Manifest

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
File:                     8568BF579F56F4139D364514D84EA5EE01CC8048.mft (raw, json)
Hash identifier:          bfoSOPQhqNNw8osDKry/9nc03mVn0pxU6g+du8bLxEo=
Subject key identifier:   CD:7F:DF:5F:71:5C:BD:A2:CF:ED:B0:A2:B5:AC:44:F5:CB:BA:AC:0B
Authority key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48
Certificate issuer:       /CN=8568bf579f56f4139d364514d84ea5ee01cc8048
Certificate serial:       19437E5081197104DD519C9466963E37F2CD1AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
Manifest number:          A5
Signing time:             Sun 01 Mar 2026 11:15:23 +0000
Manifest this update:     Sun 01 Mar 2026 11:10:23 +0000
Manifest next update:     Mon 02 Mar 2026 11:38:23 +0000
Files and hashes:         1: 8568BF579F56F4139D364514D84EA5EE01CC8048.crl (hash: CSeR7/FEqFO2uwYQZVRN7zmGu+3laL1Fvysx8CNqSJ0=)
                          2: AS214675.asa (hash: 1oOoiKXWiUgd0/E9gi4ag6XFrGfgb5PMaVjPKNaflSE=)
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 11:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:43:7e:50:81:19:71:04:dd:51:9c:94:66:96:3e:37:f2:cd:1a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568bf579f56f4139d364514d84ea5ee01cc8048
        Validity
            Not Before: Mar  1 11:10:23 2026 GMT
            Not After : Mar  2 11:38:23 2026 GMT
        Subject: CN=CD7FDF5F715CBDA2CFEDB0A2B5AC44F5CBBAAC0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:b7:3c:30:b8:5b:9a:01:a3:93:87:46:13:
                    06:4a:3d:a5:f0:1c:a4:5b:35:32:43:21:14:14:9c:
                    55:c5:4f:e0:5f:cb:2d:54:55:00:8c:9a:d1:4a:d0:
                    85:97:5c:88:63:03:e9:f9:fc:11:e3:a1:53:e1:8a:
                    d6:34:05:f6:2b:af:b2:b2:ee:23:61:5c:47:6c:bd:
                    51:39:db:37:f0:68:87:85:5d:e7:98:8b:29:bb:5b:
                    bb:cf:7b:d6:56:41:32:6d:fb:20:36:77:f1:1d:94:
                    db:db:1d:98:9b:75:74:84:d8:df:25:fa:65:24:6c:
                    1c:58:27:0d:5e:b5:bd:bb:7b:5e:8e:1d:a3:88:f6:
                    35:61:7c:fa:ce:f4:83:dd:92:57:f4:80:14:ab:f0:
                    a9:92:88:73:f8:f4:80:07:4c:2b:88:8a:0c:8a:51:
                    d8:a2:e2:ee:38:b0:f7:4e:35:c3:19:5d:84:c5:3b:
                    20:49:29:3c:33:2b:f5:df:ed:a8:b6:2d:c0:e6:89:
                    6a:3c:44:20:bf:99:99:91:74:03:aa:67:87:f2:e0:
                    1f:b5:b3:21:b6:d2:85:3b:31:86:58:bd:f1:64:29:
                    5c:57:6c:23:10:a9:f9:d6:f3:bf:b8:e8:2a:a1:76:
                    2d:37:d6:a2:ec:f7:a9:c6:8b:39:7f:18:05:fe:63:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7F:DF:5F:71:5C:BD:A2:CF:ED:B0:A2:B5:AC:44:F5:CB:BA:AC:0B
            X509v3 Authority Key Identifier:
                keyid:85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:9a:46:5b:d8:7f:75:9e:95:9c:85:ba:2c:69:bc:43:f1:27:
         30:2e:fb:f4:a0:33:ea:b8:d9:b4:d0:01:c1:19:66:36:46:ac:
         62:a0:4b:04:3b:0f:61:5d:6e:20:f2:ba:6d:06:a6:d8:dc:cf:
         71:15:ec:4e:83:15:8a:98:a5:a8:f8:96:1d:75:8f:5d:e4:d6:
         8d:d7:88:79:17:08:52:bb:86:d5:65:f5:73:6e:8e:41:99:ac:
         25:cd:6a:fe:56:b6:1a:ac:8d:54:a6:a5:8c:51:f8:ed:13:0b:
         de:ae:25:32:93:44:dd:85:c9:1a:d5:94:82:0d:c4:4e:d0:69:
         4a:32:bd:10:b6:5b:bb:c9:43:9f:36:ad:45:55:94:59:5d:e9:
         50:42:33:fd:d9:a4:06:23:b1:ef:44:c6:c7:b4:35:ac:72:1f:
         76:b5:97:a8:f9:ea:50:53:b6:80:91:96:7a:45:fb:1d:de:62:
         19:64:c7:ca:02:a5:85:af:2c:99:36:e1:ef:e9:33:dc:cf:57:
         b7:29:6e:5b:41:69:e3:73:56:d0:61:f4:6f:90:a4:70:21:96:
         15:3f:fd:bc:21:f7:f6:ed:a5:e1:1b:95:42:51:11:bd:f9:05:
         04:f8:32:9c:0a:98:79:fc:78:b3:2e:6a:9b:6f:f3:7d:b3:06:
         e7:4c:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:44 2026 by rpki-client