
Manifest
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.mft (raw, json)
Hash identifier: SvF/iZbfCowXOZAeLW/Kq6c7V+O/JwpOzhY5Vq7hp1M=
Subject key identifier: 4B:AF:BF:EB:4E:C8:1A:DB:C6:C4:ED:FA:70:9D:E3:81:09:11:95:B7
Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Certificate serial: 1604D932B418208DE6408758084AC9F9A26CB1AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
Manifest number: 0178
Signing time: Thu 21 May 2026 20:28:24 +0000
Manifest this update: Thu 21 May 2026 20:23:24 +0000
Manifest next update: Fri 22 May 2026 21:17:24 +0000
Files and hashes: 1: F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer (hash: ScgG5ypaeO0ivdmI6SNNgf+q7FXfwDPGvrjvRMVKylQ=)
2: 3F8EBCC0428DD608F39D858BE891B85B0032681A.crl (hash: SQrI7+dNaMW7QREthvOQ1eeyKfD0QcQNvzSGk0p5QY0=)
3: AS61574.roa (hash: 51uHWrQWZmk1+E5D6h1C65mBe8spxx1/hHUYRDyBkqM=)
4: AS61574.asa (hash: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=)
5: AS61575.roa (hash: 28h1c2Unte9m6JfK2qV2CncYmTmTY54Ou2BLMXZE2TI=)
6: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer (hash: 759JSWPMroO0sBWluFHTkhK9ORxLa6aiqvD62ap7QMU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:04:d9:32:b4:18:20:8d:e6:40:87:58:08:4a:c9:f9:a2:6c:b1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Validity
Not Before: May 21 20:23:24 2026 GMT
Not After : May 22 21:17:24 2026 GMT
Subject: CN=4BAFBFEB4EC81ADBC6C4EDFA709DE381091195B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:17:0d:bb:db:d6:28:9c:5f:2d:a3:ec:3f:
93:80:94:e0:6c:93:a1:2d:67:af:88:23:67:0b:0a:
05:09:b6:4e:03:75:33:e2:b6:12:15:ef:e8:56:b7:
1f:88:d4:00:6e:a4:fa:a6:cb:d0:e2:61:51:99:a1:
59:8d:a3:05:f9:f1:e8:fd:dd:32:93:4b:43:c6:4f:
8d:17:a0:26:6d:7e:36:61:ca:2e:6b:08:8c:0e:76:
52:ac:ad:1b:23:1b:44:46:90:d9:b7:72:35:9c:c6:
8a:f5:b8:eb:52:54:fc:f5:a1:44:e6:f3:0a:9f:66:
38:af:bf:e4:f4:c7:a6:44:08:27:a0:7b:26:e7:da:
c3:34:24:c4:6e:20:ea:36:6d:14:0b:17:94:4c:2a:
47:4d:ba:ef:47:0b:17:31:b5:7d:47:94:03:3d:19:
73:af:57:7d:c4:ee:9d:37:d5:d0:bd:13:3f:c4:7b:
c5:cf:58:55:d9:4f:b6:c9:ad:fc:f9:76:77:87:6e:
86:5d:e9:b4:ad:dd:27:60:9b:34:f7:79:f4:da:ad:
51:a5:2a:00:67:cc:a8:01:c5:33:8e:a1:e4:97:77:
03:b9:82:92:45:f9:3b:22:ba:d1:b5:bc:03:d9:2c:
d7:13:e7:7f:8c:4e:19:cf:93:96:56:92:ee:2f:70:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AF:BF:EB:4E:C8:1A:DB:C6:C4:ED:FA:70:9D:E3:81:09:11:95:B7
X509v3 Authority Key Identifier:
keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2a:1d:18:ca:54:65:5d:8f:80:c3:74:5f:57:2d:ea:45:61:
3a:ad:d6:c2:8c:de:d4:24:7a:12:f9:ee:ec:2b:09:0b:fc:b9:
8a:a1:2e:e7:ea:32:b7:a9:09:55:be:e6:72:4b:2b:92:db:8c:
3d:bc:30:03:6e:bf:1b:5a:9a:9f:f3:a6:6c:33:a0:92:54:97:
00:f0:ce:7e:8d:1a:23:d0:54:84:4b:16:ff:a5:de:68:8f:6e:
49:c0:d0:8c:43:d4:67:62:63:f5:f0:73:04:ac:8c:da:59:6c:
50:70:fe:ea:bf:07:28:9d:b0:d0:ed:38:49:38:6e:5a:16:2b:
07:43:f2:fa:40:cd:f7:e9:d0:21:a6:d6:85:40:f5:af:ef:34:
27:1a:6b:c1:dc:c0:fc:56:c5:90:e2:6a:2b:73:70:5d:78:df:
dd:8b:72:a5:e7:ff:f4:de:3a:30:9f:c3:9f:27:81:48:25:26:
35:84:c3:c7:db:af:70:d4:00:8b:9b:1e:ec:d5:d9:04:a7:9b:
82:90:59:57:86:ae:32:1f:a5:a1:30:d5:c3:41:48:ff:15:48:
82:44:b4:f5:8d:33:6d:e5:6b:30:f8:57:42:ca:96:db:e9:4d:
c2:4d:b0:86:17:3b:cd:c8:8e:5b:a8:a9:9a:85:93:ea:aa:d9:
62:aa:c1:76
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUFgTZMrQYII3mQIdYCErJ+aJssaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw
MDMyNjgxQTAeFw0yNjA1MjEyMDIzMjRaFw0yNjA1MjIyMTE3MjRaMDMxMTAvBgNV
BAMTKDRCQUZCRkVCNEVDODFBREJDNkM0RURGQTcwOURFMzgxMDkxMTk1QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdhcNu9vWKJxfLaPsP5OAlOBs
k6EtZ6+II2cLCgUJtk4DdTPithIV7+hWtx+I1ABupPqmy9DiYVGZoVmNowX58ej9
3TKTS0PGT40XoCZtfjZhyi5rCIwOdlKsrRsjG0RGkNm3cjWcxor1uOtSVPz1oUTm
8wqfZjivv+T0x6ZECCegeybn2sM0JMRuIOo2bRQLF5RMKkdNuu9HCxcxtX1HlAM9
GXOvV33E7p031dC9Ez/Ee8XPWFXZT7bJrfz5dneHboZd6bSt3SdgmzT3efTarVGl
KgBnzKgBxTOOoeSXdwO5gpJF+TsiutG1vAPZLNcT53+MThnPk5ZWku4vcKiRAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUS6+/607IGtvGxO36cJ3jgQkRlbcwHwYDVR0j
BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud
HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l
ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1
OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH
MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw
by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy
MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl
cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhF
QkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
iyodGMpUZV2PgMN0X1ct6kVhOq3Wwoze1CR6Evnu7CsJC/y5iqEu5+oyt6kJVb7m
cksrktuMPbwwA26/G1qan/OmbDOgklSXAPDOfo0aI9BUhEsW/6XeaI9uScDQjEPU
Z2Jj9fBzBKyM2llsUHD+6r8HKJ2w0O04SThuWhYrB0Py+kDN9+nQIabWhUD1r+80
JxprwdzA/FbFkOJqK3NwXXjf3Ytypef/9N46MJ/DnyeBSCUmNYTDx9uvcNQAi5se
7NXZBKebgpBZV4auMh+loTDVw0FI/xVIgkS09Y0zbeVrMPhXQsqW2+lNwk2whhc7
zciOW6ipmoWT6qrZYqrBdg==
-----END CERTIFICATE-----
Generated at Sun May 24 14:07:12 2026 by rpki-client