Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.mft
File:                     sr7EG9LzsXneCVFDBlML0_uscHs.mft (raw, json)
Hash identifier:          XJ6uTF2LJ/ytJhKLUMD2UDxdgLxX+c2CpqqcB2zJP2g=
Subject key identifier:   D4:5E:36:7D:E4:6B:C1:17:D4:91:52:2D:27:1B:04:68:BC:55:50:C2
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018FAA179329F793535FFF4F90571C6DC957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.mft
Manifest number:          067E
Signing time:             Fri 24 May 2024 10:13:42 +0000
Manifest this update:     Fri 24 May 2024 10:13:42 +0000
Manifest next update:     Sat 25 May 2024 10:13:42 +0000
Files and hashes:         1: JxCNKfEzPB5JMS-5rfaXBs_YAkU.roa (hash: 8RspgSyzEA/l3wzx+sUw8MSeO7gXvO1ZAABa1W3/8bU=)
                          2: sr7EG9LzsXneCVFDBlML0_uscHs.crl (hash: F71vJalbwE6qkwlFZZ/Olf9tFRCU6IfeUAOLX67J144=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:aa:17:93:29:f7:93:53:5f:ff:4f:90:57:1c:6d:c9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 24 10:13:42 2024 GMT
            Not After : May 25 10:13:42 2024 GMT
        Subject: CN=d45e367de46bc117d491522d271b0468bc5550c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:e7:cf:f6:e2:04:95:c9:fb:42:27:d2:c2:
                    01:37:f3:8a:1c:a0:a4:f5:14:52:59:24:3f:23:0f:
                    19:66:08:7e:0e:db:99:58:63:50:c8:21:22:dc:ac:
                    87:a2:e5:e1:c7:27:8b:68:0f:f7:d4:a7:b7:99:6e:
                    f6:dd:ad:36:25:08:c5:8d:d3:27:54:0c:2c:81:83:
                    6a:75:0a:b7:52:71:74:84:2d:96:49:09:8c:0a:fc:
                    4f:52:f9:ca:1b:24:de:54:68:80:46:74:c5:a5:8b:
                    59:b5:87:ac:73:12:d0:9a:08:1c:89:28:21:0c:a4:
                    58:02:8e:67:2f:b5:65:5c:f6:e4:29:3b:bc:e6:a2:
                    4b:a7:87:07:31:38:1c:dd:0b:24:76:8e:0a:c6:46:
                    e6:51:52:5f:dd:6b:3b:4e:c8:47:4c:e5:61:ae:f0:
                    61:6f:1e:4f:84:1d:d7:2b:71:77:75:6a:03:1b:a9:
                    3d:ac:ad:2f:9f:01:09:d2:66:fa:2d:32:c8:0d:06:
                    f1:c3:54:20:07:80:8a:72:ed:2c:71:99:e1:d2:07:
                    4a:4a:ce:8e:68:c4:53:0a:ea:d3:8b:2b:63:5a:a6:
                    c5:fc:55:50:55:0f:9a:80:df:c4:7f:9b:ea:ed:3c:
                    f5:ed:1d:6b:28:18:ff:8d:d9:61:72:1b:3a:45:36:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5E:36:7D:E4:6B:C1:17:D4:91:52:2D:27:1B:04:68:BC:55:50:C2
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:10:60:d9:a6:0c:89:60:ca:0d:e0:7f:4b:8f:39:c6:48:
         20:bb:70:13:a7:50:ea:b2:6d:8d:87:26:b4:9c:ae:71:5f:af:
         28:ab:5e:6f:fd:67:d2:e3:96:43:32:d2:7e:04:7e:b7:0c:40:
         2e:89:b9:9f:33:4a:b1:dc:83:66:ff:99:60:0f:8c:fd:23:a4:
         d7:a0:6d:e2:d7:e6:97:2b:6b:02:8a:7d:79:b9:5f:43:c5:0d:
         21:64:b7:f4:bc:c2:27:eb:71:15:67:1f:ec:e4:4e:ba:74:bb:
         ae:df:44:5e:98:48:cf:6d:37:58:07:bc:86:19:44:db:35:3c:
         44:f3:d6:f6:89:1f:4f:38:07:6f:4e:9f:66:12:b9:43:19:11:
         b3:5d:b5:3e:be:55:64:a7:38:30:40:61:48:8c:cb:8b:27:10:
         38:92:b4:dc:0e:0d:a7:ce:71:7b:1d:0f:6b:93:7e:d9:28:5d:
         5b:79:1d:91:9b:ca:2d:0d:dc:67:c3:21:5e:19:15:e4:5b:f4:
         ec:08:9f:6b:47:3a:d6:4c:2d:fb:ed:18:30:48:ba:3a:9c:08:
         c7:bf:b1:28:72:2b:3d:6b:74:3b:e7:6c:18:26:6f:1d:13:61:
         35:7f:9a:8f:48:39:f4:51:24:c5:db:bc:88:ad:4c:c9:14:11:
         0c:c1:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----