Manifest

$ rpki-client -vvvf krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft
File:                     DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft (raw, json)
Hash identifier:          MYPkQNv4AqeYkejfZRwiJRRQNMew46G/ueo4atO9F20=
Subject key identifier:   C7:87:79:A8:B7:D5:91:11:33:DC:32:54:2B:C7:3F:5B:1A:91:DB:20
Authority key identifier: DF:92:80:F3:46:8C:F3:8D:D1:BB:75:F7:80:83:01:AB:64:B6:B1:61
Certificate issuer:       /CN=DF9280F3468CF38DD1BB75F7808301AB64B6B161
Certificate serial:       07F9649C004488163C0A3489F0152951A217E040
Authority info access:    rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.cer
Subject info access:      rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft
Manifest number:          07
Signing time:             Mon 21 Sep 2026 05:03:49 +0000
Manifest this update:     Mon 21 Sep 2026 04:58:49 +0000
Manifest next update:     Tue 22 Sep 2026 05:54:49 +0000
Files and hashes:         1: DF9280F3468CF38DD1BB75F7808301AB64B6B161.crl (hash: 1088xZbMSUj4btI77FccNCNFExMA+fUvwVJ+mZ5ok40=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f9:64:9c:00:44:88:16:3c:0a:34:89:f0:15:29:51:a2:17:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9280F3468CF38DD1BB75F7808301AB64B6B161
        Validity
            Not Before: Sep 21 04:58:49 2026 GMT
            Not After : Sep 22 05:54:49 2026 GMT
        Subject: CN=C78779A8B7D5911133DC32542BC73F5B1A91DB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:80:d3:a3:db:1c:99:f4:2c:a1:db:12:1f:
                    96:e4:8a:87:94:af:19:f4:95:b8:44:aa:0a:8d:b4:
                    1d:4d:df:ab:93:06:c8:4d:75:ab:cc:55:fc:3d:26:
                    7c:47:b3:77:7c:1b:ff:52:99:9e:ba:81:97:ea:a1:
                    93:4f:59:7d:00:77:7a:93:54:7b:27:ba:1d:ff:53:
                    22:4e:c9:cf:e3:f1:cb:ba:0a:09:66:70:0e:07:99:
                    1a:11:f5:8b:bb:6f:04:bb:1c:26:d3:89:d6:25:9e:
                    51:81:75:8d:88:11:30:d2:9f:f2:3a:26:d3:a5:0a:
                    9a:a8:2d:35:0b:8b:d9:94:f9:22:14:21:5a:5d:cd:
                    61:3c:18:a8:1c:24:dc:b9:a9:b5:ce:19:75:c8:ae:
                    b9:d0:d9:18:95:6f:f4:b8:74:79:66:cf:ff:40:56:
                    b8:5a:22:da:25:b7:06:7b:36:be:61:08:17:29:63:
                    39:67:91:97:7e:27:f6:29:c5:4d:8e:4d:ba:69:3f:
                    0e:fc:a7:e5:ab:bd:5d:56:26:89:b0:f9:49:91:1b:
                    b1:35:c7:bd:8e:29:18:b6:07:28:ae:34:08:fc:8a:
                    2e:88:74:92:2d:99:27:43:51:db:f8:ba:8f:77:7e:
                    aa:2d:63:c1:dc:91:ea:18:67:b0:9f:f7:c1:07:73:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:87:79:A8:B7:D5:91:11:33:DC:32:54:2B:C7:3F:5B:1A:91:DB:20
            X509v3 Authority Key Identifier:
                keyid:DF:92:80:F3:46:8C:F3:8D:D1:BB:75:F7:80:83:01:AB:64:B6:B1:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:01:e0:dd:d1:28:18:cf:62:6e:74:d7:e9:88:b0:d3:d4:a8:
         d7:17:10:b3:9e:e6:0a:fc:d0:44:1f:fc:ae:b0:59:89:f6:67:
         a0:a7:ac:27:a7:d1:e8:be:1f:2b:30:83:5e:d5:7d:4d:3e:64:
         79:ae:ad:d9:f6:da:bd:9e:cd:dd:55:59:3c:8f:e3:25:56:bd:
         cb:25:d8:2b:d0:86:2f:c2:e0:d4:20:11:6c:8b:4e:0d:09:7d:
         9f:2c:b2:c0:7d:39:17:11:d1:25:c7:90:a0:53:ee:de:1d:07:
         4d:52:6e:6d:13:99:18:d6:28:74:f4:83:c5:46:3c:bf:5b:ce:
         84:6d:24:d5:59:98:47:cd:74:4b:b3:2a:e5:36:dc:71:27:37:
         4e:57:b4:f4:74:82:de:8a:06:40:74:e9:81:53:c5:d8:04:b1:
         71:f0:95:a9:ed:01:f9:8f:e5:d3:d0:47:2b:03:6b:69:5b:67:
         da:72:7d:00:c8:d2:c3:1b:b3:a6:aa:7c:02:42:37:b0:9b:28:
         48:f4:39:94:a6:e4:98:b6:7d:b8:a4:93:17:8c:36:6b:3c:30:
         0d:5d:e8:39:38:0d:a8:ff:eb:d8:6a:68:73:08:6d:5d:fb:cd:
         ca:95:36:8c:fa:e2:54:84:e8:19:a7:16:f2:ae:b3:d2:af:c2:
         91:fa:3c:63
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUB/lknABEiBY8CjSJ8BUpUaIX4EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY5MjgwRjM0NjhDRjM4REQxQkI3NUY3ODA4MzAxQUI2
NEI2QjE2MTAeFw0yNjA5MjEwNDU4NDlaFw0yNjA5MjIwNTU0NDlaMDMxMTAvBgNV
BAMTKEM3ODc3OUE4QjdENTkxMTEzM0RDMzI1NDJCQzczRjVCMUE5MURCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HoDTo9scmfQsodsSH5bkioeU
rxn0lbhEqgqNtB1N36uTBshNdavMVfw9JnxHs3d8G/9SmZ66gZfqoZNPWX0Ad3qT
VHsnuh3/UyJOyc/j8cu6CglmcA4HmRoR9Yu7bwS7HCbTidYlnlGBdY2IETDSn/I6
JtOlCpqoLTULi9mU+SIUIVpdzWE8GKgcJNy5qbXOGXXIrrnQ2RiVb/S4dHlmz/9A
VrhaItoltwZ7Nr5hCBcpYzlnkZd+J/YpxU2OTbppPw78p+WrvV1WJomw+UmRG7E1
x72OKRi2ByiuNAj8ii6IdJItmSdDUdv4uo93fqotY8HckeoYZ7Cf98EHc3N9AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUx4d5qLfVkREz3DJUK8c/WxqR2yAwHwYDVR0j
BBgwFoAU35KA80aM843Ru3X3gIMBq2S2sWEwDgYDVR0PAQH/BAQDAgeAMH0GA1Ud
HwR2MHQwcqBwoG6GbHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl
L3JlcG8vcnNjb3BlX2V4cGVyaW1lbnRfY2EvMC9ERjkyODBGMzQ2OENGMzhERDFC
Qjc1Rjc4MDgzMDFBQjY0QjZCMTYxLmNybDCBhAYIKwYBBQUHAQEEeDB2MHQGCCsG
AQUFBzAChmhyc3luYzovL2tyaWxsLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBv
L2FzX3JwX21hcHBpbmdfY2EvMC9ERjkyODBGMzQ2OENGMzhERDFCQjc1Rjc4MDgz
MDFBQjY0QjZCMTYxLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy
c3luYzovL2tyaWxsLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBvL3JzY29wZV9l
eHBlcmltZW50X2NhLzAvREY5MjgwRjM0NjhDRjM4REQxQkI3NUY3ODA4MzAxQUI2
NEI2QjE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
DQYJKoZIhvcNAQELBQADggEBAEAB4N3RKBjPYm501+mIsNPUqNcXELOe5gr80EQf
/K6wWYn2Z6CnrCen0ei+Hyswg17VfU0+ZHmurdn22r2ezd1VWTyP4yVWvcsl2CvQ
hi/C4NQgEWyLTg0JfZ8sssB9ORcR0SXHkKBT7t4dB01Sbm0TmRjWKHT0g8VGPL9b
zoRtJNVZmEfNdEuzKuU23HEnN05XtPR0gt6KBkB06YFTxdgEsXHwlantAfmP5dPQ
RysDa2lbZ9pyfQDI0sMbs6aqfAJCN7CbKEj0OZSm5Ji2fbikkxeMNms8MA1d6Dk4
Daj/69hqaHMIbV37zcqVNoz64lSE6BmnFvKus9KvwpH6PGM=
-----END CERTIFICATE-----