Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.mft
File:                     F5Sn37ooWS2SHePHkC9q9mK3ork.mft (raw, json)
Hash identifier:          mewvpFRjvUqQR0aiJdiOir1sIFH51c/F15w6INnN3Os=
Subject key identifier:   03:4C:8F:4A:59:F5:C7:A0:1E:9A:53:39:29:65:A2:E2:00:0D:F1:44
Authority key identifier: 17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
Certificate issuer:       /CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
Certificate serial:       075D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.mft
Manifest number:          075A
Signing time:             Fri 22 Dec 2023 10:48:44 +0000
Manifest this update:     Fri 22 Dec 2023 10:48:44 +0000
Manifest next update:     Fri 22 Dec 2023 16:48:44 +0000
Files and hashes:         1: F5Sn37ooWS2SHePHkC9q9mK3ork.crl (hash: XflMwAczw3j/pu4yHHtSPqgogwUDMHp8OfaN+JIfcnw=)
                          2: IaE_i9a5mxG1nDmwcvBw8l7hHD4.roa (hash: 1sJ+qPkIPqHSxg2D/NTu0sZ2YSfv22dpemHPknoaAgU=)
                          3: LD80zKFy52rSLblDw_Qv5ExKL3o.roa (hash: 8kEmB329k/ZnxPqZ9vQRCESYSgA7lLaZoh14F3OqyD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
        Validity
            Not Before: Dec 22 10:48:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=034C8F4A59F5C7A01E9A53392965A2E2000DF144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:28:eb:5e:da:40:cd:b3:66:bd:4c:94:cf:
                    86:47:57:3a:66:17:28:6e:7c:33:e9:9c:f0:35:bc:
                    64:1e:c9:7d:ba:b5:f3:12:14:74:7a:32:1c:61:64:
                    57:20:a9:b2:ed:d2:68:51:7e:51:9e:ce:5c:d4:ab:
                    36:9a:1b:42:cf:76:a9:2d:2c:25:83:d8:91:c1:9a:
                    ec:2b:36:ca:e6:06:9d:92:31:db:88:fa:18:ab:8f:
                    35:9b:62:09:b7:51:c0:be:f8:13:dd:5e:91:94:15:
                    b9:c0:e9:28:1f:82:08:55:b4:c1:a8:4b:4d:0f:e3:
                    3a:13:69:9c:e7:a7:c1:be:67:7a:b3:e8:73:01:6c:
                    1f:60:4c:bb:2c:bb:cb:0a:e7:8d:38:e7:dd:bb:71:
                    a1:08:1d:3c:1c:c4:e1:36:52:b2:f6:cf:4b:ad:e5:
                    a0:f6:b8:8e:5d:cc:7a:96:6d:86:43:3d:ab:94:79:
                    07:71:d7:37:64:00:44:ff:0c:fb:67:5f:5a:70:c7:
                    e2:28:76:60:dd:e0:55:ae:45:75:fd:53:0d:88:c5:
                    f6:41:a0:43:a4:4e:12:bd:47:d8:c9:41:79:b3:84:
                    a2:03:e2:3c:f3:6f:0c:c4:b1:ee:b5:71:63:c0:f7:
                    af:31:cb:1e:e1:57:60:a6:39:ae:5f:5a:6e:8d:dd:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4C:8F:4A:59:F5:C7:A0:1E:9A:53:39:29:65:A2:E2:00:0D:F1:44
            X509v3 Authority Key Identifier:
                keyid:17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:04:0b:69:87:b6:47:1d:e6:ce:2a:0e:5c:e5:5d:1a:9d:d1:
         be:b3:70:bf:4b:b6:10:17:b7:fa:9c:33:7c:df:8c:15:5a:8a:
         a4:c5:e8:df:ac:87:97:5b:81:3d:3f:b5:1e:91:7b:ec:f1:a5:
         7d:f0:84:6e:04:a7:5c:0a:34:cc:05:e1:f7:cc:79:de:2b:90:
         b1:ca:b6:db:70:a1:f9:f5:14:2e:c4:68:69:be:7c:69:08:56:
         40:11:69:da:cc:4c:4c:1b:ca:d0:32:19:4a:d7:86:d7:6c:d4:
         9a:c9:65:83:ec:5e:1c:ec:ee:c7:31:88:17:74:4c:08:99:23:
         14:44:45:df:b2:36:83:6f:8e:ee:9b:7d:f8:7b:dd:87:fd:94:
         fb:ef:07:97:d2:9f:ea:a3:f3:f9:4e:8b:a4:02:cb:c5:f2:8a:
         9d:26:98:45:19:52:ca:ee:12:ba:dc:b5:89:64:23:56:d1:ad:
         14:5a:e5:a0:49:1a:d2:a8:9e:3a:c1:e7:c8:28:c7:19:86:d3:
         88:56:9e:63:5a:fe:4d:8a:81:2a:70:1f:8c:26:c6:08:9b:8d:
         0e:8b:ae:de:db:b3:40:f8:19:d3:12:eb:49:15:4b:c9:85:5a:
         24:f9:df:b8:d5:ef:39:61:53:5d:c7:e7:f8:43:8f:4f:34:16:
         bf:fc:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org