Manifest
$ rpki-client -vvf krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft
File: 49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft (raw, json)
Hash identifier: XpTBY2e3pafOAFNSarHJZXHF2QqAod38V2tqv8iYYc8=
Subject key identifier: B4:BB:67:AF:40:BA:17:E3:39:34:C7:4B:E9:3E:51:BE:E3:25:8A:DB
Authority key identifier: 49:77:6F:25:BA:04:7D:AE:08:37:69:8D:FC:0C:1C:96:89:EE:4F:AA
Certificate issuer: /CN=49776F25BA047DAE0837698DFC0C1C9689EE4FAA
Certificate serial: 5B7EF68030846109CC42B92353496C041C270D14
Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer
Subject info access: rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft
Manifest number: 09
Signing time: Sun 10 Aug 2025 17:15:58 +0000
Manifest this update: Sun 10 Aug 2025 17:10:58 +0000
Manifest next update: Mon 11 Aug 2025 18:29:58 +0000
Files and hashes: 1: 49776F25BA047DAE0837698DFC0C1C9689EE4FAA.crl (hash: RNOmn8Ugvj6cBuogwazBuQzbnONWF0p8J4/sTKCX83o=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7e:f6:80:30:84:61:09:cc:42:b9:23:53:49:6c:04:1c:27:0d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49776F25BA047DAE0837698DFC0C1C9689EE4FAA
Validity
Not Before: Aug 10 17:10:58 2025 GMT
Not After : Aug 11 18:29:58 2025 GMT
Subject: CN=B4BB67AF40BA17E33934C74BE93E51BEE3258ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:05:92:c8:19:94:89:1a:b2:76:6c:d2:4f:
12:ba:d7:0d:f5:df:12:c9:a5:cf:c5:c1:8d:ce:11:
ed:42:6a:2b:a2:68:e6:f3:54:9c:b4:c1:94:f1:75:
ea:fc:25:24:5f:9a:9a:2e:a6:83:78:c5:ca:10:42:
b2:87:72:d1:c9:a6:e5:0e:f7:b0:d5:be:77:9e:82:
c3:c6:2a:1b:3a:c3:ff:af:c1:8a:73:b6:21:f2:a3:
af:1f:ad:6c:2a:44:b6:00:7a:60:90:cf:bf:86:f2:
26:e0:e0:67:73:3d:b3:c3:a0:51:c0:f9:2a:5e:66:
ef:65:0e:92:6a:7d:ab:86:a9:99:8d:4c:98:2b:ee:
6e:fd:3a:3b:8f:8f:fe:89:c5:85:05:ec:3b:e4:bc:
8d:81:e6:35:51:ce:21:6f:75:d0:1c:9e:f9:7c:d4:
0a:5f:ab:ec:8a:80:86:a7:eb:32:df:4a:76:2c:17:
94:5c:53:27:44:23:0f:9a:58:f1:f0:32:68:55:9b:
48:bb:27:b7:de:e3:4d:c8:c9:8c:8b:50:bd:f4:ec:
81:9a:10:38:be:60:56:ec:53:63:89:7d:4f:73:05:
50:27:5d:dd:34:92:40:5d:e9:d7:08:e4:df:15:d9:
18:e7:f0:48:da:66:6e:28:bd:ba:e2:75:ca:88:0d:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:67:AF:40:BA:17:E3:39:34:C7:4B:E9:3E:51:BE:E3:25:8A:DB
X509v3 Authority Key Identifier:
keyid:49:77:6F:25:BA:04:7D:AE:08:37:69:8D:FC:0C:1C:96:89:EE:4F:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:22:c8:80:d9:5f:5a:69:16:57:9e:5d:d2:64:a1:b3:d7:f1:
6d:f7:5c:dd:9b:5f:4a:9c:4b:f6:ee:6f:84:a5:7b:9d:5f:20:
de:5c:b1:11:88:f0:08:96:74:98:7a:e9:72:12:d9:f3:fc:06:
8b:eb:93:5b:5c:49:87:88:f6:0d:96:4b:fe:55:48:a7:3d:3e:
b2:bf:fe:8d:c7:2f:1f:f5:32:2b:0f:a0:11:28:dd:6a:25:a6:
0e:be:fc:df:72:02:52:fe:73:d0:a3:86:67:ff:f9:77:8f:e6:
bd:d3:30:93:3d:32:d8:0d:1f:7b:66:60:b7:be:f9:5a:ea:a5:
b2:37:1c:90:cd:13:2a:1b:0c:6e:7d:63:8e:b6:32:e3:a2:82:
79:cd:a3:ba:5f:a6:91:52:b9:0b:d0:c4:8f:4b:4e:1a:56:36:
b2:b4:22:7e:db:35:a2:c5:81:8f:27:f3:e5:f1:e8:00:84:83:
80:a7:41:62:e3:40:db:06:49:c8:7e:cf:0e:d5:7d:a7:3e:1c:
78:e0:e6:1f:02:c7:23:a8:02:0c:85:7f:d1:3d:94:0d:cb:87:
43:19:a1:31:98:65:75:1d:19:cf:12:e8:7d:64:8f:a0:1f:1a:
c9:20:b0:11:3d:b5:95:8f:23:d3:a0:2d:fb:e1:d5:6b:37:54:
c5:d6:a4:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:26 2025 by rpki-client