Manifest

$ rpki-client -vvf krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft
File:                     635C29FF238CC286AC1625A68EFCC04E2E460171.mft (raw, json)
Hash identifier:          WDchxdBKCJjrtQoj2PjuDln0cPrJkzJrYjpKHpv0gV4=
Subject key identifier:   F0:BB:41:BC:DA:35:C5:DE:BA:46:1F:80:3E:6F:ED:ED:26:6C:BC:E7
Authority key identifier: 63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
Certificate issuer:       /CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Certificate serial:       0F3877B47BEA84E64D840C18F52332E93872C7D6
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject info access:      rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft
Manifest number:          50
Signing time:             Fri 16 Feb 2024 15:45:24 +0000
Manifest this update:     Fri 16 Feb 2024 15:40:24 +0000
Manifest next update:     Sat 17 Feb 2024 18:06:24 +0000
Files and hashes:         1: 326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa (hash: 5mYBCnb4GzurxkXg5f+OoBPkYQwPs12lpVzd2Gzk6Ik=)
                          2: 326130353a646663313a383930303a3a2f34382d3438203d3e20313939373636.roa (hash: c5nkAZ/ShT+OHVbd5l5fKLOGr4UCdirZRPnJhMT4mgk=)
                          3: 326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa (hash: GpUpkTMkavqbDpt0upSWmR/4RjpnKi888tIpKOqlbE4=)
                          4: 326130353a646663313a383930313a3a2f34382d3438203d3e203136353039.roa (hash: fPF7N2jeRKJnTcZMZFKDQXCVgiaFNDI0Grk9ISzSyBg=)
                          5: 635C29FF238CC286AC1625A68EFCC04E2E460171.crl (hash: 5UMcy4hx4j6pbIG8exjVCt5djb0tIXm+6k/68OFIScc=)
                          6: 326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa (hash: f85DXy8yBiJxNbf/E5hJps9t0vO8sa0Hifs3KBo+kIM=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:38:77:b4:7b:ea:84:e6:4d:84:0c:18:f5:23:32:e9:38:72:c7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635C29FF238CC286AC1625A68EFCC04E2E460171
        Validity
            Not Before: Feb 16 15:40:24 2024 GMT
            Not After : Feb 17 18:06:24 2024 GMT
        Subject: CN=F0BB41BCDA35C5DEBA461F803E6FEDED266CBCE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:4e:20:1c:1f:5f:01:54:86:85:39:33:3a:
                    0b:56:c7:4f:68:87:39:56:52:11:e9:3e:f0:05:f7:
                    76:27:77:ff:0c:48:72:c7:a1:73:6a:de:0e:40:37:
                    96:9f:83:64:0c:10:c4:3e:30:a5:ec:13:4e:e9:bb:
                    ab:13:b6:3b:16:14:4f:14:68:dc:68:65:cc:42:9b:
                    9c:d0:53:01:31:9e:95:40:4d:8f:ab:a8:17:16:47:
                    e9:92:7a:84:60:d2:93:e9:02:94:8d:0d:c1:e0:7a:
                    2c:49:d7:32:46:6c:df:f7:2b:3e:21:d8:07:13:9f:
                    d8:0f:0a:37:20:77:40:18:3d:f8:9b:6c:f2:05:a9:
                    69:8e:0c:4a:74:df:6f:37:0d:3d:c4:04:27:7d:df:
                    31:5e:44:ff:dc:0b:3a:e5:09:14:63:f2:0b:a1:27:
                    ca:9e:15:97:18:50:bf:53:b9:2c:55:10:7f:96:5f:
                    53:15:1d:a7:f8:6b:85:ac:ae:53:0d:30:77:f8:f2:
                    f8:c3:9b:ba:9f:81:cc:10:d5:0c:7e:9d:39:05:05:
                    86:b2:70:3e:5e:bf:c8:4a:d8:b8:21:6f:fb:07:96:
                    3a:88:4e:79:a8:7c:9d:00:d8:f4:7d:77:9c:b1:3f:
                    ad:32:26:1f:27:c7:d7:c7:28:a4:a3:6d:13:68:93:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:41:BC:DA:35:C5:DE:BA:46:1F:80:3E:6F:ED:ED:26:6C:BC:E7
            X509v3 Authority Key Identifier:
                keyid:63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:a0:d7:46:73:d3:b9:b1:6f:3d:4d:94:e1:aa:15:34:a8:
         d7:5d:2b:11:e1:15:b7:bb:45:00:50:4f:ba:5a:87:4e:9f:18:
         33:a1:25:73:07:eb:dd:1c:3f:7a:ee:42:f6:0b:88:6f:49:19:
         6c:ef:bb:fa:e2:90:00:a1:60:90:af:9e:00:f5:1a:a1:20:d9:
         2a:61:eb:ba:37:ef:16:df:48:3f:b0:84:74:34:4d:e1:45:09:
         9c:91:b5:58:16:6a:26:f3:eb:e5:fe:8a:ac:94:ab:b7:c0:f3:
         12:8f:6c:69:d7:e6:a4:13:40:6d:cf:ad:6c:5a:4c:79:20:33:
         c8:41:3f:76:f7:9a:63:ad:39:28:36:4a:5b:d2:6c:01:b2:3f:
         d8:6a:22:a2:91:5b:82:ce:03:fc:33:bb:34:ba:5a:a8:99:8f:
         fc:2a:69:7d:11:27:3f:5b:55:7b:78:8e:24:09:d3:af:62:60:
         d0:0e:b7:c7:f9:2d:6d:7d:f5:c1:9e:8c:18:1e:a2:64:e8:98:
         b3:e5:a6:6b:ab:98:22:9f:8c:c3:99:04:e9:13:4b:e2:b2:91:
         c2:85:3f:e3:2e:c0:f2:21:8d:26:49:01:6a:f4:b6:28:f4:ec:
         1e:9b:55:11:2a:74:26:e9:7c:7e:ee:22:ef:f7:d6:ff:6c:a2:
         45:32:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----