Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File:                     3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier:          F8vHIGE7Pb2TJpMCVk1nZsTbzjZxdx0xeWQVNZcG+UQ=
Subject key identifier:   F2:89:10:A7:BA:B0:73:27:31:A0:48:A5:DB:74:52:95:72:31:B5:2F
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       4C46814325D77B656B538F7E2498B5BB130DD8B6
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number:          0552
Signing time:             Mon 28 Apr 2025 04:08:01 +0000
Manifest this update:     Mon 28 Apr 2025 04:03:01 +0000
Manifest next update:     Tue 29 Apr 2025 04:33:01 +0000
Files and hashes:         1: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=)
                          2: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=)
                          3: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: n3zrGoFGf9zH9DDD+xMgkXniVfToovfvFDib7JanNMU=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:46:81:43:25:d7:7b:65:6b:53:8f:7e:24:98:b5:bb:13:0d:d8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Apr 28 04:03:01 2025 GMT
            Not After : Apr 29 04:33:01 2025 GMT
        Subject: CN=F28910A7BAB0732731A048A5DB7452957231B52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:e4:e4:c7:d8:01:2b:a5:39:5e:7b:e1:92:
                    91:18:fd:40:a7:4a:73:34:0d:16:c6:2e:a8:09:53:
                    d3:99:1c:de:a0:84:c9:b6:3c:57:ec:e5:7b:3a:c4:
                    05:60:63:9f:cb:27:6c:03:86:bf:80:35:58:57:f0:
                    c8:fc:89:8a:b6:e7:35:6f:fd:fd:96:0c:27:6c:86:
                    61:c6:34:3f:99:85:25:36:1c:90:99:c6:57:d6:15:
                    37:6f:55:5e:0e:99:b5:b5:71:14:ed:ac:95:c8:c1:
                    45:70:9c:87:e7:a9:1b:fa:ca:72:c5:31:13:91:10:
                    49:cb:44:3c:f9:a6:b8:d1:d2:78:94:2f:12:20:76:
                    c6:22:7a:1a:fa:0a:dc:8a:a0:e2:2e:f6:fc:e8:f1:
                    a5:ea:95:97:1f:3b:40:5c:37:74:a4:62:df:32:69:
                    64:00:6c:c5:12:4e:0f:cb:5e:68:08:de:15:91:9d:
                    81:e1:08:12:43:76:1b:75:94:73:da:fe:b1:2b:97:
                    83:8b:ff:ba:11:66:3e:66:64:35:1d:28:b8:50:86:
                    47:59:32:70:71:0d:28:ad:8c:b0:27:72:2c:5c:51:
                    3b:dc:f5:c9:41:8b:14:b2:f0:eb:71:81:0a:f8:3d:
                    ba:a0:a4:f5:22:3a:6a:16:ec:fa:05:f6:d7:d3:7b:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:89:10:A7:BA:B0:73:27:31:A0:48:A5:DB:74:52:95:72:31:B5:2F
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2e:04:fc:21:9b:d2:40:81:43:95:90:21:14:f8:7d:1b:bd:
         b8:0a:65:ee:e1:8a:bc:de:2c:39:84:e0:02:4b:df:48:f5:3e:
         98:fc:a9:4d:a5:0d:6e:85:11:47:34:9b:81:b5:1f:62:d3:e9:
         27:64:b5:22:09:fa:06:99:25:2d:df:ac:47:56:0c:7f:6d:d5:
         d5:8e:c5:29:49:28:51:13:e5:e5:5a:89:c2:0a:ca:b4:a2:48:
         05:e6:a5:a5:56:84:97:53:1d:af:d2:41:36:cb:9e:92:26:0c:
         13:78:4f:f5:f3:60:52:69:75:6f:60:33:e2:cc:2f:c4:71:65:
         01:32:86:fe:8f:72:18:bd:da:63:e3:ff:b2:65:2b:bc:e2:65:
         58:a0:53:ff:54:4d:8e:7f:0b:a7:21:d4:a0:d9:af:df:19:d7:
         78:a4:d3:53:d2:da:67:b5:03:69:0c:8b:e1:e4:d9:18:70:44:
         d4:59:0e:83:3d:01:a4:da:89:fa:36:56:3c:1c:a6:21:34:e1:
         e7:d2:d8:02:c1:d1:40:75:43:0c:76:f2:ff:88:36:0a:3d:06:
         a6:71:9d:6e:b4:3d:9f:36:57:75:d2:fb:0b:36:d7:e5:bc:00:
         b9:19:b8:61:3a:35:d8:ea:e8:a7:e8:f6:22:8c:eb:0c:7d:6e:
         26:9d:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:19:25 2025 by rpki-client