Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/LKsN8Vf7XKBVTye2dgIxQKs9ifU.mft
File:                     LKsN8Vf7XKBVTye2dgIxQKs9ifU.mft (raw, json)
Hash identifier:          NDwup+ZH/Byz9dDUeFKQXYVuRKEbEfYsBTN4Zde8Sdk=
Subject key identifier:   CD:C4:5C:89:6B:F4:E3:BD:50:42:D7:05:53:1C:41:4E:97:08:9B:E1
Authority key identifier: 2C:AB:0D:F1:57:FB:5C:A0:55:4F:27:B6:76:02:31:40:AB:3D:89:F5
Certificate issuer:       /CN=2cab0df157fb5ca0554f27b676023140ab3d89f5
Certificate serial:       09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKsN8Vf7XKBVTye2dgIxQKs9ifU.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/LKsN8Vf7XKBVTye2dgIxQKs9ifU.mft
Manifest number:          05
Signing time:             Tue 23 Feb 2021 18:51:25 +0000
Manifest this update:     Tue 23 Feb 2021 18:51:25 +0000
Manifest next update:     Wed 24 Feb 2021 00:51:25 +0000
Files and hashes:         1: G0o9z5PzVmpolHCHU2CYFys-9iM.roa (hash: yyNlGfU0WmDBg1sQxwAog9idqnlYZb/ozaBgQkmnaxk=)
                          2: GwTa9dqLt1S5isXSNETf3Vs5qmg.roa (hash: b3fOwh4gQLz2RLi7MYxDJ1DoFqnYZIj+J3L/L9sRx30=)
                          3: LKsN8Vf7XKBVTye2dgIxQKs9ifU.crl (hash: l/wBAhSTwxqyl1MmB2Rx0LtsMW92T5nn6P+dzY6n/pI=)
                          4: POx10RxZvsD9KUROdlJw4qm4Q90.roa (hash: EJjYIEmAKeZc4HqGVHVjkE7+3sr2jNZ3u4Lgxmqcvxs=)
                          5: jbTvDinWfTT0ExsET7zU7Za7xnU.gbr (hash: zX7eJsCqAC6hMqJtNAO/Q1Bx+myTrC6pZisGdOFVszE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cab0df157fb5ca0554f27b676023140ab3d89f5
        Validity
            Not Before: Feb 23 18:51:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=CDC45C896BF4E3BD5042D705531C414E97089BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:f5:75:db:b8:40:df:1b:b6:ba:ec:41:2d:
                    3e:a8:9e:49:bf:5f:ab:d3:46:a0:44:9a:fb:63:19:
                    53:94:89:65:1d:57:bb:3b:5e:a7:58:dc:c4:3d:ce:
                    36:38:e1:d1:72:e8:44:2c:2d:43:ce:8e:fe:ba:5e:
                    89:2b:16:bf:1a:0c:f1:c0:a3:cc:36:c6:c1:fc:58:
                    f3:75:c8:89:78:4b:75:33:dd:8f:1c:ff:f1:6c:67:
                    f9:eb:05:d6:43:c5:fa:d1:8a:b2:fc:5c:72:9d:83:
                    e9:98:f1:29:81:e0:43:8e:52:e4:4c:f1:03:9e:a2:
                    d0:75:77:d8:74:86:b6:67:0d:b1:4b:0a:47:cd:98:
                    13:92:f5:22:99:85:01:09:6f:04:00:ef:93:08:d5:
                    94:5b:c6:b3:b6:04:8b:8c:82:68:c6:08:1d:11:ce:
                    36:55:69:44:28:9a:aa:a6:98:93:30:81:a2:f4:ff:
                    21:f4:d1:bf:38:0a:ac:6c:b0:6f:b4:20:eb:95:5b:
                    1c:7e:07:a5:d4:59:81:e1:87:48:23:2a:4c:19:c1:
                    8a:b2:16:c6:db:46:34:17:35:be:49:b5:ba:7e:1a:
                    3b:16:bc:ee:6b:b1:73:c4:af:ef:82:ad:6d:8d:1e:
                    da:07:e4:c9:eb:3b:38:68:b7:c5:cd:0f:ea:29:23:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C4:5C:89:6B:F4:E3:BD:50:42:D7:05:53:1C:41:4E:97:08:9B:E1
            X509v3 Authority Key Identifier:
                keyid:2C:AB:0D:F1:57:FB:5C:A0:55:4F:27:B6:76:02:31:40:AB:3D:89:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/LKsN8Vf7XKBVTye2dgIxQKs9ifU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsN8Vf7XKBVTye2dgIxQKs9ifU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/LKsN8Vf7XKBVTye2dgIxQKs9ifU.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1d:00:a5:1c:07:4a:c1:3e:35:49:c0:78:44:b4:6f:88:d8:
         3c:65:48:b9:12:97:2c:2d:7b:46:b3:b5:96:85:9a:d9:78:ab:
         ed:3f:24:a5:e8:1e:92:aa:30:c7:d8:3d:89:db:26:bb:23:50:
         ac:a3:bb:75:58:18:25:7e:88:c1:46:dd:4f:5d:bd:96:ce:77:
         47:36:59:65:03:4d:0c:6b:50:c0:72:d9:b4:28:e3:94:f9:f7:
         a8:dc:f4:cd:a5:7a:3c:f7:a9:55:42:da:96:8c:d7:68:e9:80:
         f4:c8:0b:d1:f7:3a:9d:16:0b:6e:e2:8c:d6:82:af:a7:ad:fa:
         29:bd:5d:96:71:74:88:75:9f:d3:50:f7:0d:69:95:aa:31:76:
         c4:85:64:a7:9d:89:e8:6c:00:94:b1:bd:f4:a5:4e:ca:75:ae:
         42:85:de:8a:14:18:30:62:e1:40:4b:e8:eb:67:aa:6d:db:5f:
         40:8b:d0:d6:a7:61:89:bd:ca:d6:65:d5:81:21:e6:b3:c1:05:
         14:8f:3b:00:df:00:1e:7b:66:74:1b:e6:43:7c:20:6a:5f:7d:
         63:95:8b:9b:a1:d5:24:34:90:64:b0:1c:fd:9c:dd:49:59:81:
         f0:be:45:90:0a:15:1a:aa:98:e1:22:7b:0e:d0:25:02:4e:78:
         10:78:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----