Manifest
$ rpki-client -vvf krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft
File: AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft (raw, json)
Hash identifier: RwBVCTFdiYR5jr6FwisKf8c66Bq46YhVd9YSsptDF/8=
Subject key identifier: 94:82:A0:5F:57:BF:3E:EE:F9:FE:38:78:13:21:E7:9D:02:06:A9:EE
Authority key identifier: AA:D1:2F:5C:F3:A8:16:DC:20:55:C6:F3:AF:5E:2E:92:04:55:0B:05
Certificate issuer: /CN=aad12f5cf3a816dc2055c6f3af5e2e9204550b05
Certificate serial: 40DDF9785DE0EDC594EC3B4598DAF969BED2F05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtEvXPOoFtwgVcbzr14ukgRVCwU.cer
Subject info access: rsync://krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft
Manifest number: 74
Signing time: Fri 22 Mar 2024 14:43:03 +0000
Manifest this update: Fri 22 Mar 2024 14:38:03 +0000
Manifest next update: Sat 23 Mar 2024 16:28:03 +0000
Files and hashes: 1: AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.crl (hash: 4Pozi333rHGsrj5/JwUFW72ybmFEstar4lnTl1VJhfc=)
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:dd:f9:78:5d:e0:ed:c5:94:ec:3b:45:98:da:f9:69:be:d2:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad12f5cf3a816dc2055c6f3af5e2e9204550b05
Validity
Not Before: Mar 22 14:38:03 2024 GMT
Not After : Mar 23 16:28:03 2024 GMT
Subject: CN=9482A05F57BF3EEEF9FE38781321E79D0206A9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:c1:66:c2:6c:26:05:59:fc:d8:3c:93:60:
0b:3a:8d:39:d7:64:00:6b:47:17:07:ae:76:0f:e4:
7c:62:ac:cb:da:f9:4f:e6:72:58:d1:14:11:e2:ad:
89:6c:5d:87:b5:c6:eb:13:6e:de:35:b5:08:52:6b:
3e:85:f4:ed:4d:0c:04:ea:c4:56:96:67:cf:91:fb:
db:8d:50:21:5f:04:cf:17:da:9f:99:fb:24:6b:bb:
91:5b:6d:34:91:0d:38:32:b7:c2:38:e7:c4:54:ad:
30:c6:2d:0f:ac:9e:a4:1e:b9:1b:10:e9:df:8b:f2:
bd:0b:43:ac:80:8b:50:dc:79:a7:8c:59:fd:14:0c:
6e:19:c8:79:e7:24:bb:7d:24:12:73:d7:e7:6f:8b:
27:7e:14:27:15:13:fd:e3:c9:6b:7e:89:f8:d5:6f:
84:a8:cf:bb:4a:a2:e9:ec:3c:c6:df:33:43:db:8f:
11:ba:9f:5e:1c:89:7e:32:97:fb:69:d4:f6:91:13:
be:22:3e:ed:d9:0d:62:3f:05:9c:52:4a:d2:13:3e:
52:c0:01:f1:c1:b5:36:6d:31:e3:b4:f9:3b:5b:62:
bd:25:f0:fa:f5:28:fa:f8:15:25:2e:f8:c9:78:c7:
f4:ae:a0:bf:0a:2e:6f:85:62:79:52:fa:ad:cf:19:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:A0:5F:57:BF:3E:EE:F9:FE:38:78:13:21:E7:9D:02:06:A9:EE
X509v3 Authority Key Identifier:
keyid:AA:D1:2F:5C:F3:A8:16:DC:20:55:C6:F3:AF:5E:2E:92:04:55:0B:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtEvXPOoFtwgVcbzr14ukgRVCwU.cer
Subject Information Access:
Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f3:b4:bf:2b:a2:62:e0:9c:bf:49:76:5f:f4:2b:24:71:73:
50:f4:55:f1:75:72:ad:8e:d0:d7:70:c2:11:90:5f:eb:f0:e6:
7b:3f:4b:7a:59:f6:09:6d:ad:a7:be:72:33:53:71:37:e6:70:
9c:06:b4:02:95:1d:b8:63:a1:0f:ef:25:37:47:df:fc:03:b0:
56:a5:91:a4:fd:bc:78:88:b2:98:7a:f4:3e:1a:35:00:87:84:
c5:2c:eb:f2:50:a5:76:fe:82:9f:f3:f1:8d:b2:7f:69:11:b9:
98:8e:8c:84:58:94:50:f5:91:f2:07:b8:a0:3a:5a:d8:6f:15:
25:3e:f6:3a:38:da:1d:e0:ab:b0:58:3c:66:87:17:17:a9:c8:
ad:03:6c:92:af:4c:a5:b0:81:01:26:53:9e:a2:82:0c:0b:05:
32:6d:d7:04:50:a8:8a:4a:19:68:b5:ac:06:2e:3a:78:f2:18:
16:9c:41:50:95:47:3e:7c:b9:0d:ea:44:a1:f6:c0:b3:88:d4:
0d:4d:6a:3e:0c:b7:00:bb:dc:52:fc:5c:b2:fb:47:c5:90:fe:
ff:1a:82:49:80:62:f2:53:de:49:fe:66:29:43:1a:90:5c:4d:
a0:4b:8e:f8:f6:25:71:d0:b8:9f:0c:d5:5c:f2:e0:4f:4f:18:
0c:e7:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org