Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.mft
File:                     gqGyfHTn9dwDDkAcU0phsbw8pRI.mft (raw, json)
Hash identifier:          Dh74Bi83Dyg01EydpqnRH4O/doN8XuuPfjTtz3WFatE=
Subject key identifier:   4A:59:6B:98:EE:C8:90:11:63:2F:EA:2C:4E:8A:48:63:E4:0D:17:A9
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       0F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.mft
Manifest number:          0E08
Signing time:             Fri 04 Nov 2022 10:47:58 +0000
Manifest this update:     Fri 04 Nov 2022 10:47:58 +0000
Manifest next update:     Fri 04 Nov 2022 16:47:58 +0000
Files and hashes:         1: gqGyfHTn9dwDDkAcU0phsbw8pRI.crl (hash: Dwn3ayPuYx6sdtWh5+MrJ2/9xoN5CdJqeJ0URuod5uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3936 (0xf60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Nov  4 10:47:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4A596B98EEC89011632FEA2C4E8A4863E40D17A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:b2:41:1e:ca:0a:00:38:d1:9c:72:ee:19:
                    3f:1e:db:75:ce:01:9b:74:32:03:b1:62:76:50:8c:
                    4f:d1:68:0d:eb:65:4f:01:12:e6:fd:48:47:32:d7:
                    a0:5d:72:de:8c:dc:e4:c8:f9:35:4a:20:55:23:f2:
                    c0:82:eb:28:5f:f4:51:7e:89:2d:09:e0:8d:dc:3c:
                    35:5a:37:c2:41:6a:79:d9:34:c3:2c:08:51:c7:8e:
                    2a:86:56:5d:a8:68:ee:ce:93:84:94:e3:b3:d8:ad:
                    1e:38:35:6e:6d:59:5a:75:e5:35:51:0a:e1:d2:b1:
                    e6:91:ef:bd:42:8b:42:96:66:b2:2d:a5:47:c1:ce:
                    c3:c0:74:35:b2:2f:ad:68:60:bd:c5:0d:07:39:6d:
                    53:a9:a5:17:e5:83:3d:20:6b:43:ad:23:46:e2:02:
                    25:bb:31:61:d0:7b:fb:23:26:0a:4c:1d:74:94:ec:
                    e1:10:91:82:92:a1:74:d2:a5:10:2c:4c:8a:72:58:
                    b2:10:7d:c0:ab:0b:6c:11:49:ef:af:2d:bf:ef:fc:
                    8d:6b:4e:4c:21:11:38:a2:e6:89:f9:fe:06:9b:ea:
                    e3:15:9a:de:0a:69:3f:6d:d2:99:38:0c:ea:89:7e:
                    57:00:e9:f8:0d:cf:2b:43:97:0e:cf:c8:38:fb:b3:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:6B:98:EE:C8:90:11:63:2F:EA:2C:4E:8A:48:63:E4:0D:17:A9
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:26:68:fd:4c:a9:f1:83:a7:dc:3d:1b:a4:12:48:8e:13:ad:
         56:ad:f9:cc:35:9b:1f:c9:5f:76:04:e1:9d:93:e1:92:0e:b2:
         a2:76:2d:2c:67:6f:c2:e0:c6:1a:61:d0:f4:a7:70:b4:f0:a7:
         b7:9a:e3:c9:f6:ec:0e:07:b1:4a:72:fa:1a:db:84:a4:a0:e3:
         66:0a:cf:ca:fe:8f:83:af:8b:c9:6a:19:df:d9:af:8e:9e:b6:
         14:38:5e:81:21:59:18:5c:22:49:a1:3a:35:51:97:00:37:2c:
         c0:2d:10:eb:49:f1:27:28:1a:bf:34:5a:5c:31:6d:f1:e1:b6:
         f2:e8:d5:b4:9b:c9:a7:60:2f:6d:97:09:4c:fe:6c:cb:d9:59:
         fb:4f:da:0e:2a:f2:7c:50:82:34:c7:b0:42:4a:63:b6:04:d0:
         a5:04:df:48:ce:75:a3:2a:15:e7:49:e3:cb:58:2f:dc:7d:88:
         d2:32:fc:24:02:4f:b1:0c:68:4a:52:3b:28:74:96:01:9c:39:
         9a:8e:be:3f:6b:69:5c:ac:41:2d:14:49:ca:64:2e:ca:03:23:
         62:40:65:4c:d3:f2:a5:a9:bf:50:2a:e1:07:8c:57:51:d1:30:
         23:35:2f:8e:c6:c6:4c:08:19:4c:d5:43:d6:a2:aa:bf:18:87:
         02:d5:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org