Manifest

$ rpki-client -vvf krill.stonham.info/repo/Stonham/1/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.mft
File:                     85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.mft (raw, json)
Hash identifier:          +Hg6pPOpdBfAN/kOH2kvcqBY+MYQWEWSNFwk8Gf9KgQ=
Subject key identifier:   D4:05:F6:5B:68:37:9B:19:87:7A:BC:81:E0:F5:A7:F2:C4:9E:45:CF
Authority key identifier: 85:FE:CD:EA:28:AE:74:12:F8:A3:93:EB:EB:AA:2C:66:E2:3B:CF:A8
Certificate issuer:       /CN=85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8
Certificate serial:       3EA5DC4D515229DABAB6985236820393F81DE929
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.cer
Subject info access:      rsync://krill.stonham.info/repo/Stonham/1/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.mft
Manifest number:          24
Signing time:             Thu 19 Oct 2023 21:53:31 +0000
Manifest this update:     Thu 19 Oct 2023 21:48:31 +0000
Manifest next update:     Fri 20 Oct 2023 22:06:31 +0000
Files and hashes:         1: 326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa (hash: k4zcRC15U/xncNDLT/g15cGOk0yFQBPUJ1Cuw4jRIoU=)
                          2: 326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa (hash: WzrKea+yQUAJpssqgsfJytcSfSq3nEDqsT4hyGkzsx4=)
                          3: 85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.crl (hash: 5plwMdKQlJhi8JWP/qBzG4OmfalvE7kF2Pecl5mQLFk=)
                          4: 326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa (hash: AWltyfP13I3I5GN8PCyqBPrq4taXH16jQGCYDhAB5xk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:dc:4d:51:52:29:da:ba:b6:98:52:36:82:03:93:f8:1d:e9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8
        Validity
            Not Before: Oct 19 21:48:31 2023 GMT
            Not After : Oct 20 22:06:31 2023 GMT
        Subject: CN=D405F65B68379B19877ABC81E0F5A7F2C49E45CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:3d:a8:08:03:65:d1:ef:0f:d8:57:8f:ea:
                    1a:ac:3f:c2:a7:19:1e:65:9e:7b:3e:41:0c:b2:81:
                    7c:35:c6:15:8d:cb:32:1a:1f:4a:03:95:8a:e8:ed:
                    49:4d:d0:93:11:0a:b6:9e:8a:bd:99:c2:91:81:d1:
                    f6:cc:ec:f8:3c:ac:b7:1a:e4:72:8a:80:07:2f:69:
                    2c:4a:68:f0:d7:33:e6:e3:2b:ff:09:c4:c6:71:ee:
                    8c:87:67:96:49:5b:08:60:d8:1a:43:c0:fb:b4:c3:
                    50:ff:2f:a3:4b:65:7a:0d:7c:a8:8e:a4:e7:47:08:
                    67:d2:25:5e:68:bb:7e:22:e3:b7:f3:0d:b2:18:98:
                    71:82:05:5a:af:53:65:b4:18:86:4f:2c:ca:07:cd:
                    e0:01:07:5f:6b:93:8d:9b:e5:5f:d3:b1:90:8e:7c:
                    38:d6:28:bc:be:e1:d5:7b:2e:3e:67:3c:b3:6b:71:
                    c2:c2:36:7f:76:cc:fa:81:58:46:9e:a8:dc:36:79:
                    07:c5:ce:f5:92:6a:8f:73:2d:40:6d:97:b3:e1:22:
                    48:27:80:f5:c5:6d:a6:e7:bb:7f:83:b8:ce:cc:14:
                    b9:77:83:01:be:ee:e0:f9:ba:61:16:cf:1c:00:f1:
                    87:79:93:e4:af:b2:01:f2:7e:d0:5b:26:14:34:25:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:F6:5B:68:37:9B:19:87:7A:BC:81:E0:F5:A7:F2:C4:9E:45:CF
            X509v3 Authority Key Identifier:
                keyid:85:FE:CD:EA:28:AE:74:12:F8:A3:93:EB:EB:AA:2C:66:E2:3B:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.stonham.info/repo/Stonham/1/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/1/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:d9:9f:83:4b:49:65:42:7b:ad:82:3a:be:1b:66:8e:ee:
         7f:50:99:21:ff:d5:32:48:d0:f3:fa:2c:d1:c5:46:0a:ef:f1:
         80:f5:9f:04:fb:f4:36:41:22:60:36:17:a6:6e:99:09:10:1a:
         64:85:d7:f6:e6:f8:03:2b:01:cc:67:21:d4:7e:4c:41:38:e3:
         d6:18:e6:e3:78:f7:44:4e:a7:a1:b0:4b:44:55:44:93:cd:47:
         15:16:ba:e9:1d:ce:52:09:76:5f:12:50:50:13:1a:fd:3f:a0:
         60:ff:3d:81:d9:1e:a2:b2:b4:67:91:13:fe:33:a4:ff:30:22:
         4d:7d:5e:f3:4f:1b:eb:b5:dd:a1:f9:05:dd:43:77:ec:e2:f6:
         9e:17:19:60:a4:d7:76:e9:85:4c:a3:24:71:d6:85:0a:09:09:
         c2:51:be:23:cd:65:05:0d:bf:ae:6e:79:9d:21:a0:6e:fe:54:
         e9:56:60:0c:29:1b:e3:39:2d:03:c1:8b:79:05:d4:7e:a9:33:
         d2:ff:dd:40:02:71:2b:62:02:1a:2f:ff:7e:fe:c4:2a:6e:22:
         46:b0:7c:9e:37:e5:45:76:4b:68:e5:a5:36:2b:ad:ec:d5:1b:
         87:c3:23:7e:b6:00:16:e1:4d:16:d7:94:15:d6:8f:d9:75:83:
         88:ff:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----