Manifest
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.mft
File: DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.mft (raw, json)
Hash identifier: fjnr75Zm+oSxBjt+frHJyLJclrKYcD2DpdC06XDOm4A=
Subject key identifier: 30:E5:6A:3A:57:AA:11:D4:EF:3E:00:0D:B9:79:18:E4:5F:C5:A4:18
Authority key identifier: DF:41:A1:B5:B6:CD:57:DC:9E:A5:70:20:80:7F:E9:1B:3B:A4:FD:4D
Certificate issuer: /CN=df41a1b5b6cd57dc9ea57020807fe91b3ba4fd4d
Certificate serial: 7E78C6707B9A2D092C857784F2BE327208A2CE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30GhtbbNV9yepXAggH_pGzuk_U0.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.mft
Manifest number: 05
Signing time: Sun 03 Aug 2025 16:19:33 +0000
Manifest this update: Sun 03 Aug 2025 16:14:33 +0000
Manifest next update: Mon 04 Aug 2025 20:05:33 +0000
Files and hashes: 1: DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.crl (hash: TCGEQGtqSd5pI9dD79WWyGfaHlvz7VTOz8h91Iorpik=)
2: AS214402.asa (hash: Tuozt2YbIZoaVasSDwpzWju/mnBRN69xiprNx3nwukc=)
3: AS214714.asa (hash: PED5z2dY0hfFQaBWtbU7/ozAXZDCpyrowDusGyT5KM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:78:c6:70:7b:9a:2d:09:2c:85:77:84:f2:be:32:72:08:a2:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df41a1b5b6cd57dc9ea57020807fe91b3ba4fd4d
Validity
Not Before: Aug 3 16:14:33 2025 GMT
Not After : Aug 4 20:05:33 2025 GMT
Subject: CN=30E56A3A57AA11D4EF3E000DB97918E45FC5A418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:16:93:7d:eb:43:39:3a:c3:bd:4e:2f:46:
55:8f:db:1e:99:89:0c:07:5c:1b:c4:71:08:1f:cb:
32:e8:1a:78:3e:52:16:2f:a3:3b:94:8a:b9:a6:2e:
24:81:89:a9:15:bc:95:69:f6:cd:7b:c1:8a:b5:b1:
0a:59:c1:8e:c3:07:ca:43:14:c6:8d:fb:c6:80:44:
3e:59:cb:b7:28:96:74:2c:cf:2f:5b:6f:a5:b0:3d:
f7:ee:75:b5:b3:a7:60:a3:ea:26:6f:4b:98:bd:7f:
73:4b:88:92:67:73:0a:26:71:f3:5b:3e:9a:1a:94:
36:bd:86:48:a3:1f:34:f8:e1:b3:85:3d:9b:ee:81:
58:cb:3d:2c:36:a0:bd:d5:9f:74:25:22:7c:28:ff:
aa:9b:b6:b6:cf:7e:14:27:e7:cb:94:ff:69:d6:98:
06:41:e7:15:ff:c3:8a:46:84:02:28:42:aa:d3:84:
62:55:bd:95:e3:59:c7:51:34:6f:63:15:e5:6c:53:
c5:ef:70:7e:e2:8d:6c:73:9b:25:76:b7:fd:d9:e5:
d1:3e:b5:79:81:c6:95:90:aa:3b:c3:87:c3:71:2d:
e8:96:48:9d:f4:6d:17:3d:3d:6d:87:0a:24:db:8f:
e6:13:11:ef:73:9b:49:ea:c5:2b:b2:e9:c0:08:7c:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:6A:3A:57:AA:11:D4:EF:3E:00:0D:B9:79:18:E4:5F:C5:A4:18
X509v3 Authority Key Identifier:
keyid:DF:41:A1:B5:B6:CD:57:DC:9E:A5:70:20:80:7F:E9:1B:3B:A4:FD:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30GhtbbNV9yepXAggH_pGzuk_U0.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:84:11:2d:c1:79:78:7e:f0:14:28:98:2d:99:ba:c0:e9:a8:
59:14:d9:f4:23:d5:3d:b8:72:d1:2a:b8:29:93:49:52:eb:6c:
c9:88:d2:fc:a5:30:df:c5:b1:b3:59:3c:dc:fe:df:ee:e2:72:
2f:e6:3c:17:67:07:0a:41:14:3c:ab:ba:41:0b:2b:08:43:a7:
74:3b:39:61:78:7d:fe:59:a1:38:fd:98:6a:ff:7e:56:f1:70:
cd:1a:97:d7:f3:d6:81:ab:72:61:59:3a:c3:c5:d8:ef:d4:87:
c3:0b:a8:86:aa:5e:97:b1:f7:15:ab:15:5c:89:50:7e:4c:f9:
e8:69:d4:d8:7b:14:20:85:f6:cb:45:14:fa:32:d2:04:30:5e:
1d:f8:d1:11:58:8e:46:ee:8d:ca:d3:b9:95:f6:52:b8:d8:61:
49:91:21:af:3f:15:a1:7b:78:f9:38:5c:e4:25:b0:3b:0e:b7:
4d:6b:bd:3d:06:4c:cf:ec:28:65:97:b5:e3:7f:a4:04:f3:ce:
77:ae:61:12:78:08:42:f5:70:47:3b:d3:c4:8c:e6:a6:22:15:
73:2f:c2:e4:97:16:4a:14:b2:ed:5c:da:d1:89:ca:40:c5:88:
67:31:1e:cb:f3:0e:fc:e8:fc:87:ca:3d:ea:03:74:58:25:dd:
13:44:0f:4c
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgIUfnjGcHuaLQkshXeE8r4ycgiizoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY0MWExYjViNmNkNTdkYzllYTU3MDIwODA3ZmU5MWIz
YmE0ZmQ0ZDAeFw0yNTA4MDMxNjE0MzNaFw0yNTA4MDQyMDA1MzNaMDMxMTAvBgNV
BAMTKDMwRTU2QTNBNTdBQTExRDRFRjNFMDAwREI5NzkxOEU0NUZDNUE0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLRaTfetDOTrDvU4vRlWP2x6Z
iQwHXBvEcQgfyzLoGng+UhYvozuUirmmLiSBiakVvJVp9s17wYq1sQpZwY7DB8pD
FMaN+8aARD5Zy7colnQszy9bb6WwPffudbWzp2Cj6iZvS5i9f3NLiJJncwomcfNb
PpoalDa9hkijHzT44bOFPZvugVjLPSw2oL3Vn3QlInwo/6qbtrbPfhQn58uU/2nW
mAZB5xX/w4pGhAIoQqrThGJVvZXjWcdRNG9jFeVsU8XvcH7ijWxzmyV2t/3Z5dE+
tXmBxpWQqjvDh8NxLeiWSJ30bRc9PW2HCiTbj+YTEe9zm0nqxSuy6cAIfBObAgMB
AAGjggH3MIIB8zAdBgNVHQ4EFgQUMOVqOleqEdTvPgANuXkY5F/FpBgwHwYDVR0j
BBgwFoAU30GhtbbNV9yepXAggH/pGzuk/U0wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3Np
Z25hbHgtcnBraS81L0RGNDFBMUI1QjZDRDU3REM5RUE1NzAyMDgwN0ZFOTFCM0JB
NEZENEQuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMEdodGJiTlY5eWVwWEFn
Z0hfcEd6dWtfVTAuY2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5
bmM6Ly9rcmlsbC5zaWduYWx4LmNsb3VkL3JlcG8vc2lnbmFseC1ycGtpLzUvREY0
MUExQjVCNkNENTdEQzlFQTU3MDIwODA3RkU5MUIzQkE0RkQ0RC5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AD2EES3BeXh+8BQomC2ZusDpqFkU2fQj1T24ctEquCmTSVLrbMmI0vylMN/FsbNZ
PNz+3+7ici/mPBdnBwpBFDyrukELKwhDp3Q7OWF4ff5ZoTj9mGr/flbxcM0al9fz
1oGrcmFZOsPF2O/Uh8MLqIaqXpex9xWrFVyJUH5M+ehp1Nh7FCCF9stFFPoy0gQw
Xh340RFYjkbujcrTuZX2UrjYYUmRIa8/FaF7ePk4XOQlsDsOt01rvT0GTM/sKGWX
teN/pATzzneuYRJ4CEL1cEc708SM5qYiFXMvwuSXFkoUsu1c2tGJykDFiGcxHsvz
Dvzo/IfKPeoDdFgl3RNED0w=
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:45 2025 by rpki-client