWZ4CA7gHIPK4IkzGfJJM1ter2SfXNCnKsrU4
qXWFFF4Q+nSPT9bR3klPJ5FSKbQTEvB7YPh1HroK3gpains0ldzcfc7XOJvjqZND
2xavguKsc+iyIatfA9P7j2AIiErV+dp918Zb1vqZtbMJkU7NfSAmwmmhOcSVJsc9
Uei564otsHhGPrhC1cZggFr0eBH/5jBfgR1ZD7xSVpuqiamD7U0Zj7d/mbQ9y36B
7wegdSSC7ys7dgWJpIluTbM0DR7qErDk9fnxXLBhXnhqGQO1RjcHadhYVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCjcoGKuQXXLmxrLlAL2Gr5kD2IMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqZAMukz
KPAjhLwF2khelE4r8NyOZFGBYm5+Kv8IYmQtkYmUmcISwMYfaloh3KtV9GWBO9vR
y/idCzqrjdOwx34Aln0GBYFVDONmjTLQVvPwtKwiiD0Ij27Bk0DCqfV/7xvtsDD8
L34QveBLAVbyzswpiAZjzpwNyF7yjKQO2yoNILm08Q9SfZGY24EahUy4RxCtn3o0
lG2V+LflOgVr36de0ujoyxYpcyP11HeVchJ+ge9K4OZrz0y92IFs10N/LdjHVFMX
7Y/hunMbiDOpIMvM/xx7VxtnWYDtcZDIH84iSwOaFTdwwF6Kk3sbQzz6yAKmH8c8
djdGunLf1B7BQg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:24 2025 by rpki-client