Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File:                     3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier:          3xY8GMVSs6ouZ1vieFiLxTpKQuHEcTDWdyxU4xYKmkY=
Subject key identifier:   9E:B0:1A:12:FF:23:AB:FF:34:C5:D5:EC:4E:57:34:0B:8E:FC:10:80
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       2D4822146ABF1F0C3CDBDEE3F5724155CEC312A7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number:          0554
Signing time:             Tue 29 Apr 2025 12:59:17 +0000
Manifest this update:     Tue 29 Apr 2025 12:54:17 +0000
Manifest next update:     Wed 30 Apr 2025 13:08:17 +0000
Files and hashes:         1: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=)
                          2: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=)
                          3: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: lQTq9RsHgzoOJOpwd5SHYft9LSEuSrbp2RjQHnTR/r8=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:22:14:6a:bf:1f:0c:3c:db:de:e3:f5:72:41:55:ce:c3:12:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Apr 29 12:54:17 2025 GMT
            Not After : Apr 30 13:08:17 2025 GMT
        Subject: CN=9EB01A12FF23ABFF34C5D5EC4E57340B8EFC1080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:c6:44:52:22:09:99:57:3b:34:d2:2a:57:
                    e5:71:35:aa:0c:7c:2f:4f:6c:ed:1d:a2:3a:23:f3:
                    46:39:ef:7b:5d:7f:9c:b4:9d:09:f9:f3:1c:43:05:
                    7a:6a:16:a5:53:2a:b6:fa:94:1b:19:ce:07:d7:9b:
                    dd:0e:38:ec:20:96:f7:7b:65:7f:a7:88:95:ac:90:
                    4b:3d:f7:bf:72:f9:20:6d:99:11:f5:51:79:ab:11:
                    39:53:8f:08:96:37:bf:29:bb:48:c8:ec:e3:81:be:
                    d6:7e:5d:0f:90:87:68:dd:97:07:a3:b3:c2:7d:ad:
                    68:6d:40:48:2b:1e:ea:56:ee:4d:0b:ed:59:f5:12:
                    0b:b7:1e:49:03:1e:ee:0c:5b:81:ea:53:8f:97:5c:
                    4d:be:7f:bd:08:2c:20:ef:b3:ce:d1:72:8f:b1:83:
                    8c:1b:64:ea:48:b4:1b:9d:74:d7:6d:d5:f7:99:31:
                    e0:4d:33:cf:25:2c:df:38:42:3d:7f:1c:43:74:32:
                    35:6a:2a:0b:07:07:17:5d:09:3f:f9:fe:40:cb:0b:
                    8a:1e:b6:bd:6f:b6:ab:ff:43:9a:86:ba:3d:cc:d8:
                    10:db:da:8c:bb:8b:ca:17:8e:13:ea:8f:b7:01:7e:
                    9f:4f:9b:c1:ec:77:2b:1c:4b:89:72:be:40:5b:6b:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B0:1A:12:FF:23:AB:FF:34:C5:D5:EC:4E:57:34:0B:8E:FC:10:80
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:86:91:f7:4c:29:b3:39:6b:71:99:49:fd:12:cd:8c:2a:c9:
         39:75:5b:74:86:03:8b:61:85:21:6c:d5:eb:4a:fd:8c:cc:61:
         43:0f:28:93:e0:c0:fd:47:a5:e1:bc:29:60:15:cf:b3:e7:16:
         c2:fb:b7:c8:ab:9e:cf:74:22:6a:74:92:29:5f:60:e7:90:a7:
         55:09:89:6a:ba:1d:33:bc:81:44:ed:be:ed:06:9e:6f:63:46:
         b9:4c:3c:a9:16:ff:fd:6c:b4:df:69:c0:fd:c4:18:d4:fa:1b:
         95:4e:b8:1e:40:44:51:c6:37:15:f2:6d:8b:90:86:23:b2:0d:
         37:e4:28:39:28:76:18:09:61:a3:de:65:16:fd:6c:a9:fb:c7:
         53:4f:67:c1:18:28:bc:9e:49:90:12:b3:fd:ab:ea:ea:ba:6b:
         69:74:fe:0a:60:bb:0b:99:6a:4b:f3:b4:c1:b5:09:7e:a8:c1:
         24:f4:3c:3c:e6:1c:46:6b:43:3a:74:88:23:69:7a:fe:6c:22:
         b2:f1:89:00:51:aa:94:77:31:10:82:e7:f3:6f:0e:08:c4:89:
         c7:5d:ce:59:b8:19:0a:28:f3:f0:ae:5f:9c:fd:70:db:36:8b:
         7a:a2:ea:ca:05:45:e7:e5:02:e7:23:2e:63:a1:8c:6c:2b:f0:
         83:16:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:30:01 2025 by rpki-client