Manifest

$ rpki-client -vvf krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft
File:                     AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft (raw, json)
Hash identifier:          CARyiCWTYeI6p8ol6ruLqsRkm8LXCz7ncOMjP58wTTQ=
Subject key identifier:   3D:C0:BB:E0:F4:F0:33:D7:A7:D6:75:A3:D0:F6:F9:03:86:D6:34:F9
Authority key identifier: AA:D1:2F:5C:F3:A8:16:DC:20:55:C6:F3:AF:5E:2E:92:04:55:0B:05
Certificate issuer:       /CN=aad12f5cf3a816dc2055c6f3af5e2e9204550b05
Certificate serial:       56701B8B2A8B52976A544006AA9D0D88EF8F5C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qtEvXPOoFtwgVcbzr14ukgRVCwU.cer
Subject info access:      rsync://krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft
Manifest number:          50
Signing time:             Fri 16 Feb 2024 15:45:24 +0000
Manifest this update:     Fri 16 Feb 2024 15:40:24 +0000
Manifest next update:     Sat 17 Feb 2024 17:30:24 +0000
Files and hashes:         1: AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.crl (hash: zocQkM8LRarEAdZ8GSgwXZXFUyRHVrUiyGixhdjGkzc=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:70:1b:8b:2a:8b:52:97:6a:54:40:06:aa:9d:0d:88:ef:8f:5c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad12f5cf3a816dc2055c6f3af5e2e9204550b05
        Validity
            Not Before: Feb 16 15:40:24 2024 GMT
            Not After : Feb 17 17:30:24 2024 GMT
        Subject: CN=3DC0BBE0F4F033D7A7D675A3D0F6F90386D634F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:aa:cb:4f:a9:f2:6c:8c:62:6f:56:7e:63:
                    78:97:8e:03:c2:d7:67:b6:4e:5e:8a:1a:86:a5:1c:
                    6c:9a:11:12:93:dd:08:f6:3f:e3:c8:0b:a0:08:6a:
                    0d:e1:cb:47:af:66:4b:7e:39:e5:ea:25:bf:e5:8d:
                    88:aa:9e:c0:f2:42:2e:08:3a:77:be:6a:5f:d5:ea:
                    73:e2:c0:ca:e0:6d:0b:ea:62:97:74:91:bc:ae:77:
                    7f:a4:5a:e4:cf:b7:6a:7b:39:0a:a8:50:1a:12:09:
                    b9:55:5f:e5:6c:0d:87:d5:92:1f:ec:d4:cb:3f:b2:
                    c1:28:9e:53:82:d9:27:d6:9d:5b:04:cd:7d:c7:07:
                    d6:89:4f:18:53:54:8a:25:fb:17:59:b2:11:35:1a:
                    57:e5:32:b9:30:a9:f8:1a:6c:bd:92:5a:29:85:0b:
                    7f:14:6f:c3:b9:03:40:96:f0:61:7a:19:7f:69:e3:
                    aa:f5:31:2a:44:a4:d9:14:78:90:83:4c:e9:aa:c3:
                    da:62:7e:56:a8:78:44:b4:56:ab:2d:47:d7:cb:af:
                    9f:7d:41:d6:14:a4:76:e6:97:6b:d0:bc:82:c6:58:
                    26:a9:d3:07:41:e5:33:f5:36:1d:e1:4e:03:e4:cc:
                    6c:17:33:b4:28:13:5a:28:27:29:2b:52:2d:ce:c1:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C0:BB:E0:F4:F0:33:D7:A7:D6:75:A3:D0:F6:F9:03:86:D6:34:F9
            X509v3 Authority Key Identifier:
                keyid:AA:D1:2F:5C:F3:A8:16:DC:20:55:C6:F3:AF:5E:2E:92:04:55:0B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtEvXPOoFtwgVcbzr14ukgRVCwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/2/AAD12F5CF3A816DC2055C6F3AF5E2E9204550B05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:81:19:b2:37:18:dd:b4:15:23:da:38:9a:db:cc:f7:f5:
         2e:49:c8:75:d4:59:01:ec:db:a0:3a:95:da:4e:46:f0:0d:01:
         9e:65:d8:06:11:bc:54:b3:f0:f0:24:cd:d2:5a:ab:28:92:0c:
         a4:ca:3e:b5:bf:c6:3b:69:c6:2b:df:25:b2:ae:9d:c8:1b:5a:
         c0:aa:ed:e7:be:62:3c:d5:5b:53:81:26:40:f7:b8:a8:60:a0:
         71:78:46:ea:db:06:56:82:6f:17:e7:90:1a:bc:04:cb:4a:36:
         a9:66:26:bd:a1:4d:d3:10:53:98:3b:6f:a7:dc:12:ec:46:fd:
         a9:e8:e1:b9:1a:b1:5d:8f:28:a0:57:58:97:22:e5:95:00:76:
         ec:1e:1f:29:c9:db:7a:a6:3a:ef:c2:96:78:1d:cd:e2:d8:f2:
         58:38:1e:d0:92:67:9a:22:2c:86:6a:c9:81:90:46:15:32:6e:
         64:3b:ce:b3:11:cf:ec:04:1e:5b:88:0f:08:2f:44:ac:cf:e6:
         a7:ab:47:7c:e5:4f:ee:b9:02:e3:52:e3:04:89:c1:ef:2a:2c:
         f8:8c:6d:d3:d0:66:49:8a:ec:31:1e:f9:a5:f4:ac:1b:27:1b:
         fa:a1:dc:d5:00:ad:e3:1a:07:64:23:9e:76:99:47:bb:2c:85:
         7d:e4:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----