Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/85kEnvkp-jb41tGw2andBxBlfNs.mft
File:                     85kEnvkp-jb41tGw2andBxBlfNs.mft (raw, json)
Hash identifier:          /E9tcJCwNj22YkznuUEv1nZFOlCPoDT51hObNrn8HHw=
Subject key identifier:   45:A6:BB:33:47:3E:39:49:8D:3B:D8:32:6E:51:F2:45:8A:64:87:C0
Authority key identifier: F3:99:04:9E:F9:29:FA:36:F8:D6:D1:B0:D9:A9:DD:07:10:65:7C:DB
Certificate issuer:       /CN=f399049ef929fa36f8d6d1b0d9a9dd0710657cdb
Certificate serial:       018B71392F1E82A453013C53C2DD96F35FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85kEnvkp-jb41tGw2andBxBlfNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/85kEnvkp-jb41tGw2andBxBlfNs.mft
Manifest number:          0865
Signing time:             Fri 27 Oct 2023 13:00:54 +0000
Manifest this update:     Fri 27 Oct 2023 13:00:54 +0000
Manifest next update:     Sat 28 Oct 2023 13:00:54 +0000
Files and hashes:         1: 85kEnvkp-jb41tGw2andBxBlfNs.crl (hash: kvS9qGNmcxRXw23X55kQtGhzIdJfYdyBUnF+8o8Bykk=)
                          2: iGmyd2krFFJnBFwOLdcvH-PD26k.roa (hash: 9BvsNF/9lHZk4Aa70to35RekBzMlzMSHb71pUeJ67G0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:71:39:2f:1e:82:a4:53:01:3c:53:c2:dd:96:f3:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f399049ef929fa36f8d6d1b0d9a9dd0710657cdb
        Validity
            Not Before: Oct 27 13:00:54 2023 GMT
            Not After : Oct 28 13:00:54 2023 GMT
        Subject: CN=45a6bb33473e39498d3bd8326e51f2458a6487c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:67:31:13:d1:fc:09:3e:c2:6c:6d:2d:67:
                    0d:f9:51:6a:20:37:46:5b:ab:32:8f:09:5c:b1:ea:
                    ee:bb:9f:3a:09:ba:0c:1f:c3:72:5d:81:e8:c8:be:
                    2c:89:03:66:aa:7b:f7:1c:62:ea:df:a5:37:27:ad:
                    43:27:71:f0:5d:f5:17:1e:9e:29:37:50:b5:18:7d:
                    1e:3b:01:c0:3b:b2:b6:d3:30:56:bc:f2:a6:2d:51:
                    42:0c:c5:af:c7:ad:b9:33:1d:d7:44:24:c0:c0:f7:
                    8f:a4:7f:7f:90:50:9f:32:fb:e7:ef:13:7e:b1:fb:
                    44:eb:e6:ba:28:3a:36:63:fa:b8:3c:80:5a:85:f5:
                    9e:52:13:2f:8c:d1:dc:3f:62:e1:57:30:37:0a:0a:
                    c3:07:7f:bb:bb:ad:dd:70:1e:31:ea:cb:94:16:8e:
                    ac:15:23:ce:39:e0:40:73:ed:5d:b0:aa:5b:3a:67:
                    c8:d7:db:58:12:b0:75:3f:1a:c7:f8:f2:b0:f8:18:
                    d3:f1:1d:d4:cb:32:aa:1f:c0:1e:85:ee:6f:61:12:
                    2d:f9:3c:1e:31:87:3f:6c:1b:46:63:5d:b6:77:91:
                    52:67:51:e6:a4:95:fb:74:a1:d2:3e:52:9a:4c:28:
                    79:a4:4b:69:28:ef:f9:c9:97:3f:fc:4c:e5:a1:6a:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:BB:33:47:3E:39:49:8D:3B:D8:32:6E:51:F2:45:8A:64:87:C0
            X509v3 Authority Key Identifier:
                keyid:F3:99:04:9E:F9:29:FA:36:F8:D6:D1:B0:D9:A9:DD:07:10:65:7C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85kEnvkp-jb41tGw2andBxBlfNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/85kEnvkp-jb41tGw2andBxBlfNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/85kEnvkp-jb41tGw2andBxBlfNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ff:e4:ca:b2:db:c6:8d:d6:96:e8:3c:18:e2:fc:81:49:84:
         98:86:1f:3a:82:6f:84:af:5a:c6:6d:4e:a4:44:7c:9e:9c:64:
         55:c2:2d:79:c8:61:6d:2b:e3:a0:96:fc:89:d2:3d:3d:7b:98:
         0a:39:aa:da:fa:71:84:77:fe:0e:bf:0c:54:82:74:73:c5:e3:
         a2:0d:d6:14:0e:54:a5:0a:e4:a2:79:3d:6a:d0:b8:3d:20:a2:
         33:ac:c4:76:ac:c8:ae:90:36:b4:2a:2f:2d:9d:3b:ce:79:1a:
         39:bc:ee:f6:a6:f0:2b:5f:91:7d:1d:b6:1b:35:3c:dc:2a:9c:
         f0:12:e4:26:02:7c:49:52:ab:f5:fa:f1:47:63:5e:69:81:0d:
         7e:2f:74:64:3a:95:4d:2f:08:fb:a5:e7:9c:49:47:04:7c:f4:
         49:9f:76:49:40:69:ef:4f:e6:a4:a3:3b:7f:71:31:8b:31:48:
         c3:b7:81:4c:0c:67:37:74:4e:14:5d:02:a7:cc:5e:1d:9d:9e:
         97:6e:40:1d:c4:d4:74:54:69:17:a6:0f:6c:3a:c5:77:ec:b4:
         40:8b:69:3d:d5:e7:94:0a:8b:61:92:ec:88:5e:32:81:14:75:
         00:35:7c:25:d0:b5:f2:08:4a:66:38:57:e2:f0:89:74:d3:9d:
         9a:62:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----