Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/t7xg6ZtXdcYhy-YGTMk_ONTD31E.mft
File:                     t7xg6ZtXdcYhy-YGTMk_ONTD31E.mft (raw, json)
Hash identifier:          Xh+8mzuoVm1cOeTBqTHSvIlY1aIUTBhr+pmyHCC14gA=
Subject key identifier:   54:00:74:8A:CA:D9:1E:4C:7F:6D:A5:65:AF:23:FF:5A:8B:D6:89:F0
Authority key identifier: B7:BC:60:E9:9B:57:75:C6:21:CB:E6:06:4C:C9:3F:38:D4:C3:DF:51
Certificate issuer:       /CN=B7BC60E99B5775C621CBE6064CC93F38D4C3DF51
Certificate serial:       39DF
Authority info access:    rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/t7xg6ZtXdcYhy-YGTMk_ONTD31E.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/t7xg6ZtXdcYhy-YGTMk_ONTD31E.mft
Manifest number:          39DD
Signing time:             Thu 15 Feb 2024 15:49:14 +0000
Manifest this update:     Thu 15 Feb 2024 15:49:14 +0000
Manifest next update:     Thu 15 Feb 2024 21:49:14 +0000
Files and hashes:         1: 5EjPZ8Kw2_h5hRqKpwmjdnq7Tq8.roa (hash: NFzQYsvSF+8jLhUXGuVwQ4NNoMyfrJnJbW6DNmbtXRc=)
                          2: VZgMGXDlMc_DQX3QkQKbaQ0K8vM.gbr (hash: VdDxMYhg8Go2z9xXDkf8db5I2OPKcq29PUaPETAoJAU=)
                          3: t7xg6ZtXdcYhy-YGTMk_ONTD31E.crl (hash: 0bt1pEq7CWz8SnwdqBnNb/750EJtaxuker7LkQbcqVE=)
                          4: xN0RuVE3ZOUygQ9nxKfePJb1Jmo.roa (hash: gpcuKFdrn205W/v5w8JuRovGrWJVbrVJ+Q9VlOjJP+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14815 (0x39df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7BC60E99B5775C621CBE6064CC93F38D4C3DF51
        Validity
            Not Before: Feb 15 15:49:14 2024 GMT
            Not After : Apr 12 04:01:44 2024 GMT
        Subject: CN=5400748ACAD91E4C7F6DA565AF23FF5A8BD689F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:42:3c:0f:3d:d2:9e:c1:3f:c1:11:45:ae:
                    bd:2f:63:78:5e:de:b9:52:ce:61:38:a9:f9:87:0b:
                    84:60:0f:49:e1:14:c8:91:76:da:33:e6:14:88:a4:
                    94:20:9b:01:a7:80:fe:9d:28:6a:dc:bc:42:c5:05:
                    74:86:f5:66:c5:9c:5f:d1:9c:f8:d5:e4:58:96:98:
                    e5:a2:8e:90:f2:f0:75:de:72:c1:41:25:2b:ec:52:
                    77:ed:52:ff:31:45:7d:26:38:07:21:ad:6f:75:d8:
                    f1:6f:6f:73:60:82:22:14:26:fa:d2:46:73:c1:39:
                    d1:52:14:d3:59:b8:19:89:34:7f:2d:4e:65:a9:1e:
                    9e:b6:3e:65:3b:f6:c2:05:09:ee:36:bd:82:ad:c3:
                    7f:19:62:4e:27:27:26:35:9b:c4:b5:05:e5:e0:d9:
                    02:1e:82:06:0e:dd:5b:1b:0b:d8:14:19:23:03:74:
                    ec:b3:2b:69:a4:a9:ee:c3:a4:c8:cb:dc:9e:ad:86:
                    60:2e:53:72:ad:84:80:31:77:2b:a3:ec:c2:da:ed:
                    e2:9b:4b:fd:68:57:0e:ad:f0:bc:14:0d:d6:65:6f:
                    2b:70:cf:72:f0:88:52:ed:ef:79:eb:10:eb:59:1b:
                    9e:42:b5:81:03:d1:97:79:47:93:a3:71:a3:cb:4b:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:00:74:8A:CA:D9:1E:4C:7F:6D:A5:65:AF:23:FF:5A:8B:D6:89:F0
            X509v3 Authority Key Identifier:
                keyid:B7:BC:60:E9:9B:57:75:C6:21:CB:E6:06:4C:C9:3F:38:D4:C3:DF:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/t7xg6ZtXdcYhy-YGTMk_ONTD31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/t7xg6ZtXdcYhy-YGTMk_ONTD31E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cb/t7xg6ZtXdcYhy-YGTMk_ONTD31E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:43:6d:42:91:b6:2b:8c:3c:79:3a:1c:6c:97:9d:2f:d4:c3:
         71:15:18:9e:4d:25:ee:11:37:3e:c2:6e:76:9c:77:cf:30:f4:
         84:e3:65:a2:75:4f:59:58:d2:72:6e:63:82:8b:a1:35:9b:58:
         75:84:60:5e:e4:63:30:3f:8d:e9:65:cd:c4:08:64:bc:b6:0e:
         c3:7a:b6:93:b4:9b:20:6f:42:6c:64:99:6c:fd:bb:dc:23:e6:
         ce:18:fb:a2:7b:d6:ee:60:db:90:8f:34:4c:6e:03:b2:7d:29:
         bc:fd:ab:21:56:dd:3e:88:0e:a8:ba:0d:d7:9f:01:84:e3:b1:
         b7:42:32:ef:4e:20:80:41:a1:45:de:3f:a1:85:aa:1a:cf:70:
         b1:10:73:b0:08:5d:03:34:a4:75:74:01:b3:27:af:c0:29:50:
         88:06:12:de:97:30:3f:b4:48:81:ca:e8:ae:be:b0:32:2e:42:
         93:f3:fb:b7:30:53:0f:7d:74:65:30:31:e9:7a:6d:8e:f4:28:
         56:d1:05:e7:36:8b:c4:2d:42:cd:43:30:22:a2:d9:03:b3:57:
         d1:e6:e0:48:01:16:a5:e6:e5:1e:de:5d:82:fa:58:6f:75:b5:
         e8:03:04:8b:61:47:7a:b0:e3:86:e8:dc:53:9f:28:87:3a:47:
         71:38:eb:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 15 20:22:32 2024 by rpki-client on console-fra.rpki-client.org