Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/pEjUB5w-vTPVdaW_3RfA5Q5yNas.mft
File:                     pEjUB5w-vTPVdaW_3RfA5Q5yNas.mft (raw, json)
Hash identifier:          x98XVabv3w4FEjpL4GApwoaV3Kyj6xfFY33k7al/+18=
Subject key identifier:   77:4F:8E:0B:87:B7:07:7F:4B:38:0E:5C:ED:34:F4:70:7E:2B:CB:16
Authority key identifier: A4:48:D4:07:9C:3E:BD:33:D5:75:A5:BF:DD:17:C0:E5:0E:72:35:AB
Certificate issuer:       /CN=A448D4079C3EBD33D575A5BFDD17C0E50E7235AB
Certificate serial:       5D
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/pEjUB5w-vTPVdaW_3RfA5Q5yNas.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/pEjUB5w-vTPVdaW_3RfA5Q5yNas.mft
Manifest number:          5C
Signing time:             Wed 16 Dec 2020 16:40:44 +0000
Manifest this update:     Wed 16 Dec 2020 16:40:44 +0000
Manifest next update:     Wed 16 Dec 2020 22:40:44 +0000
Files and hashes:         1: pEjUB5w-vTPVdaW_3RfA5Q5yNas.crl (hash: /Pe1TBc108y51/uBifwow20ULxMqXDtE4GzQQ/stMas=)
                          2: vlZ7d2Q104lqMa9ViE2SsdzzrTw.gbr (hash: s01XhOarAjSaoSEKkgiGEae+op0IJdf1OJoO9C1cBlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A448D4079C3EBD33D575A5BFDD17C0E50E7235AB
        Validity
            Not Before: Dec 16 16:40:44 2020 GMT
            Not After : Dec 11 18:09:13 2021 GMT
        Subject: CN=774F8E0B87B7077F4B380E5CED34F4707E2BCB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:9c:73:3b:eb:5c:06:59:f6:0c:6a:d6:05:
                    1a:44:b6:70:7b:f4:db:2c:1b:87:e8:dc:6b:5b:40:
                    a6:f2:44:09:e3:27:d2:6b:da:8c:96:8e:2d:fc:8f:
                    22:b7:01:34:a2:08:dc:b1:73:9d:9a:12:83:21:90:
                    b7:bc:8e:9d:6d:72:21:be:18:bf:e1:94:68:8f:33:
                    de:c9:cc:38:33:5c:2e:2e:c5:5d:7e:7d:08:e1:0e:
                    66:6b:25:82:c5:23:de:eb:5c:78:e3:81:98:fd:ca:
                    88:5f:d9:df:2a:c4:f2:f4:00:77:1c:22:e9:87:e8:
                    3d:5d:75:30:ba:5e:b0:f7:b1:63:6e:66:87:d0:4b:
                    1a:22:7e:27:e4:c4:5f:69:f7:5c:f8:36:4b:59:72:
                    bd:42:30:83:ff:3d:5a:34:23:45:f3:ad:c4:46:10:
                    38:66:b3:67:09:02:3c:c0:45:35:33:68:7b:37:7d:
                    01:6b:10:02:97:c2:35:93:20:d1:88:bf:0a:74:b6:
                    cc:fd:da:3a:23:ec:43:90:c0:62:84:a8:13:0f:e3:
                    cc:0d:3d:63:31:fc:0d:bb:8e:dd:9b:1d:d6:6f:4f:
                    be:bd:26:ca:63:b1:45:13:23:2e:08:e8:b0:b3:f3:
                    65:07:5d:17:bd:29:e5:02:11:4e:db:bc:63:3b:be:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:8E:0B:87:B7:07:7F:4B:38:0E:5C:ED:34:F4:70:7E:2B:CB:16
            X509v3 Authority Key Identifier:
                keyid:A4:48:D4:07:9C:3E:BD:33:D5:75:A5:BF:DD:17:C0:E5:0E:72:35:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/pEjUB5w-vTPVdaW_3RfA5Q5yNas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/pEjUB5w-vTPVdaW_3RfA5Q5yNas.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/pEjUB5w-vTPVdaW_3RfA5Q5yNas.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:38:0e:6e:78:4b:ef:6e:49:b4:a8:89:c3:42:f1:b8:75:27:
         c6:e7:fd:ea:6d:83:62:63:be:7e:92:a2:57:22:fb:6d:27:70:
         21:4a:d7:c7:0f:14:18:43:ed:1d:15:12:f1:a5:93:b0:28:69:
         e8:7f:a4:b2:77:ad:51:64:4e:bc:fb:ec:45:ea:f4:d7:4c:26:
         52:38:88:91:b2:5c:1c:fd:fb:23:04:98:a0:8c:82:5f:32:6d:
         b7:a6:70:42:31:5c:6e:39:fc:ac:95:d7:60:7d:28:65:e8:f1:
         12:4f:32:be:ae:35:f3:9c:29:8c:cc:07:19:1b:ba:d3:cd:f9:
         4a:32:90:25:b6:d7:00:0c:b1:d5:58:4e:68:f6:f5:9b:6d:0e:
         23:7d:26:3d:7c:64:d9:45:cd:f9:1b:12:97:78:6a:bd:72:0b:
         15:bd:50:6b:5f:6e:31:f6:4a:fc:6d:ad:36:ce:37:71:30:03:
         f7:0a:fd:12:ae:7c:c2:d1:36:61:3f:3b:44:a4:44:9a:6c:bb:
         59:0a:7f:27:a3:7a:b9:65:fa:b4:05:00:fd:82:82:a1:73:af:
         6b:02:ab:f6:0d:3d:62:24:d7:78:8d:0b:ab:fc:da:9d:87:d5:
         a2:ab:ee:fe:11:d4:bb:fa:2f:41:41:09:91:27:98:10:ff:ef:
         15:5b:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----