Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.mft
File:                     tqTKeTYPMRYIR9UAH3mXh8eIJ8o.mft (raw, json)
Hash identifier:          WursgvvS/JM0PXEJMw/eN/B4kj12DY/QYQQdeSEPkIg=
Subject key identifier:   1A:E9:B9:E7:8C:EC:1D:61:61:7B:6B:9F:DF:5F:B9:3D:27:00:87:2C
Authority key identifier: B6:A4:CA:79:36:0F:31:16:08:47:D5:00:1F:79:97:87:C7:88:27:CA
Certificate issuer:       /CN=B6A4CA79360F31160847D5001F799787C78827CA
Certificate serial:       04
Authority info access:    rsync://chloe.sobornost.net/rpki/Sobornost/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.mft
Manifest number:          03
Signing time:             Mon 28 Dec 2020 18:15:06 +0000
Manifest this update:     Mon 28 Dec 2020 18:15:06 +0000
Manifest next update:     Tue 29 Dec 2020 00:15:06 +0000
Files and hashes:         1: nZ2WvO2X9Ntu75qEmTYe-EQhmlI.roa (hash: drih3E2i65et5vH+2vo/k0CPBj00Dr0SdE6xLGb08Pc=)
                          2: tqTKeTYPMRYIR9UAH3mXh8eIJ8o.crl (hash: YD2+0p7nOrCRLDoNLzROv5V/6YBqN3RVVQKgiTKSJH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6A4CA79360F31160847D5001F799787C78827CA
        Validity
            Not Before: Dec 28 18:15:06 2020 GMT
            Not After : Dec 28 18:02:40 2021 GMT
        Subject: CN=1AE9B9E78CEC1D61617B6B9FDF5FB93D2700872C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:aa:0f:d8:23:f0:88:a3:3c:01:db:be:a1:6e:
                    30:7f:77:b1:cc:26:e2:d6:b9:b2:0c:ff:62:96:e2:
                    50:bf:98:11:23:bd:a4:dc:e9:cb:26:00:20:a9:f2:
                    ce:0e:ee:1c:12:8d:6e:47:41:8c:2e:7b:b7:3c:a5:
                    56:7c:5c:f7:84:0d:06:71:f4:d3:29:e6:f3:02:c5:
                    1c:cd:3d:0e:8c:56:cb:19:fd:af:b8:ab:56:2a:79:
                    7b:c0:3d:71:b7:78:2d:f2:36:d9:1c:56:9e:04:47:
                    75:68:bd:7e:7f:f7:2e:57:f6:26:47:08:e2:04:d6:
                    9f:a6:ba:e8:4b:18:ae:6d:cc:b7:c0:ca:9b:2c:a9:
                    80:ae:65:bf:db:f8:48:33:95:5a:00:3f:d9:a0:11:
                    69:84:fe:45:31:92:02:69:a9:fe:df:40:c4:28:90:
                    36:40:1d:ef:b0:0d:5d:17:c1:68:db:c9:e9:d2:e9:
                    64:8b:bd:a3:df:c4:10:56:07:ee:8e:f2:8f:93:de:
                    ae:aa:3c:61:48:32:00:e7:3e:f4:bc:e1:77:cd:3d:
                    a6:65:58:cc:52:a6:dd:f5:ba:84:1d:64:53:a9:6f:
                    34:94:ab:1d:ed:2a:4b:bb:c2:f7:a5:db:ab:96:31:
                    58:7f:b6:2b:83:26:42:0a:6e:26:bc:8a:dd:69:3f:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E9:B9:E7:8C:EC:1D:61:61:7B:6B:9F:DF:5F:B9:3D:27:00:87:2C
            X509v3 Authority Key Identifier:
                keyid:B6:A4:CA:79:36:0F:31:16:08:47:D5:00:1F:79:97:87:C7:88:27:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://chloe.sobornost.net/rpki/Sobornost/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b0:67:b5:6a:0f:10:25:2f:0f:d0:db:a4:f4:81:a5:f8:24:
         3c:a9:c7:cf:6d:c8:a0:d2:4e:57:b9:f9:89:81:6b:65:00:1d:
         bc:5c:90:ea:fb:86:35:67:78:28:ac:b2:01:12:eb:d7:30:f1:
         0f:eb:47:e4:fb:68:99:ae:fb:ce:f4:a4:d7:c6:6a:7f:63:8e:
         39:d7:38:4f:f9:be:23:c7:b5:7a:54:11:11:98:32:1c:ff:c8:
         64:15:f5:60:5d:df:e1:e3:34:c3:56:aa:e1:fe:40:82:ba:a9:
         f7:4d:56:1d:db:27:a5:a2:37:90:99:05:9e:01:0a:5f:ea:10:
         79:06:b8:d6:cd:57:07:f6:47:a5:31:91:4a:1f:39:73:79:3c:
         a9:d5:b3:ea:54:88:49:c7:2c:ce:8b:6c:af:62:1b:9d:bc:ea:
         f5:1b:7c:bc:50:c5:cd:74:46:a5:8d:95:13:b4:48:fd:32:cd:
         69:ad:7f:d6:e4:31:77:20:23:da:ff:93:bd:d7:fd:dc:a9:b4:
         63:b1:6c:7b:31:58:2b:ec:6d:65:37:a3:a8:d3:7d:a1:c6:8b:
         ae:24:16:1f:35:54:33:3b:3e:59:c1:94:8e:94:da:1f:0d:91:
         fd:b1:55:41:4b:31:8e:57:1c:98:f7:f5:d9:02:5a:54:2b:68:
         6f:ac:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org