Manifest
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft
File: F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft (raw, json)
Hash identifier: 2sI3X/jPoxJ0gnd8oZg1papcosHMCZNJesDpG7mVnPc=
Subject key identifier: 47:49:25:B4:34:B7:4D:25:6D:40:C0:4A:D4:0C:52:58:C6:76:C4:4D
Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Certificate serial: 19259F294E313CF890145184950AE4C48438F237
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft
Manifest number: 04A0
Signing time: Wed 10 Jun 2026 10:00:17 +0000
Manifest this update: Wed 10 Jun 2026 09:55:17 +0000
Manifest next update: Sat 13 Jun 2026 10:16:17 +0000
Files and hashes: 1: 3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa (hash: oOew7nfRjVHr2A6IwvyjgnEv7vlsCqfmGcGBn+W9vs0=)
2: 3133382e3138352e3232382e302f32342d3234203d3e203133353237.roa (hash: Wl9f6O+9d12IhkGClEnlpFwj5dz0E4LUFdn2NN6Nceo=)
3: 3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa (hash: pGBwQY/0TrsPQyK1RyV8H+pjV057hp37DKHEeaYcQV8=)
4: F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl (hash: reSY10OuZml19lu8EtOutNI7NA1cEiGZuBfmsuQLxy8=)
5: 3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa (hash: mnLQW4wdhn8yK7znDc6FyFIo3V3pd1FXAhTBIKhgzlQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:25:9f:29:4e:31:3c:f8:90:14:51:84:95:0a:e4:c4:84:38:f2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Validity
Not Before: Jun 10 09:55:17 2026 GMT
Not After : Jun 13 10:16:17 2026 GMT
Subject: CN=474925B434B74D256D40C04AD40C5258C676C44D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:fa:88:f9:28:d8:14:fa:e7:43:25:d6:aa:
06:0e:91:50:9b:aa:69:bd:3e:e1:c0:8d:8a:8c:66:
99:7f:72:1d:67:b1:5e:58:6c:d2:0a:78:5a:55:bb:
35:33:1a:f4:35:fc:b3:d7:08:7e:a4:20:04:f1:4b:
bc:1a:72:57:39:32:30:b5:8a:6e:d4:13:d5:ea:a8:
c9:26:ea:00:9c:fe:68:c7:0d:cd:79:4e:b5:0c:f8:
7e:7c:f8:24:84:55:c1:5c:c0:2d:a0:72:f2:1c:40:
b3:a6:a5:86:db:d5:da:88:0b:82:3e:c7:29:a4:e0:
b8:7e:d5:8b:0a:01:be:78:50:86:b2:1c:17:c6:fd:
da:fe:28:91:27:9f:c6:2e:16:cc:5d:d8:0d:05:3e:
fc:92:f1:27:0f:83:a3:64:77:94:db:c9:dc:7c:ac:
81:a1:f6:5b:f1:0f:e8:d7:84:f1:b1:ec:6a:ba:e1:
3b:e8:50:88:d6:1e:43:06:1c:2c:09:02:6b:38:a5:
cc:3e:b6:5b:c2:5f:fb:40:ec:82:af:31:82:f5:f7:
b2:93:44:8e:8b:8e:f6:f0:3d:7d:e8:ff:81:83:a9:
af:10:9e:78:3d:7e:26:df:b1:ac:77:85:16:0f:0f:
6a:94:fb:f9:e0:a9:c2:0e:4f:c1:76:56:f8:9d:e1:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:25:B4:34:B7:4D:25:6D:40:C0:4A:D4:0C:52:58:C6:76:C4:4D
X509v3 Authority Key Identifier:
keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3d:78:4e:a2:cb:ef:c4:6b:9a:6c:ee:91:c9:bb:be:7f:45:
a0:00:e3:0f:9f:a9:ad:bc:e3:f1:06:ad:c8:5f:f4:0b:21:17:
5c:00:41:b3:11:b7:08:b2:fe:12:54:3f:0e:04:da:70:a7:9b:
27:0e:26:df:28:50:bd:a5:d0:df:e7:ac:b5:4f:ea:02:bb:c6:
ff:05:51:8e:02:0d:03:a7:0e:22:8e:f2:2d:c4:13:d9:ea:62:
61:51:3e:4b:f4:bc:4c:04:07:6a:8e:10:dc:f3:86:f3:ee:83:
5c:b3:f0:f3:8a:5f:e8:0f:6f:39:6f:6f:70:75:8a:77:60:1b:
f0:3a:46:2b:6c:fd:7d:71:80:1e:9e:2f:8b:1e:1a:eb:b8:84:
e3:f5:45:0f:e9:09:45:26:17:cf:0c:9e:b6:64:c1:5e:96:9b:
d3:a7:53:7f:4e:69:20:5c:92:41:aa:e8:98:5b:2c:3e:ea:fe:
c2:b2:8b:22:a8:5d:37:4f:c3:49:b5:77:cb:7a:d7:ec:a7:e0:
ac:53:39:9e:f6:94:bf:8b:35:d1:ae:c2:3e:e7:40:60:b7:b1:
5c:ba:97:84:db:06:e1:29:1c:78:7b:59:9f:b2:e7:97:e5:04:
61:40:ee:22:df:c9:7d:34:be:6a:e2:ff:a0:eb:a4:23:8a:76:
20:49:6f:18
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUGSWfKU4xPPiQFFGElQrkxIQ48jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBBQUQ5MjVFNTM0QkQ3MkU2QjNFOTg2OTIwMUQwNDZD
NzkxNkFGQzAeFw0yNjA2MTAwOTU1MTdaFw0yNjA2MTMxMDE2MTdaMDMxMTAvBgNV
BAMTKDQ3NDkyNUI0MzRCNzREMjU2RDQwQzA0QUQ0MEM1MjU4QzY3NkM0NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcp/qI+SjYFPrnQyXWqgYOkVCb
qmm9PuHAjYqMZpl/ch1nsV5YbNIKeFpVuzUzGvQ1/LPXCH6kIATxS7waclc5MjC1
im7UE9XqqMkm6gCc/mjHDc15TrUM+H58+CSEVcFcwC2gcvIcQLOmpYbb1dqIC4I+
xymk4Lh+1YsKAb54UIayHBfG/dr+KJEnn8YuFsxd2A0FPvyS8ScPg6Nkd5Tbydx8
rIGh9lvxD+jXhPGx7Gq64TvoUIjWHkMGHCwJAms4pcw+tlvCX/tA7IKvMYL197KT
RI6LjvbwPX3o/4GDqa8Qnng9fibfsax3hRYPD2qU+/ngqcIOT8F2Vvid4fvtAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUR0kltDS3TSVtQMBK1AxSWMZ2xE0wHwYDVR0j
BBgwFoAU8KrZJeU0vXLms+mGkgHQRseRavwwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud
HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8zL0Yw
QUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMuY3JsMIGFBggr
BgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3JpbGwucGVlcmluZy5l
ZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC9GMEFBRDkyNUU1
MzRCRDcyRTZCM0U5ODY5MjAxRDA0NkM3OTE2QUZDLmNlcjBpBggrBgEFBQcBCwRd
MFswWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8z
L0YwQUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMubWZ0MBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB
BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBxPXhOosvvxGuabO6Rybu+f0WgAOMPn6mtvOPxBq3IX/QLIRdcAEGzEbcI
sv4SVD8OBNpwp5snDibfKFC9pdDf56y1T+oCu8b/BVGOAg0Dpw4ijvItxBPZ6mJh
UT5L9LxMBAdqjhDc84bz7oNcs/Dzil/oD285b29wdYp3YBvwOkYrbP19cYAeni+L
HhrruITj9UUP6QlFJhfPDJ62ZMFelpvTp1N/TmkgXJJBquiYWyw+6v7CsosiqF03
T8NJtXfLetfsp+CsUzme9pS/izXRrsI+50Bgt7FcupeE2wbhKRx4e1mfsueX5QRh
QO4i38l9NL5q4v+g66QjinYgSW8Y
-----END CERTIFICATE-----
Generated at Sun Jun 14 10:46:33 2026 by rpki-client