Manifest

$ rpki-client -vvvf krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft
File:                     325627320199C076DC2D552334D2FEB715E4EDD7.mft (raw, json)
Hash identifier:          HAwzDbf3oweTwjgDAZ8cgkLtyRtIzbzBxj1ntOBfip8=
Subject key identifier:   B6:66:35:1F:5D:48:BF:B1:0E:8D:F7:A0:D1:51:56:2A:50:9A:A7:1F
Authority key identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7
Certificate issuer:       /CN=325627320199C076DC2D552334D2FEB715E4EDD7
Certificate serial:       0D661624BC9023024C96F30AB5314CEE56D4B489
Authority info access:    rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer
Subject info access:      rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft
Manifest number:          01B3
Signing time:             Sun 20 Sep 2026 20:12:04 +0000
Manifest this update:     Sun 20 Sep 2026 20:07:04 +0000
Manifest next update:     Mon 21 Sep 2026 20:17:04 +0000
Files and hashes:         1: 325627320199C076DC2D552334D2FEB715E4EDD7.crl (hash: JBNsjhQbTi5umvhaxdvYEscJjgbY46M9RRrROdvOd80=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:66:16:24:bc:90:23:02:4c:96:f3:0a:b5:31:4c:ee:56:d4:b4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325627320199C076DC2D552334D2FEB715E4EDD7
        Validity
            Not Before: Sep 20 20:07:04 2026 GMT
            Not After : Sep 21 20:17:04 2026 GMT
        Subject: CN=B666351F5D48BFB10E8DF7A0D151562A509AA71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:c7:0b:05:1e:9a:83:20:f3:e1:5b:6f:1d:
                    43:58:bf:51:5a:28:2e:79:8f:17:20:eb:9c:c0:9f:
                    77:a3:7e:66:0f:f5:95:17:32:fa:69:80:8b:cc:2a:
                    a4:93:1a:87:1a:ad:99:27:56:37:04:9f:43:d3:aa:
                    7c:7e:66:ca:fb:d8:88:f1:95:cd:d1:91:50:dd:59:
                    ad:06:4c:05:d7:ef:3e:05:cb:5d:2a:30:c6:2a:35:
                    62:24:71:1b:17:e9:c0:34:f6:44:d7:fb:06:9c:1d:
                    f0:ce:05:dc:e4:ee:15:e4:2b:2a:78:99:4d:cf:b1:
                    47:10:4e:cd:08:f0:de:26:a6:65:1a:54:15:bc:66:
                    d3:d3:e5:30:16:a8:b4:27:16:32:fc:e6:6c:08:1b:
                    a5:c9:3e:9a:1b:bb:ac:5b:e1:77:0a:e3:da:fe:a2:
                    30:42:b3:88:62:8d:dd:46:f1:b9:72:ae:18:8a:51:
                    18:6a:1b:10:c5:80:10:61:29:cc:cd:d3:b5:9d:c9:
                    4a:c7:db:03:a3:fa:cf:3c:64:e5:1b:a3:03:2c:dc:
                    0f:29:df:2e:a4:a9:8a:d3:0d:11:49:fe:4c:65:01:
                    83:bb:b4:0b:0a:c7:fb:49:d2:c8:54:3d:9c:08:fa:
                    cd:23:dc:c3:be:e6:93:ab:a5:b0:3d:82:b3:98:e9:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:35:1F:5D:48:BF:B1:0E:8D:F7:A0:D1:51:56:2A:50:9A:A7:1F
            X509v3 Authority Key Identifier:
                keyid:32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:c2:37:ba:35:05:1a:3e:1d:70:ea:41:4d:43:13:41:43:
         74:62:42:72:95:71:85:66:06:50:61:b3:e3:00:c8:ce:94:78:
         38:2c:92:e7:6f:79:f4:fc:93:95:73:d4:9f:e5:bc:c5:b5:2b:
         e4:83:88:6a:20:e4:ce:b0:6a:df:13:ee:ff:a8:d0:46:e0:7a:
         aa:a0:fb:74:99:e5:ea:ea:41:a3:77:b7:d5:f3:a0:a0:fd:be:
         86:84:e7:19:e2:9e:9d:ba:3e:1c:ac:92:0e:28:9d:1f:27:0c:
         0a:5f:6a:48:1d:60:2c:35:cc:84:9f:46:2a:16:95:49:b7:9a:
         6a:b2:76:fb:e0:9e:25:c0:ef:a2:5e:ae:e9:f7:cc:60:92:15:
         b9:6b:2c:49:e6:a6:0f:99:a7:64:61:84:3f:c1:bc:08:d0:df:
         20:60:21:72:8b:93:ee:a9:bd:f1:7a:77:e9:e6:7a:85:5d:ec:
         c7:30:3e:59:fa:d8:37:e2:c2:87:a3:e7:0a:02:5b:76:38:ca:
         c9:83:d7:34:61:94:16:61:9a:80:dd:59:be:2f:0c:16:43:b4:
         aa:43:c1:cc:1c:80:93:f9:b2:93:b3:92:53:5f:61:91:1e:a6:
         08:89:5e:a8:fc:99:5b:63:4c:c6:b4:56:6e:9d:de:30:e0:8d:
         7c:62:3c:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:13:38 2026 by rpki-client