Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/ZrvTEk3dw4Cs6zD65ee6glPlruQ.mft
File:                     ZrvTEk3dw4Cs6zD65ee6glPlruQ.mft (raw, json)
Hash identifier:          VoCYuHasRRE9AYsLLv82nPGvTBquVzuxHonf8bV7yiU=
Subject key identifier:   03:BB:E7:69:D5:33:79:B4:C2:50:4E:D5:89:77:B2:6A:B0:8F:72:F6
Authority key identifier: 66:BB:D3:12:4D:DD:C3:80:AC:EB:30:FA:E5:E7:BA:82:53:E5:AE:E4
Certificate issuer:       /CN=66bbd3124dddc380aceb30fae5e7ba8253e5aee4
Certificate serial:       0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrvTEk3dw4Cs6zD65ee6glPlruQ.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/ZrvTEk3dw4Cs6zD65ee6glPlruQ.mft
Manifest number:          0D
Signing time:             Mon 28 Dec 2020 17:53:20 +0000
Manifest this update:     Mon 28 Dec 2020 17:53:20 +0000
Manifest next update:     Mon 28 Dec 2020 23:53:20 +0000
Files and hashes:         1: HRXZqcJmvDUy0wmB5-IIocQiYLo.gbr (hash: V5pc7JTu0RHGtJhUIlNMdf37maBeGle8o9SJUO8fJz0=)
                          2: ZrvTEk3dw4Cs6zD65ee6glPlruQ.crl (hash: ps8GWcQKw3/MFDBUjdlwniiy+5xjBgy9sJozOqATAMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66bbd3124dddc380aceb30fae5e7ba8253e5aee4
        Validity
            Not Before: Dec 28 17:53:20 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=03BBE769D53379B4C2504ED58977B26AB08F72F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:be:cb:bb:cb:08:e1:54:83:8d:d8:20:21:
                    d5:81:07:93:8d:1d:cf:b8:a3:83:9d:30:f7:dd:ba:
                    30:79:ff:29:37:1a:f0:0a:22:bd:b8:ef:0c:e7:04:
                    2c:1a:83:09:1e:47:86:70:0a:f7:55:80:49:35:ea:
                    11:73:7c:6c:a0:79:ab:e9:ca:8e:e6:30:22:03:c5:
                    2a:bf:b3:26:e5:cf:38:f1:91:72:19:9b:d9:c2:d5:
                    f3:9c:72:8c:91:75:fc:f3:e2:70:d6:fd:01:9e:28:
                    d1:2d:61:00:ee:a3:0b:cf:3e:b8:05:4b:f9:77:9e:
                    0e:e3:03:ce:21:ec:c3:d6:c4:15:84:62:1d:37:27:
                    04:de:0b:1f:ae:de:95:35:d1:07:89:da:fe:7d:7b:
                    50:47:d1:e2:a8:ab:66:2f:13:ed:03:37:3b:10:40:
                    52:b2:11:0b:1c:db:e9:3d:8e:69:58:32:c7:7e:bb:
                    7f:d9:71:fc:94:91:b9:79:9d:17:2f:cd:5a:5e:42:
                    1a:dc:a7:76:d8:f9:7c:09:a5:a6:0f:27:4c:35:c1:
                    66:f5:37:06:f0:38:b4:55:48:45:b4:8a:a8:64:27:
                    3d:fe:2b:c6:55:76:1c:93:36:71:ee:86:14:40:62:
                    4d:37:57:76:cd:16:8f:f4:8b:63:25:6b:ce:de:02:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BB:E7:69:D5:33:79:B4:C2:50:4E:D5:89:77:B2:6A:B0:8F:72:F6
            X509v3 Authority Key Identifier:
                keyid:66:BB:D3:12:4D:DD:C3:80:AC:EB:30:FA:E5:E7:BA:82:53:E5:AE:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/ZrvTEk3dw4Cs6zD65ee6glPlruQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrvTEk3dw4Cs6zD65ee6glPlruQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/ZrvTEk3dw4Cs6zD65ee6glPlruQ.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:c5:16:a3:bd:20:00:3a:0f:8d:d0:d4:3f:69:b9:54:10:
         e5:c9:77:fc:ad:a9:7e:5e:58:c5:52:27:de:e4:69:e3:0e:42:
         68:d5:18:0e:8c:89:4f:93:ea:70:be:77:28:8e:af:2f:df:0c:
         da:8f:53:cf:fd:f5:f8:4a:18:2e:a2:d8:44:ba:10:12:9a:b3:
         d4:ed:57:cd:df:40:6d:50:ad:08:19:5e:36:8c:a9:e1:c2:a7:
         bc:b7:50:f0:9c:3e:75:f9:45:74:d0:7c:88:0c:a4:94:95:a6:
         15:6f:48:53:15:28:ce:04:f6:42:7e:25:b0:d4:40:56:fe:a7:
         2f:31:76:4b:9f:34:55:09:95:59:17:7f:2c:1b:78:4a:bb:60:
         76:49:1f:6f:b7:24:97:52:cb:22:a1:12:7b:43:3c:cd:ae:b0:
         74:91:1a:8e:45:46:8e:3a:ad:45:45:0d:14:84:30:e6:61:9b:
         74:9e:e8:2c:64:db:8a:46:ab:01:12:12:dd:e6:d4:62:ec:92:
         1c:4e:76:77:0f:c0:5e:bc:15:1e:ff:e8:a5:0a:2d:2c:d2:71:
         f7:44:77:09:4a:be:9e:23:95:ff:f9:3f:77:d2:25:94:8b:f6:
         9b:40:6f:ce:6d:72:a5:d7:a2:3d:8a:a3:3d:51:49:7c:6f:5a:
         0c:fd:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org