Manifest

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.mft
File:                     0E44F0E672780E468C3C993198615894008AD128.mft (raw, json)
Hash identifier:          9GNtkQaiYvxgdBIHAz/noEVdk9Jm+kYDwvmk4d6D3iY=
Subject key identifier:   86:3C:A0:83:24:F8:0C:5E:5E:8C:94:5F:EF:B1:4E:A1:40:27:2B:9A
Authority key identifier: 0E:44:F0:E6:72:78:0E:46:8C:3C:99:31:98:61:58:94:00:8A:D1:28
Certificate issuer:       /CN=0e44f0e672780e468c3c993198615894008ad128
Certificate serial:       365C770A4EAC793C66D53C486190F1762B2ED0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkTw5nJ4DkaMPJkxmGFYlACK0Sg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.mft
Manifest number:          0B
Signing time:             Sun 19 Oct 2025 08:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 07:56:00 +0000
Manifest next update:     Mon 20 Oct 2025 10:57:00 +0000
Files and hashes:         1: AS214675.asa (hash: 8BVZ9hfVKRCV4U0q+ZUP74VTYEzAJyced6M77HwKQaw=)
                          2: 0E44F0E672780E468C3C993198615894008AD128.crl (hash: jvBOYTW5boKX1MTHyIn/EiMmaigCtdfFzHRs5HQqeLs=)
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkTw5nJ4DkaMPJkxmGFYlACK0Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5c:77:0a:4e:ac:79:3c:66:d5:3c:48:61:90:f1:76:2b:2e:d0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e44f0e672780e468c3c993198615894008ad128
        Validity
            Not Before: Oct 19 07:56:00 2025 GMT
            Not After : Oct 20 10:57:00 2025 GMT
        Subject: CN=863CA08324F80C5E5E8C945FEFB14EA140272B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:18:ac:3b:93:d3:cd:bb:d9:65:d3:29:0f:
                    5f:a7:a6:89:00:70:d0:10:af:39:fd:82:f8:d7:16:
                    22:93:f0:ae:77:93:9e:da:65:0a:d2:85:f3:f6:d3:
                    3a:02:ec:59:6d:f5:d4:2e:2c:04:ac:ba:ea:51:30:
                    8b:4e:e8:97:3d:f8:b2:df:62:11:a3:fa:4e:5f:dc:
                    44:56:f4:31:e8:27:4e:e4:09:c3:3d:b4:bb:d1:ab:
                    c5:36:40:9f:31:ae:32:0f:e4:a3:35:fd:89:ad:57:
                    90:04:56:79:6e:73:2d:25:d5:10:b9:f0:a6:36:d6:
                    dc:da:f6:34:01:a0:cd:16:13:4b:62:46:22:60:e7:
                    52:2a:b4:11:3c:3d:de:ba:d2:85:50:10:e9:12:92:
                    ae:e1:af:56:bc:42:61:e2:d6:ce:32:7c:6b:e2:73:
                    cb:c0:e2:a5:ff:ed:0d:4e:10:38:c3:49:c5:2e:e4:
                    2e:02:e6:41:8a:cf:bb:d2:25:8a:48:ae:78:b8:cf:
                    81:1a:35:f1:17:5d:1e:7d:a4:17:94:da:0d:26:6e:
                    50:4f:b2:b4:16:9d:5b:7c:cd:ca:8a:57:0c:05:8f:
                    18:ee:3a:8f:2c:09:b5:fe:fc:d2:8c:c3:c8:f1:1e:
                    f0:4d:27:ce:ba:5e:cb:a6:fd:fb:87:da:43:b4:87:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3C:A0:83:24:F8:0C:5E:5E:8C:94:5F:EF:B1:4E:A1:40:27:2B:9A
            X509v3 Authority Key Identifier:
                keyid:0E:44:F0:E6:72:78:0E:46:8C:3C:99:31:98:61:58:94:00:8A:D1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTw5nJ4DkaMPJkxmGFYlACK0Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:19:8a:cf:1d:d7:60:a8:2b:f9:18:fd:dc:05:9f:78:18:00:
         22:ae:e4:90:32:2d:e1:b8:d0:4e:e7:88:1a:16:e3:86:2a:4c:
         d0:5d:0a:da:ec:9a:bc:e3:46:78:3f:b2:bf:d7:3b:8a:cc:33:
         ae:0a:0b:9f:2c:33:df:0c:5c:96:7d:1f:76:70:bd:a0:19:1c:
         de:79:af:df:cc:07:26:43:4a:99:ff:5a:6b:c9:bc:a4:69:9c:
         10:0d:64:2e:99:a5:ab:f5:7b:00:bb:63:ff:28:93:7f:3f:54:
         0e:f5:d4:9c:e4:78:b4:87:e6:f2:32:51:1e:e4:33:4f:86:b1:
         9e:19:16:bc:f0:46:ff:a0:35:46:0d:2e:bd:5f:bf:c2:f0:65:
         4f:af:76:68:e6:a4:2d:10:bd:d7:e1:26:cc:a4:24:cc:28:44:
         c1:28:bd:f6:48:51:82:cd:48:61:c6:c6:57:4e:39:31:9e:61:
         a5:d1:61:12:84:db:5d:4f:8b:2d:8d:2f:94:a9:c4:00:a7:5e:
         1e:51:ba:c9:af:68:3c:6b:51:9c:6c:f2:02:57:07:12:e0:28:
         e8:5a:2f:f8:c0:7f:80:9a:fc:dd:c4:f8:d1:ee:76:a5:ce:38:
         d9:c4:d2:73:eb:f7:d8:fe:50:29:97:45:0e:d7:0f:25:8a:b2:
         fa:11:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:17 2025 by rpki-client