Manifest
$ rpki-client -vvf testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.mft
File: 5609269E27A93178564F32170E6EE9C54F6DFDFE.mft (raw, json)
Hash identifier: bPyqVvEEFhhCThceYQYJEgpEryx8twlGekyh71u1Rwo=
Subject key identifier: C8:93:BB:87:75:6B:35:E6:05:71:FF:07:6E:75:85:AE:51:72:58:50
Authority key identifier: 56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
Certificate issuer: /CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Certificate serial: 0A04AA4A7C91DA2C530EE47A1C67BE2A6ED3D9D1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject info access: rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.mft
Manifest number: 19
Signing time: Thu 05 Oct 2023 16:07:11 +0000
Manifest this update: Thu 05 Oct 2023 16:02:11 +0000
Manifest next update: Fri 06 Oct 2023 19:41:11 +0000
Files and hashes: 1: 5609269E27A93178564F32170E6EE9C54F6DFDFE.crl (hash: nAioQkjdmQsSaOmOynxIWQzE/fMKOBw9tPumUnsQHTE=)
2: 326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa (hash: yktFopa7s6TjLExsFEINww+jcj2nxDx6XKYmqLd8Uow=)
3: 326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa (hash: d+50sP1mT8ynaDIZu5gJbLkUjgOBQpy9iyrVpa/LXTw=)
4: 326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa (hash: ljrjl3TOL/ds7qzKudg9hk6UuDsk3/rfkthas4Aof4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:04:aa:4a:7c:91:da:2c:53:0e:e4:7a:1c:67:be:2a:6e:d3:d9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5609269E27A93178564F32170E6EE9C54F6DFDFE
Validity
Not Before: Oct 5 16:02:11 2023 GMT
Not After : Oct 6 19:41:11 2023 GMT
Subject: CN=C893BB87756B35E60571FF076E7585AE51725850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:87:d4:de:ac:a2:89:8d:47:97:40:e6:4b:
e6:b4:f4:dd:2e:78:b5:e8:26:86:35:4c:1b:d1:96:
37:a0:60:4b:cf:b6:3b:6b:f1:25:d1:8e:ba:d6:ef:
84:f3:b4:93:6c:78:45:55:aa:ec:3d:62:63:1a:1a:
f9:22:61:6d:e1:22:af:c7:cc:6b:4e:9a:19:6a:58:
e7:1b:1e:06:ad:31:dc:55:a8:34:e2:12:bd:be:36:
1b:15:e1:80:8b:ad:e5:04:41:ea:17:e7:85:44:db:
df:70:f2:60:c2:8a:49:a8:6e:7f:c8:3d:01:fb:ce:
65:62:0b:8c:4c:e2:e8:bd:61:aa:6f:4c:0c:e6:dc:
f4:9c:ed:2f:51:30:c4:8c:42:13:c7:00:57:51:7b:
9b:4e:bc:a6:8d:3b:d6:2f:6b:61:78:c9:69:55:b1:
60:af:f7:24:39:65:f7:f9:9c:0c:6b:7f:0c:9e:1d:
ae:2b:7e:99:fd:dc:48:80:f1:0d:af:e0:f5:1d:67:
61:15:e0:72:03:37:05:14:6e:17:7f:40:c8:f9:52:
f5:ab:2f:a3:26:5b:0e:c1:79:06:50:36:a8:53:de:
7c:22:5c:5e:89:ae:69:9b:df:9a:41:71:0b:36:5a:
ee:c5:52:11:0c:ab:e7:68:a5:59:5c:22:ad:e7:ae:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:BB:87:75:6B:35:E6:05:71:FF:07:6E:75:85:AE:51:72:58:50
X509v3 Authority Key Identifier:
keyid:56:09:26:9E:27:A9:31:78:56:4F:32:17:0E:6E:E9:C5:4F:6D:FD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5609269E27A93178564F32170E6EE9C54F6DFDFE.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.krill.cloud/repo/Stonham/1/5609269E27A93178564F32170E6EE9C54F6DFDFE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ff:d3:19:0c:92:15:ac:ad:05:0d:6e:cb:00:4d:35:3a:e1:
bc:ca:45:e4:fb:1c:5c:6f:98:af:d1:15:f9:31:fc:c2:36:61:
5e:0e:33:3d:4e:ab:8b:eb:b9:00:ea:ce:1d:93:46:0c:ee:b3:
d5:b1:76:99:a2:bd:92:ac:cd:4b:f4:20:a0:c1:eb:17:e3:21:
11:8e:64:a0:59:8a:03:53:f1:32:6d:ef:0a:25:48:6e:4b:79:
6f:9d:15:5c:33:f8:3c:72:8b:02:d8:69:21:0d:a8:cc:e7:b7:
0e:01:6d:cd:a0:ee:e8:92:76:20:9c:0a:ab:40:15:96:93:0d:
3f:35:fa:b2:3e:7c:cc:f0:ca:57:44:2a:cd:48:ed:cd:c9:98:
28:ec:95:b6:7f:02:a6:00:7e:e6:f4:a8:76:3c:07:16:82:7b:
50:f8:04:5c:45:10:b2:9c:ce:c2:b5:70:45:50:77:e1:d4:b3:
e0:b9:32:55:e4:aa:5c:d4:f6:28:b3:2f:c9:64:16:30:46:0b:
04:cb:2b:76:de:e5:e3:a7:81:cb:70:35:40:6a:22:24:0a:a0:
77:5c:2f:f0:b9:5d:51:18:26:28:5a:5b:49:54:f6:e4:cc:e4:
7a:a8:e8:1b:cb:ef:ba:5e:da:ba:fb:fa:b6:92:83:7b:f9:4c:
ad:19:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:22 2025 by rpki-client