Manifest

$ rpki-client -vvf krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.mft
File:                     13134316A59A346059777B42752C571829EF804F.mft (raw, json)
Hash identifier:          rjpeRWEB52Sdqim6+YtSfApGvLAIy3AMJKqG8Ok5g6k=
Subject key identifier:   19:5E:11:43:89:37:96:6F:1C:D7:B4:4D:BF:E6:96:B3:32:90:48:9D
Authority key identifier: 13:13:43:16:A5:9A:34:60:59:77:7B:42:75:2C:57:18:29:EF:80:4F
Certificate issuer:       /CN=13134316A59A346059777B42752C571829EF804F
Certificate serial:       596A769961C4CBC0D7B9337A0829A7E01FE5A972
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/13134316A59A346059777B42752C571829EF804F.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.mft
Manifest number:          2F
Signing time:             Tue 28 Jul 2026 10:38:36 +0000
Manifest this update:     Tue 28 Jul 2026 10:33:36 +0000
Manifest next update:     Wed 29 Jul 2026 10:47:36 +0000
Files and hashes:         1: AS61575.asa (hash: tpHZEEc6u3kukb54iPD3X54RP02XNLytOxY/70JU2ak=)
                          2: 323830343a323639633a33393a3a2f34382d3438203d3e203631353734.roa (hash: g7zRTE86r7NjWvjC6yH6YywPBmkG7g9PrD7ZrU3mCe8=)
                          3: 323830343a323639633a33623a3a2f34382d3438203d3e203631353734.roa (hash: iPXdMlumf7FVs4NAbQdWm/DBJs2/8peT0zb8eS3GdgQ=)
                          4: 323830343a323639633a33613a3a2f34382d3438203d3e203631353734.roa (hash: yVN72mHsBtUozbOrXfE1w7O4ViC5jaFztVWfh9exoFY=)
                          5: 323830343a323639633a33383a3a2f34382d3438203d3e203631353734.roa (hash: 2lXp+8GhPqnhEfDCq3A48Uj5FYFKkQapGGSgHw7NJ7k=)
                          6: AS61576.asa (hash: 7IG1S0wRq4vjazQEp5YnMslOfq2zJANERyoiIaWvkTA=)
                          7: AS61574.asa (hash: 5OrEY5Lcc6hJov0k/N+xiVXqhVWQFmCQR831G+X2bHM=)
                          8: 13134316A59A346059777B42752C571829EF804F.crl (hash: pym981ya6OZu2+s0fv8h/qCIQ4n8cWZXt1hCn4VcpyY=)
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/13134316A59A346059777B42752C571829EF804F.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 03:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6a:76:99:61:c4:cb:c0:d7:b9:33:7a:08:29:a7:e0:1f:e5:a9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13134316A59A346059777B42752C571829EF804F
        Validity
            Not Before: Jul 28 10:33:36 2026 GMT
            Not After : Jul 29 10:47:36 2026 GMT
        Subject: CN=195E11438937966F1CD7B44DBFE696B33290489D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:85:4d:12:54:6b:13:fa:86:06:18:9e:77:
                    b4:6c:4e:b1:fc:db:8f:90:38:d5:81:83:39:9c:ce:
                    64:fa:0c:67:b0:37:32:2f:52:0a:02:14:44:a9:9d:
                    d3:98:03:67:7c:05:1a:49:88:2b:4e:bb:bb:07:97:
                    40:49:80:81:5b:0b:ff:69:d8:2b:c7:32:d6:ff:c3:
                    c2:0c:fe:91:90:03:04:00:2e:f5:4b:9d:67:ca:cb:
                    03:89:3d:29:d7:0f:dc:7e:6d:99:29:d1:1b:c0:67:
                    17:e6:dc:b0:06:e5:a0:f9:a1:e2:4b:f0:21:95:73:
                    77:6b:6d:77:3b:0d:7a:54:c5:15:8d:75:1e:83:cb:
                    1d:99:66:0e:78:8e:f7:7a:59:15:17:ac:8f:2c:7d:
                    57:d3:ac:3f:d9:fe:6d:9b:e4:62:fa:dc:74:6d:1e:
                    76:6a:f2:30:9c:7f:34:07:9e:cf:c8:5f:cd:0a:4e:
                    ea:bd:8b:e5:c1:89:f4:c1:11:e3:97:5e:ba:22:af:
                    9f:e4:fb:c9:49:8c:ca:ad:7b:1d:10:90:4b:22:ed:
                    71:bc:ca:4b:28:15:fc:43:dd:69:c5:f2:b5:fc:d9:
                    70:45:a3:8d:a9:93:63:2c:bd:70:3c:3a:33:07:63:
                    97:92:1a:40:98:0b:a3:bd:62:b3:32:b4:14:28:0a:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:11:43:89:37:96:6F:1C:D7:B4:4D:BF:E6:96:B3:32:90:48:9D
            X509v3 Authority Key Identifier:
                keyid:13:13:43:16:A5:9A:34:60:59:77:7B:42:75:2C:57:18:29:EF:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/13134316A59A346059777B42752C571829EF804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:50:60:e8:ce:78:13:f4:d7:e3:a6:b9:62:b4:80:c3:a2:d8:
         eb:6e:6b:45:4a:c8:2c:1c:4b:d4:b6:df:fa:d5:60:f4:5d:5d:
         a0:4d:e9:24:c6:1a:aa:54:66:10:b8:40:78:fc:72:ae:30:82:
         e6:d6:45:33:7a:a0:78:40:d3:56:92:64:d1:34:26:40:9b:9e:
         33:84:4e:27:06:c8:9c:11:80:ec:60:a0:2a:99:c0:7d:50:53:
         dc:23:13:5d:1f:7b:2a:cf:e4:0c:e1:ac:5c:cf:da:9b:4f:2d:
         cd:2a:70:44:d5:83:c0:3e:6a:bc:53:67:3a:12:71:ea:bf:c1:
         a5:ac:25:8a:ef:e7:e8:fb:64:97:74:cd:aa:b1:30:fa:26:36:
         90:24:cc:71:80:94:41:c5:a8:1b:70:2b:2a:ba:74:e9:54:be:
         ae:4b:75:3d:99:8f:f9:cf:43:55:57:a4:bb:4e:56:2d:61:ef:
         2d:3d:a4:55:55:40:2f:9a:0c:e3:c4:bf:bd:84:52:7f:b4:44:
         e4:05:fe:1d:2c:6b:fe:1a:a5:37:21:d1:ff:01:48:87:e1:7e:
         07:0b:42:51:72:ba:d8:d6:d7:57:f3:a8:bb:ca:d2:b9:49:d1:
         28:a1:d0:ab:df:91:84:94:60:44:f3:d6:a5:e2:da:9c:a5:25:
         cf:98:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:40:11 2026 by rpki-client