Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/e2Y6OyWFD-vAlHYrUPyC5ieJ71s.mft
File:                     e2Y6OyWFD-vAlHYrUPyC5ieJ71s.mft (raw, json)
Hash identifier:          SwawYkIpnp+f8mxKB//cJhhd149kiSzia+lJaMebHsc=
Subject key identifier:   AD:8F:A6:F5:19:B2:69:A9:0C:D0:37:70:15:49:8F:A1:78:78:DE:CF
Authority key identifier: 7B:66:3A:3B:25:85:0F:EB:C0:94:76:2B:50:FC:82:E6:27:89:EF:5B
Certificate issuer:       /CN=7B663A3B25850FEBC094762B50FC82E62789EF5B
Certificate serial:       0C25
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/e2Y6OyWFD-vAlHYrUPyC5ieJ71s.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/e2Y6OyWFD-vAlHYrUPyC5ieJ71s.mft
Manifest number:          0C21
Signing time:             Wed 03 Mar 2021 02:51:53 +0000
Manifest this update:     Wed 03 Mar 2021 02:51:53 +0000
Manifest next update:     Wed 03 Mar 2021 08:51:53 +0000
Files and hashes:         1: ClF4YOBviAEnwFokhNG1NXBZjEA.gbr (hash: zq2SDUYBmrb9UYXxPZpKFP4FmEqk6XhaWrmfw+QTZYA=)
                          2: e2Y6OyWFD-vAlHYrUPyC5ieJ71s.crl (hash: D6KGTLqLeYkbmJhxEeuoZQITeBBJDOzeEbVfrw6Ar3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3109 (0xc25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B663A3B25850FEBC094762B50FC82E62789EF5B
        Validity
            Not Before: Mar  3 02:51:53 2021 GMT
            Not After : Jan  1 01:01:03 2022 GMT
        Subject: CN=AD8FA6F519B269A90CD0377015498FA17878DECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:a8:ed:c5:19:6a:ae:88:fa:e2:cc:42:4e:
                    f4:b3:e7:86:ec:63:7b:e2:d8:75:6f:27:7a:35:54:
                    52:13:0d:4e:c6:89:e1:d8:0c:95:63:0b:01:5f:ee:
                    25:c9:98:4f:a1:18:55:5d:52:37:67:33:36:99:86:
                    54:a4:42:bf:92:b9:45:a1:92:fb:81:b7:ff:05:3d:
                    06:d1:89:5a:c1:a5:80:66:e8:cc:f9:ee:7d:cc:23:
                    d9:4c:97:ee:cd:94:53:36:b2:4d:7a:41:2e:11:ad:
                    77:a5:31:87:7e:81:7b:fb:60:59:99:e7:e3:af:5d:
                    b6:41:85:fb:a2:14:60:b7:28:56:6d:f4:cb:f9:40:
                    b6:47:4c:2b:7d:77:76:81:08:b1:56:2c:3a:6d:7e:
                    46:0c:b4:6b:6b:14:64:a8:31:00:60:56:63:df:fe:
                    35:3e:fb:d4:b9:07:ea:be:81:98:ff:d2:50:0a:2a:
                    d5:69:fb:cf:09:ad:07:14:f9:88:b4:15:52:f5:26:
                    5e:56:d0:56:9c:12:a6:21:c7:9a:c5:4c:f4:a1:85:
                    04:e2:1c:e7:8c:04:76:52:ea:06:2c:85:22:1f:ae:
                    af:45:05:fc:65:dc:db:73:f8:08:c7:28:c1:22:11:
                    b8:77:35:ca:95:2d:1f:26:09:d9:cd:24:13:04:97:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:A6:F5:19:B2:69:A9:0C:D0:37:70:15:49:8F:A1:78:78:DE:CF
            X509v3 Authority Key Identifier:
                keyid:7B:66:3A:3B:25:85:0F:EB:C0:94:76:2B:50:FC:82:E6:27:89:EF:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/e2Y6OyWFD-vAlHYrUPyC5ieJ71s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/e2Y6OyWFD-vAlHYrUPyC5ieJ71s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/e2Y6OyWFD-vAlHYrUPyC5ieJ71s.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:60:0c:5d:cf:18:e0:f3:37:f4:d6:93:e4:4a:e7:cb:d3:
         29:71:83:b7:b2:59:2b:bb:3a:2d:1e:97:ff:82:f8:77:01:18:
         bb:91:37:54:fe:c3:c2:8f:37:db:eb:bc:f9:c6:81:77:80:32:
         a6:93:08:b6:85:69:d7:76:8a:fc:9c:97:f2:e0:4c:d4:10:ca:
         e4:30:31:0e:35:6f:8a:4e:d4:2f:59:7f:55:69:a2:f8:62:67:
         3a:40:d3:d5:29:8e:2b:33:db:e9:f5:11:d7:0c:3f:b4:7f:69:
         3f:88:00:62:61:1a:92:82:02:87:62:63:c8:f6:91:be:7c:df:
         56:7c:de:b4:7a:61:2c:fd:23:df:cf:0c:11:cf:60:f7:c7:6d:
         a4:66:d7:d2:5d:1b:7a:59:22:37:89:6a:87:22:af:77:21:e6:
         bf:55:6a:13:39:ff:f9:4e:52:d7:c2:fb:b3:e3:77:3e:cf:65:
         41:c2:57:28:d9:a8:5e:f1:b5:25:25:a2:76:7a:fa:e2:48:e0:
         b6:f5:b6:c3:0d:01:b2:5f:a0:57:cc:fc:9c:84:ad:47:ec:9d:
         94:41:ad:0c:d5:df:3e:27:df:87:70:01:2f:4f:32:3a:36:a9:
         2a:e1:7d:15:cf:e9:14:d7:83:ed:1f:d8:56:1e:b3:bc:22:55:
         c0:ed:1d:ab
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I2
NjNBM0IyNTg1MEZFQkMwOTQ3NjJCNTBGQzgyRTYyNzg5RUY1QjAeFw0yMTAzMDMw
MjUxNTNaFw0yMjAxMDEwMTAxMDNaMDMxMTAvBgNVBAMTKEFEOEZBNkY1MTlCMjY5
QTkwQ0QwMzc3MDE1NDk4RkExNzg3OERFQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1MKjtxRlqroj64sxCTvSz54bsY3vi2HVvJ3o1VFITDU7GieHY
DJVjCwFf7iXJmE+hGFVdUjdnMzaZhlSkQr+SuUWhkvuBt/8FPQbRiVrBpYBm6Mz5
7n3MI9lMl+7NlFM2sk16QS4RrXelMYd+gXv7YFmZ5+OvXbZBhfuiFGC3KFZt9Mv5
QLZHTCt9d3aBCLFWLDptfkYMtGtrFGSoMQBgVmPf/jU++9S5B+q+gZj/0lAKKtVp
+88JrQcU+Yi0FVL1Jl5W0FacEqYhx5rFTPShhQTiHOeMBHZS6gYshSIfrq9FBfxl
3Ntz+AjHKMEiEbh3NcqVLR8mCdnNJBMEl6MXAgMBAAGjggIEMIICADAdBgNVHQ4E
FgQUrY+m9RmyaakM0DdwFUmPoXh43s8wHwYDVR0jBBgwFoAUe2Y6OyWFD+vAlHYr
UPyC5ieJ71swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9Tb2Jvcm5vc3Qv
ZTJZNk95V0ZELXZBbEhZclVQeUM1aWVKNzFzLmNybDBbBggrBgEFBQcBAQRPME0w
SwYIKwYBBQUHMAKGP3JzeW5jOi8vY2EucmcubmV0L3Jwa2kvUkduZXQtT1UvZTJZ
Nk95V0ZELXZBbEhZclVQeUM1aWVKNzFzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgZ8G
CCsGAQUFBwELBIGSMIGPMFYGCCsGAQUFBzALhkpyc3luYzovL2NobG9lLnNvYm9y
bm9zdC5uZXQvcnBraS9Tb2Jvcm5vc3QvZTJZNk95V0ZELXZBbEhZclVQeUM1aWVK
NzFzLm1mdDA1BggrBgEFBQcwDYYpaHR0cHM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0
L3Jwa2kvbmV3cy54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcB
BwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiH2AM
Xc8Y4PM39NaT5Erny9MpcYO3slkruzotHpf/gvh3ARi7kTdU/sPCjzfb67z5xoF3
gDKmkwi2hWnXdor8nJfy4EzUEMrkMDEONW+KTtQvWX9VaaL4Ymc6QNPVKY4rM9vp
9RHXDD+0f2k/iABiYRqSggKHYmPI9pG+fN9WfN60emEs/SPfzwwRz2D3x22kZtfS
XRt6WSI3iWqHIq93Iea/VWoTOf/5TlLXwvuz43c+z2VBwlco2ahe8bUlJaJ2evri
SOC29bbDDQGyX6BXzPychK1H7J2UQa0M1d8+J9+HcAEvTzI6Nqkq4X0Vz+kU14Pt
H9hWHrO8IlXA7R2r
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org