From: Job Snijders <job@openbsd.org>
Subject: Re: rpki-client: collect non-functional CAs
To: Theo Buehler <tb@theobuehler.org>
Cc: tech@openbsd.org
Date: Wed, 12 Mar 2025 10:51:54 +0000

On Wed, Mar 12, 2025 at 10:02:04AM +0100, Theo Buehler wrote:
> +	json_do_array("nonfunc_cas");
> +	RB_FOREACH(nca, nca_tree, ncas) {
> +		json_do_object("nca", 1);
> +		json_do_string("location", nca->location);
> +		json_do_string("ta", taldescs[nca->talid]);
> +		json_do_string("caRepository", nca->carepo);
> +		json_do_string("rpkiManifest", nca->mfturi);
> +		json_do_string("ski", nca->ski);

I think I'd prefer using pretty_key_id() to format the SKI. (In a
separate diff we can use pretty printing for the SKI in BGPsec too.)

Tested, very cool results. Thanks!

OK job@

Kind regards,

Job