Manifest

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
File:                     160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft (raw, json)
Hash identifier:          W/wThheBfDSaRWKdtebq8qllfBbVtH86OUJBLChZ+uQ=
Subject key identifier:   8F:0F:0B:8D:8D:24:FD:73:3D:06:53:ED:EA:44:35:19:8D:2D:53:34
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Certificate issuer:       /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial:       624AA1DC5803F558A8AF8D26AC71056EBE1ACF53
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
Manifest number:          66
Signing time:             Fri 01 May 2026 04:49:13 +0000
Manifest this update:     Fri 01 May 2026 04:44:13 +0000
Manifest next update:     Sat 02 May 2026 07:57:13 +0000
Files and hashes:         1: 323830343a323639633a32643a3a2f34382d3438203d3e203637313536.roa (hash: 0zJ5viB9KKltGKQR75lE/DC4hxJjKYs/jmF9DM7tcho=)
                          2: 323830343a323639633a32653a3a2f34382d3438203d3e203637313536.roa (hash: XwYk7VaC4DO6DXTsD2xvXBpj8L5GkQFNGqSog9NBCAY=)
                          3: 323830343a323639633a32663a3a2f34382d3438203d3e203637313536.roa (hash: gGCXTOqbtmMSz7rtNNP8DjHTnaA3QxOnvJEFRIWUe+I=)
                          4: 323830343a323639633a32633a3a2f34382d3438203d3e203637313536.roa (hash: tsY+zSQsjd3uEr1sjDrg20WnZ+4QuG3OxOVw+QQfzZE=)
                          5: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl (hash: +zW3O5QzVC9MTbkfhwHHERF9DvzJ5cDBom36sY20vH0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:a1:dc:58:03:f5:58:a8:af:8d:26:ac:71:05:6e:be:1a:cf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
        Validity
            Not Before: May  1 04:44:13 2026 GMT
            Not After : May  2 07:57:13 2026 GMT
        Subject: CN=8F0F0B8D8D24FD733D0653EDEA4435198D2D5334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:49:67:4d:37:28:9b:68:6c:e3:8f:cb:5c:
                    1a:e9:21:a5:c7:89:96:27:67:9e:dd:d6:e0:3d:a5:
                    f7:a6:c0:e6:74:62:47:eb:22:1a:d8:27:37:79:78:
                    d3:23:62:3e:ee:ac:31:eb:2f:ec:3c:4b:b5:60:64:
                    b2:73:43:c5:29:87:5e:03:61:e9:07:48:de:5b:15:
                    14:a0:fc:ce:4d:b4:27:6f:b5:d4:ce:75:bd:51:e5:
                    c6:6c:42:02:6a:70:ab:29:c0:51:7e:c0:53:54:d5:
                    67:75:2f:a4:37:53:cf:74:36:a0:85:69:6a:52:86:
                    5b:5f:7e:45:6a:01:70:1b:61:10:c5:32:03:24:f8:
                    2e:68:6e:00:60:d0:33:4c:8b:d0:2e:dd:1c:e2:d7:
                    bf:c0:4e:ae:28:47:bf:18:2d:84:a1:a4:5d:8c:30:
                    04:36:a6:93:61:73:75:49:c9:08:ff:a8:d7:97:60:
                    7d:b5:06:13:b0:68:5a:4b:9a:5a:68:e8:28:05:96:
                    c3:4f:61:d9:f2:52:3e:ee:21:f8:6f:1c:37:71:c2:
                    69:fd:ea:1a:25:d6:d1:3e:f7:c1:73:d9:87:99:7c:
                    9a:4b:0f:16:2b:cc:0d:c7:62:74:7d:3b:f3:1d:2b:
                    9f:02:e0:34:5e:34:55:4e:93:2e:41:a3:20:d8:c1:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0F:0B:8D:8D:24:FD:73:3D:06:53:ED:EA:44:35:19:8D:2D:53:34
            X509v3 Authority Key Identifier:
                keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:78:99:b9:55:2c:64:ff:54:60:02:1f:6f:91:7f:95:7b:9c:
         72:8b:cf:7d:c6:be:91:73:3d:60:9a:84:a0:0a:e1:6b:9b:13:
         c4:22:83:cf:5a:83:4c:47:b0:9f:28:1f:4c:0e:70:06:6e:00:
         03:c2:59:26:c3:2c:e9:f0:5d:8e:e4:5f:dc:de:af:21:e8:d7:
         9c:99:c3:02:11:3a:65:8d:28:a2:58:1e:9d:5c:bf:15:6a:70:
         a7:c2:73:65:fc:7d:c6:c5:32:c3:03:60:36:92:79:6b:6c:73:
         70:28:c0:37:e0:b3:3a:f0:74:14:26:cc:a5:bc:45:e8:8e:df:
         c6:07:ac:cc:a3:fb:fd:63:40:51:ea:87:3a:96:bd:c6:e6:53:
         e9:88:a3:14:83:96:24:ca:10:77:bb:b0:05:7a:09:0f:06:60:
         58:13:a0:21:52:4b:1a:9d:54:03:32:ec:1e:f5:f0:25:b9:e0:
         be:06:77:71:ad:0f:b7:1d:40:ab:b2:ad:82:62:b2:e7:aa:7d:
         a8:d5:07:38:18:1d:eb:4c:af:b1:66:37:58:86:4f:6f:87:83:
         82:a0:69:a8:80:9c:70:27:3f:ed:8e:23:1b:7d:14:60:96:29:
         4b:63:e4:03:85:e2:94:3e:d3:56:07:8c:29:c6:db:3b:a0:19:
         6a:30:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----