Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/zooBn7OrSxAY02o0-HpWekR4pQY.mft
File:                     zooBn7OrSxAY02o0-HpWekR4pQY.mft (raw, json)
Hash identifier:          BGaVxUfCU1/kqLIbFvP1OGbM21j3uJUPzbHvPqfBIQ0=
Subject key identifier:   01:91:F7:A5:14:39:3E:4F:18:CD:27:CC:C4:60:13:7A:42:90:06:D2
Authority key identifier: CE:8A:01:9F:B3:AB:4B:10:18:D3:6A:34:F8:7A:56:7A:44:78:A5:06
Certificate issuer:       /CN=ce8a019fb3ab4b1018d36a34f87a567a4478a506
Certificate serial:       05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zooBn7OrSxAY02o0-HpWekR4pQY.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/uplift/zooBn7OrSxAY02o0-HpWekR4pQY.mft
Manifest number:          03
Signing time:             Sun 11 Feb 2024 11:49:06 +0000
Manifest this update:     Sun 11 Feb 2024 11:49:05 +0000
Manifest next update:     Sun 11 Feb 2024 17:49:05 +0000
Files and hashes:         1: 9SmCZ-8lHhCch-RzAta9RG5ZMoc.roa (hash: PsRIBf2pbDRn0FUHdJUywdpOglx1aWLH1N/sh3ByZFA=)
                          2: eWe3zYkEIw20MVZi0aS_oaOatUA.roa (hash: AncgYu/pjuBt+9wCeCIr/mbCmWQA6duUzydLqKDLfGc=)
                          3: zooBn7OrSxAY02o0-HpWekR4pQY.crl (hash: Iksgr9Merx0j92xZVt+p1rR1An43Ii38SpT6XrD365I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8a019fb3ab4b1018d36a34f87a567a4478a506
        Validity
            Not Before: Feb 11 11:49:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0191F7A514393E4F18CD27CCC460137A429006D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:73:c1:cf:6f:3e:9e:f2:5f:1a:e4:d8:e9:
                    22:85:6d:3e:a6:ba:72:bb:37:98:0a:e2:0b:2c:5b:
                    3c:21:63:f9:d8:45:e1:47:17:cd:a9:88:da:6e:f7:
                    25:5e:38:2f:7c:0c:a6:83:b2:50:60:1f:c6:ce:fb:
                    e1:a9:6f:74:eb:ed:c9:d9:c8:6e:e4:38:56:8a:c6:
                    71:41:e0:d0:eb:01:b1:4d:f5:4b:54:c2:25:93:15:
                    45:cb:29:d1:45:3f:66:cc:31:21:d2:0d:8c:67:55:
                    9a:15:05:d5:ba:cf:ba:1b:83:5a:d6:7d:70:77:ec:
                    c7:1d:cf:80:d5:9d:03:ac:a0:c9:ea:79:8a:57:88:
                    a8:5a:18:29:47:f4:da:e6:4e:ff:de:fa:c7:5e:56:
                    47:a5:79:64:88:d3:b6:1a:c5:44:ca:9c:19:be:28:
                    27:a6:9b:62:76:49:2a:8a:8d:cb:c4:11:56:cd:fc:
                    58:5b:5d:58:63:26:51:87:d2:c3:ad:08:55:31:fc:
                    2a:51:16:a5:e8:27:f0:33:30:db:d8:6d:62:40:44:
                    15:3d:5b:7c:1b:a8:c6:71:19:f5:70:e2:17:6d:87:
                    4e:50:5b:d2:02:8c:01:67:e5:cf:6f:79:00:ec:90:
                    fa:bc:1f:8a:ad:cd:77:50:d8:37:79:4e:a5:90:eb:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:F7:A5:14:39:3E:4F:18:CD:27:CC:C4:60:13:7A:42:90:06:D2
            X509v3 Authority Key Identifier:
                keyid:CE:8A:01:9F:B3:AB:4B:10:18:D3:6A:34:F8:7A:56:7A:44:78:A5:06

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/uplift/zooBn7OrSxAY02o0-HpWekR4pQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zooBn7OrSxAY02o0-HpWekR4pQY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/zooBn7OrSxAY02o0-HpWekR4pQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:4c:f3:f1:58:47:68:7c:a7:df:dc:0b:ce:3f:9e:ba:09:
         b0:95:51:47:ed:9b:14:f7:e3:2b:56:77:49:44:79:83:5c:5e:
         6f:f2:ac:20:3f:9f:dd:dd:63:b0:75:9b:d0:96:2c:f8:fa:44:
         58:f4:3e:62:b5:8a:69:2d:8e:f3:3b:01:6e:0e:d8:71:53:4c:
         50:b0:45:77:03:72:06:17:c8:66:f5:f3:fb:4a:51:49:28:cd:
         09:9c:87:2b:41:f2:db:a8:29:1c:c1:cb:f2:be:c6:62:6a:6e:
         45:a8:76:70:e1:de:b9:0c:e0:26:ce:92:3c:cc:c0:c3:28:08:
         1f:e5:e3:e1:39:3f:42:25:75:e4:42:c8:42:84:53:ac:a7:2d:
         cd:ca:2e:1c:4f:11:6a:63:af:98:7c:ce:9e:e0:c1:9a:f9:62:
         19:04:24:ba:6b:9b:34:03:23:2d:fa:d0:8f:8c:81:ee:bd:4e:
         25:04:b4:8e:de:c7:dc:6a:7d:de:07:4e:97:0a:3e:e9:31:c8:
         3a:0f:e0:7d:85:73:73:98:d7:fd:c6:5d:a3:a8:3f:bb:39:71:
         d6:9f:58:09:1f:95:e9:f3:35:bc:4c:bb:95:2d:e3:05:da:91:
         87:c8:a2:05:68:9b:84:09:38:47:38:bb:fc:3a:63:3a:d9:57:
         bf:fe:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 17:40:00 2024 by rpki-client on console-ams.rpki-client.org