Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
File:                     IBfMWA0nPFS6MGTNLNavObgEuIc.mft (raw, json)
Hash identifier:          bMUYU388eXVXjt0Tbq2UNK+IXwKA4YnEWBHpq1tkx2E=
Subject key identifier:   4E:17:74:7A:FF:19:86:BF:7B:BE:78:32:F3:01:5C:37:25:05:7C:29
Authority key identifier: 20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Certificate issuer:       /CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Certificate serial:       15F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
Manifest number:          15E1
Signing time:             Sun 11 Feb 2024 10:21:55 +0000
Manifest this update:     Sun 11 Feb 2024 10:21:55 +0000
Manifest next update:     Sun 11 Feb 2024 16:21:55 +0000
Files and hashes:         1: AXG3AfXs41I9eJF3s5OA6mFKqUU.roa (hash: QqqUXTPh9+G5IjNwJWS1Skb8sRmwFk1SPF/OjhX+aKA=)
                          2: DyWZUPnQe8WhShqst8ELY4hCABE.roa (hash: egAvrin2NanTttrTLyijjrBAYT8BymV3HoCO670vYEQ=)
                          3: IBfMWA0nPFS6MGTNLNavObgEuIc.crl (hash: vSwR/lLqmAAU0MBpP/+rHMuH2zqJ9bXd5ZTiNVGD3tI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5625 (0x15f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
        Validity
            Not Before: Feb 11 10:21:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4E17747AFF1986BF7BBE7832F3015C3725057C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:91:68:25:7a:49:a3:44:be:17:c2:df:81:
                    d6:de:9b:90:97:44:d0:cf:eb:2a:dd:d6:8a:aa:64:
                    34:62:c1:ee:7f:03:3d:6e:ab:1d:77:3e:bb:47:bc:
                    47:b2:27:44:f5:24:44:1f:a3:43:bf:9d:1a:1f:98:
                    65:f2:36:19:82:b0:03:85:6f:6f:81:95:7c:bf:05:
                    a2:a2:33:6f:25:e8:36:11:64:cd:af:00:01:27:d2:
                    c2:62:6e:3b:40:de:7a:72:05:fa:16:f8:62:82:ed:
                    c8:4d:5c:34:c9:77:47:36:03:25:fc:14:ef:1b:81:
                    98:1e:db:ac:1e:2a:ec:af:3f:6c:48:82:68:11:2d:
                    c7:a0:11:0a:bb:25:59:6c:e5:af:01:97:f1:9d:34:
                    42:29:5f:f3:ca:b2:39:b1:54:18:6a:5e:e2:10:e5:
                    e2:5b:7c:b9:65:c1:3d:23:90:19:da:a8:05:a3:f9:
                    1c:f4:d2:0a:93:6c:9d:93:f2:55:e1:0c:ce:37:96:
                    53:e4:c6:ed:f0:17:62:05:2e:1b:a0:21:2f:a8:18:
                    e6:e8:db:e7:d0:86:43:f3:c3:37:07:19:f5:31:6c:
                    a8:0b:80:9a:71:66:98:1f:16:30:85:2e:30:ba:d6:
                    cc:3e:f5:fc:85:46:74:9a:fd:4f:33:64:40:e0:38:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:17:74:7A:FF:19:86:BF:7B:BE:78:32:F3:01:5C:37:25:05:7C:29
            X509v3 Authority Key Identifier:
                keyid:20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:ec:0b:aa:c5:a4:18:9f:83:d6:ce:b9:d4:39:e0:84:cf:
         c7:f1:db:7f:6c:68:bc:e3:d0:0c:97:74:b9:a0:a5:ab:44:40:
         d6:92:26:c6:ba:32:28:b5:ab:93:6c:b1:87:b2:2b:03:2b:7c:
         1e:ff:6f:7c:3c:d3:bb:ac:02:fa:96:aa:04:cc:02:ee:37:51:
         7c:c9:ac:d4:c8:81:5b:13:d2:67:20:f2:c0:06:dc:dd:67:c6:
         db:aa:ea:5f:da:9f:ad:74:ee:e8:ce:67:75:05:75:82:5f:4b:
         36:6e:3b:3c:1e:ac:46:0b:1c:1b:cf:1f:89:f1:33:57:2a:21:
         b4:f0:e2:84:62:3f:46:71:12:9b:dd:bd:43:62:57:f9:ab:0a:
         5c:11:d0:29:90:d0:58:b6:e4:ec:a6:85:56:fe:39:a6:e3:99:
         84:69:7e:d6:c5:c0:ec:7b:0e:4b:80:0d:03:41:14:33:4a:e8:
         50:a9:7d:b6:61:92:8e:8b:77:ee:db:38:a2:d5:fb:a5:77:25:
         eb:41:3a:38:97:58:f1:0b:39:47:17:8b:b5:db:d0:90:a8:91:
         e1:76:13:a0:8a:03:dc:ed:cb:b7:a3:b6:77:9c:18:3f:e2:5d:
         a7:b3:76:2d:9d:8e:c3:2c:92:c3:49:e2:80:8f:7f:db:92:41:
         92:7a:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 17:11:21 2024 by rpki-client on console-fra.rpki-client.org