Manifest
$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
File: 2D72E7D6FDABD303C499DB2904070A42E39AC887.mft (raw, json)
Hash identifier: kUfaWgsbNXLu5FE/EYXRpYR5698FckOs3eokMlRp5iI=
Subject key identifier: DA:1A:2B:56:D1:2F:6A:B8:68:4A:BA:E6:A2:D8:3C:A6:FC:A0:D8:B7
Authority key identifier: 2D:72:E7:D6:FD:AB:D3:03:C4:99:DB:29:04:07:0A:42:E3:9A:C8:87
Certificate issuer: /CN=2d72e7d6fdabd303c499db2904070a42e39ac887
Certificate serial: 57AB6D0968192CE25EBB73CDEE9A9B1BB3DB1382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXLn1v2r0wPEmdspBAcKQuOayIc.cer
Subject info access: rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
Manifest number: 3A
Signing time: Fri 01 Aug 2025 08:10:27 +0000
Manifest this update: Fri 01 Aug 2025 08:05:27 +0000
Manifest next update: Sat 02 Aug 2025 11:11:27 +0000
Files and hashes: 1: AS214714.asa (hash: dMIvWYr5cT6yA7ea4jA4s9QlpNW83Udb+pWTNpIC6fQ=)
2: 2D72E7D6FDABD303C499DB2904070A42E39AC887.crl (hash: r5NBWbVtEWodWK2+i0gwg05MD37nWpyQOj3hd4ExxTg=)
3: AS214402.asa (hash: HoDL3B5AbSPcY9XIBhv/AMjkjOrdTvKNvvTiFXjvWqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ab:6d:09:68:19:2c:e2:5e:bb:73:cd:ee:9a:9b:1b:b3:db:13:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d72e7d6fdabd303c499db2904070a42e39ac887
Validity
Not Before: Aug 1 08:05:27 2025 GMT
Not After : Aug 2 11:11:27 2025 GMT
Subject: CN=DA1A2B56D12F6AB8684ABAE6A2D83CA6FCA0D8B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:33:c6:21:94:76:ef:6c:2a:e5:e9:cb:28:
0f:49:89:04:94:84:2b:d0:38:21:30:70:01:00:62:
a7:fd:45:2f:d8:b6:24:41:a2:df:83:0f:e2:c9:2a:
71:41:40:fc:1a:4b:21:7a:da:81:85:b0:9e:43:97:
ab:80:ec:f9:90:21:b1:c3:3f:7b:51:e9:34:35:ec:
c7:05:78:b5:d1:65:e2:9f:2b:03:c8:cc:66:4f:65:
dd:a9:5b:6a:c7:52:c0:c1:03:58:4b:40:2f:82:be:
de:ea:56:8f:51:7d:ee:e2:9a:d5:10:a7:54:63:c3:
b4:04:39:19:41:ee:17:47:e8:f0:12:a8:10:ce:8e:
7f:33:f1:77:ae:35:28:c9:6f:05:3a:9b:22:9e:ab:
64:44:10:30:25:91:96:43:0a:68:30:60:5f:86:68:
b3:01:c9:35:91:63:e8:fb:c7:a3:fd:4f:fa:87:80:
b3:36:6d:ab:5e:42:c9:55:13:d1:f7:66:14:78:09:
1e:25:c7:b3:b1:dd:94:a5:d1:b3:bb:18:c1:af:f7:
5b:58:bd:1b:c5:29:61:7f:ee:35:8c:78:ec:66:09:
eb:83:c9:91:7d:b5:4d:12:a6:82:3c:f4:e8:3d:8c:
5b:9e:a1:b9:78:0e:7b:06:ac:fb:23:92:25:25:fb:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:2B:56:D1:2F:6A:B8:68:4A:BA:E6:A2:D8:3C:A6:FC:A0:D8:B7
X509v3 Authority Key Identifier:
keyid:2D:72:E7:D6:FD:AB:D3:03:C4:99:DB:29:04:07:0A:42:E3:9A:C8:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXLn1v2r0wPEmdspBAcKQuOayIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a5:54:78:cf:8a:7e:b3:12:be:7b:0f:a3:0d:1b:5a:98:fe:
f9:84:e9:f3:7d:00:c1:f5:30:3d:db:c0:31:92:d2:f9:35:5d:
ce:8b:4b:47:23:07:45:0a:06:81:f6:a3:86:ef:60:db:78:51:
82:92:76:fe:28:5c:b2:85:62:4a:25:b0:5a:03:47:e2:30:6c:
84:ef:5d:8f:f0:0d:9a:0f:2e:6b:05:5e:db:21:19:39:04:c8:
c1:2c:d3:d2:e8:1f:b2:10:19:89:20:21:81:33:bd:2f:66:57:
08:87:ed:8e:a2:5b:c5:9a:32:56:4a:16:1f:eb:d5:e4:e8:5e:
a9:9b:e6:16:ca:14:72:28:bd:87:8c:94:df:fe:cd:af:ac:2c:
ea:35:21:2f:50:24:78:6c:e3:c8:67:5b:2c:2c:41:f7:e7:98:
1f:f3:61:cf:aa:51:30:35:3d:89:96:7e:08:dd:34:04:88:3d:
79:b7:ef:c6:5b:65:0b:3b:b6:94:1f:82:71:13:e2:a9:a4:56:
00:f7:ec:d1:27:af:d2:df:b9:92:53:7b:b0:16:34:b8:fb:99:
09:71:bf:05:46:3b:d2:46:d1:a4:33:bb:66:49:14:a6:4a:4e:
c8:35:5e:f9:ca:b1:09:b4:e8:5d:e9:74:f5:63:45:1b:a6:a2:
fe:41:e2:4f
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUV6ttCWgZLOJeu3PN7pqbG7PbE4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmQ3MmU3ZDZmZGFiZDMwM2M0OTlkYjI5MDQwNzBhNDJl
MzlhYzg4NzAeFw0yNTA4MDEwODA1MjdaFw0yNTA4MDIxMTExMjdaMDMxMTAvBgNV
BAMTKERBMUEyQjU2RDEyRjZBQjg2ODRBQkFFNkEyRDgzQ0E2RkNBMEQ4QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFzPGIZR272wq5enLKA9JiQSU
hCvQOCEwcAEAYqf9RS/YtiRBot+DD+LJKnFBQPwaSyF62oGFsJ5Dl6uA7PmQIbHD
P3tR6TQ17McFeLXRZeKfKwPIzGZPZd2pW2rHUsDBA1hLQC+Cvt7qVo9Rfe7imtUQ
p1Rjw7QEORlB7hdH6PASqBDOjn8z8XeuNSjJbwU6myKeq2REEDAlkZZDCmgwYF+G
aLMByTWRY+j7x6P9T/qHgLM2bateQslVE9H3ZhR4CR4lx7Ox3ZSl0bO7GMGv91tY
vRvFKWF/7jWMeOxmCeuDyZF9tU0SpoI89Og9jFueobl4DnsGrPsjkiUl+worAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU2horVtEvarhoSrrmotg8pvyg2LcwHwYDVR0j
BBgwFoAULXLn1v2r0wPEmdspBAcKQuOayIcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5zaWduYWx4LnJvL3JlcG8vc2lnbmFs
eC1ycGtpLzEvMkQ3MkU3RDZGREFCRDMwM0M0OTlEQjI5MDQwNzBBNDJFMzlBQzg4
Ny5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xYTG4xdjJyMHdQRW1kc3BCQWNL
UXVPYXlJYy5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov
L3Jwa2kuc2lnbmFseC5yby9yZXBvL3NpZ25hbHgtcnBraS8xLzJENzJFN0Q2RkRB
QkQzMDNDNDk5REIyOTA0MDcwQTQyRTM5QUM4ODcubWZ0MBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV
BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvpVR4z4p+
sxK+ew+jDRtamP75hOnzfQDB9TA928AxktL5NV3Oi0tHIwdFCgaB9qOG72DbeFGC
knb+KFyyhWJKJbBaA0fiMGyE712P8A2aDy5rBV7bIRk5BMjBLNPS6B+yEBmJICGB
M70vZlcIh+2OolvFmjJWShYf69Xk6F6pm+YWyhRyKL2HjJTf/s2vrCzqNSEvUCR4
bOPIZ1ssLEH355gf82HPqlEwNT2Jln4I3TQEiD15t+/GW2ULO7aUH4JxE+KppFYA
9+zRJ6/S37mSU3uwFjS4+5kJcb8FRjvSRtGkM7tmSRSmSk7INV75yrEJtOhd6XT1
Y0UbpqL+QeJP
-----END CERTIFICATE-----
Generated at Wed Sep 3 03:34:26 2025 by rpki-client