Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.mft
File:                     OOFPkv3HzPv8GCNhUjrifWl-lS8.mft (raw, json)
Hash identifier:          o9mbDv++rHzmqyYkKYmas6BTeIXjsJ9ZBMEVM1W2gVM=
Subject key identifier:   6B:F9:B9:95:64:CA:55:F7:23:48:BF:63:6B:0B:55:41:D5:66:9F:F7
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Certificate issuer:       /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial:       BBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.mft
Manifest number:          B7B2
Signing time:             Fri 04 Nov 2022 11:17:57 +0000
Manifest this update:     Fri 04 Nov 2022 11:17:57 +0000
Manifest next update:     Fri 04 Nov 2022 17:17:57 +0000
Files and hashes:         1: G0x3_Kuz6jvSUMCrjrDMz1UYsIY.roa (hash: yKgQiWIgzJ7qhhxgCCWo9OEj4XaeyQMfSuo4JNaR8mA=)
                          2: OOFPkv3HzPv8GCNhUjrifWl-lS8.crl (hash: jSCyhMcJ4gqrGDGQq2LO6MZexJSGezhj6dacpW7DTyQ=)
                          3: XUJQ4tgdREjYop786R0p_wdeyeI.cer (hash: sMTKa0xoD1jau2fF84qEfmtWgp/aXkLz+nKDb0ya/38=)
                          4: o9lkJFdJu23Vqx8ugw4zpsUUbo8.roa (hash: E6+60J7VmzFe/Yci04sJ/QKWLjduTe8yJH+d6QVkm0c=)
                          5: voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (hash: zoHLGdLDyxA2/z8yMXVxHkjFqJZlD9BsI5Qv1NedWkE=)
                          6: vsTalZ8EnbgoVldqPInrA8hnRuo.gbr (hash: 2pt6v3lmGrhG3drQEqjxkmp8NudIIzORorY5oXAOMIc=)
                          7: zSKNuj37TkGQfPQ_nBDQwkfAF5A.roa (hash: m5SIZ9ehyU5cjXh0WDSNLxPyZOAztGvMckKM0uR2Kho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48049 (0xbbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
        Validity
            Not Before: Nov  4 11:17:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6BF9B99564CA55F72348BF636B0B5541D5669FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:b4:03:b1:61:cb:04:d6:cb:e6:49:e1:88:
                    24:0f:6b:37:5f:bf:c4:5d:9d:ee:a2:f7:f1:c3:36:
                    e4:16:12:8c:ac:06:86:56:8e:db:3a:48:c4:b3:5a:
                    c1:2e:65:94:90:88:56:c5:d9:99:cb:c0:99:4d:fb:
                    85:b6:8a:b9:9b:58:14:50:8a:07:3e:7a:a0:5c:a8:
                    6e:08:f7:99:c1:6f:c7:b6:d2:9e:17:78:3b:06:1e:
                    1c:cd:43:15:4e:77:b4:c0:da:b0:0e:db:bb:90:cb:
                    4e:1a:ba:13:0a:6c:c6:a6:ae:29:54:e1:35:0a:96:
                    76:58:7c:7e:c0:20:74:d3:53:ce:f7:9c:0a:71:c4:
                    0d:5a:8c:a4:b6:af:f1:b4:63:27:ec:ed:0a:e2:02:
                    9c:a6:29:80:61:8b:f6:62:91:89:7e:f2:76:55:17:
                    0d:5a:ff:7c:38:7e:e1:78:f8:2f:d7:3a:95:31:87:
                    27:f7:c5:57:58:9b:c1:cc:a6:b5:a2:a2:1e:02:7f:
                    27:84:0a:21:e6:00:c8:e0:d4:67:3a:cc:35:c5:51:
                    1a:09:2b:a4:fc:b1:d3:c8:0c:52:75:33:4f:2c:30:
                    3b:0b:1c:1e:a0:f0:a9:d8:67:ff:9c:e2:ab:02:84:
                    2f:90:af:33:1d:1d:81:42:ca:26:c6:da:38:e6:0b:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:B9:95:64:CA:55:F7:23:48:BF:63:6B:0B:55:41:D5:66:9F:F7
            X509v3 Authority Key Identifier:
                keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:16:f6:82:d4:5e:83:7f:34:16:5c:dd:89:c2:4d:14:3f:54:
         04:38:06:12:25:84:cf:a4:9c:bc:ef:66:af:04:f9:f8:aa:83:
         9f:b3:f4:33:ef:6d:b4:a5:31:9d:1e:3c:cb:8b:94:68:21:6e:
         1e:9b:a0:2a:7d:7f:50:47:f6:33:c9:f8:20:6a:94:99:67:91:
         cf:c0:c3:19:5a:c4:bb:6a:7e:a8:12:b1:95:1d:1a:73:3c:45:
         da:56:a0:b8:82:5c:41:16:fe:f5:a7:72:ee:6d:dd:07:01:c5:
         b7:d2:28:1a:0e:9f:30:89:37:c8:df:02:e2:b0:56:01:c6:e2:
         64:b6:36:50:57:72:91:01:ab:29:ba:da:06:cb:3d:81:2d:1c:
         64:36:3e:51:28:85:1d:ba:2d:fb:92:e1:b7:39:8c:7b:6d:21:
         0b:5b:4e:1c:8c:44:08:ad:3a:bb:0e:68:07:80:dd:dd:dc:b6:
         d8:5a:c5:26:e3:c9:94:7c:8a:20:29:00:93:42:54:04:cf:67:
         63:a1:60:75:0c:21:04:b8:b5:02:7b:2a:96:52:cd:26:3f:7d:
         26:30:43:82:9c:ec:76:cc:8d:05:bb:dd:54:05:20:21:ad:20:
         92:fa:10:94:63:40:08:9f:17:02:fc:e2:0f:9f:10:a9:e9:1b:
         91:c7:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----