Manifest
$ rpki-client -vvf krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft
File: 635C29FF238CC286AC1625A68EFCC04E2E460171.mft (raw, json)
Hash identifier: z3Eq9Q+M0mIEMmykN57lasCRvIBWUuPP0946IrfNv/k=
Subject key identifier: 90:1F:BA:F6:67:D2:86:6B:68:B8:41:1B:72:CD:C5:3D:8E:A9:D3:9B
Authority key identifier: 63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
Certificate issuer: /CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Certificate serial: 229BAA8EC4F10B9A13CB8528B0D1C42EFB0B0BD2
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject info access: rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft
Manifest number: 74
Signing time: Fri 22 Mar 2024 14:58:06 +0000
Manifest this update: Fri 22 Mar 2024 14:53:06 +0000
Manifest next update: Sat 23 Mar 2024 15:54:06 +0000
Files and hashes: 1: 326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa (hash: GpUpkTMkavqbDpt0upSWmR/4RjpnKi888tIpKOqlbE4=)
2: 326130353a646663313a383930303a3a2f34382d3438203d3e20313939373636.roa (hash: c5nkAZ/ShT+OHVbd5l5fKLOGr4UCdirZRPnJhMT4mgk=)
3: 326130353a646663313a383930313a3a2f34382d3438203d3e203136353039.roa (hash: fPF7N2jeRKJnTcZMZFKDQXCVgiaFNDI0Grk9ISzSyBg=)
4: 635C29FF238CC286AC1625A68EFCC04E2E460171.crl (hash: wE2cB4/+AIGgBVMfb/vAjdeBXjH1v6y4zbnPf66wsRU=)
5: 326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa (hash: f85DXy8yBiJxNbf/E5hJps9t0vO8sa0Hifs3KBo+kIM=)
6: 326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa (hash: 5mYBCnb4GzurxkXg5f+OoBPkYQwPs12lpVzd2Gzk6Ik=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9b:aa:8e:c4:f1:0b:9a:13:cb:85:28:b0:d1:c4:2e:fb:0b:0b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Validity
Not Before: Mar 22 14:53:06 2024 GMT
Not After : Mar 23 15:54:06 2024 GMT
Subject: CN=901FBAF667D2866B68B8411B72CDC53D8EA9D39B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:52:3f:a4:e8:3c:b0:9e:b1:f6:38:16:86:
43:d2:c0:e3:a4:93:98:11:95:74:4b:75:51:55:88:
38:1e:76:b9:d8:3f:db:39:ee:03:08:d4:9d:df:76:
c6:1b:ff:2a:da:fd:05:2b:c8:ea:79:ab:72:f9:1a:
2e:cd:81:31:fe:58:84:f4:04:83:b2:82:20:fc:55:
ed:95:64:a4:85:01:e6:22:92:c7:91:4a:ec:4f:40:
e0:da:b9:ac:fa:51:4e:a5:6b:ad:30:b1:9a:c9:c8:
5c:31:0d:0f:2b:6e:24:60:5b:e9:df:48:44:16:dd:
b7:14:d2:24:1b:4a:b5:d4:0a:ec:e6:be:b4:2c:64:
a9:9e:5a:6e:ec:58:23:6b:9e:fc:52:c4:8d:c0:41:
a5:8e:1d:e7:45:65:d9:0b:9c:be:19:da:b5:4c:bc:
ae:7d:d8:73:71:ae:f6:f7:e7:c4:64:97:26:7a:ae:
ee:31:88:04:a4:b9:49:29:5b:0a:2c:08:b5:fe:f4:
29:e6:25:07:10:55:54:2d:d7:0f:b5:61:2d:4c:d4:
79:80:c8:49:26:12:b3:08:2d:fd:41:c3:7c:fe:3d:
07:78:f6:a5:5e:eb:52:0a:5e:66:35:68:00:cd:18:
ca:32:62:19:e9:df:ae:dc:32:57:89:2a:8a:8b:a4:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:BA:F6:67:D2:86:6B:68:B8:41:1B:72:CD:C5:3D:8E:A9:D3:9B
X509v3 Authority Key Identifier:
keyid:63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject Information Access:
Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:25:1f:d1:d9:53:92:34:65:a5:f4:6b:77:f3:19:e8:8c:39:
af:a8:45:5a:62:7e:0e:ba:06:76:8f:7f:32:ce:a5:a0:3a:47:
bc:c4:77:0d:7f:b6:11:19:0f:1e:54:8c:34:60:9c:07:49:27:
71:4e:1c:cd:d9:d6:98:89:05:77:10:bb:0e:04:89:89:4e:75:
85:74:f5:64:44:41:47:de:ae:ad:01:92:21:80:48:1f:05:c6:
04:00:23:72:33:f6:20:ee:55:c9:45:bf:82:a8:1b:97:fd:99:
c6:c1:c0:fc:e7:b3:d0:b4:a1:ed:ef:3b:1c:f0:31:eb:95:35:
f8:18:85:04:2b:6f:1e:92:37:22:ad:1f:bb:fc:06:37:b9:8e:
d0:ae:a1:a3:82:87:f7:84:c0:a5:c0:86:5b:5c:f9:22:1e:0d:
86:59:b0:ca:34:ad:92:0d:35:86:c3:ce:ce:b6:08:87:93:c7:
89:26:80:41:35:1e:00:0d:47:62:79:d3:c6:94:1a:09:09:27:
4c:cf:5d:9c:34:22:32:27:07:fe:16:c4:26:82:ca:1e:f1:c8:
87:a4:02:40:35:a8:da:e1:8a:3d:8b:df:13:d0:45:1b:9f:2f:
7e:46:e9:e7:9a:18:25:33:60:64:70:b3:d6:f3:2a:46:1a:2e:
ce:47:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:10:18 2025 by rpki-client