Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
File:                     716ED138312A679CA1B1F88B3EF7301163F16356.mft (raw, json)
Hash identifier:          2kZk25WOCHXhXaFvj54oQJKe637k9nFHNzxYDGUKBT4=
Subject key identifier:   9E:74:AD:05:29:8F:C0:80:08:25:25:C5:B6:52:F4:7A:6C:C6:51:75
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       49FA86056283944B574BF0438EE785F06B27F46B
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
Manifest number:          01D7
Signing time:             Fri 02 May 2025 14:34:32 +0000
Manifest this update:     Fri 02 May 2025 14:29:32 +0000
Manifest next update:     Sat 03 May 2025 16:23:32 +0000
Files and hashes:         1: 3139322e36372e33322e302f32332d3332203d3e203532303235.roa (hash: jfjZjS7RO/Jrp+ifl2pYUDezKNo1/3c/aa2yao9G9WQ=)
                          2: 716ED138312A679CA1B1F88B3EF7301163F16356.crl (hash: aXi5uXyHexyhCPac7gmcffg/6k/DueZ4EiS7MjP5dsc=)
                          3: 3139322e36372e33322e302f32342d3332203d3e203335393532.roa (hash: 8olMHxcBw9NGLDLX+6XGMvtPIHF7ttVR81EmpDUvnb0=)
                          4: 3137322e39392e3233332e302f32342d3332203d3e203532303235.roa (hash: KkRFwWoVouYPlN9FZtAB+SIniYegt5ZgOLBqQB0aq0w=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fa:86:05:62:83:94:4b:57:4b:f0:43:8e:e7:85:f0:6b:27:f4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: May  2 14:29:32 2025 GMT
            Not After : May  3 16:23:32 2025 GMT
        Subject: CN=9E74AD05298FC080082525C5B652F47A6CC65175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:82:05:ab:80:77:b6:a7:5b:14:c3:1b:82:
                    92:e9:08:55:7a:3f:21:6b:10:4b:25:cb:e7:b9:93:
                    a7:e6:a9:42:b5:fd:21:53:1f:d2:8d:5f:e1:f9:ad:
                    0c:5d:0d:d3:2e:ce:3f:3a:5e:b1:29:21:ac:ec:23:
                    2c:71:80:ce:b6:53:3c:fb:b7:b5:81:93:65:f0:e7:
                    28:c3:36:07:e7:9e:cb:cf:ca:5a:6b:b4:4e:52:1e:
                    13:9e:8a:20:fe:02:ca:0b:b0:83:aa:eb:ad:63:12:
                    be:8c:e7:2d:89:1e:aa:c4:ec:5f:2a:5a:59:4b:12:
                    65:ce:bf:da:c4:5e:66:7a:45:4d:1f:02:00:04:2b:
                    c0:98:35:d1:cb:f1:ed:9b:32:27:95:1a:da:65:81:
                    ca:8d:b9:f5:44:67:f7:90:77:1d:59:5e:59:b5:e6:
                    db:53:8e:d4:9c:60:cf:64:ad:85:fc:28:c9:5b:1a:
                    16:92:0e:b1:00:99:02:68:31:a9:e2:01:4e:0a:65:
                    fd:98:76:86:4b:06:bd:9d:fc:da:20:d9:4e:d0:0c:
                    1d:66:2d:45:98:97:45:1e:02:ec:4b:bc:3e:fb:d7:
                    29:55:f1:e9:6f:d8:a1:e3:23:d9:a9:8d:61:c3:cc:
                    8e:3f:42:b2:bb:62:76:ad:ef:7b:fa:48:0c:81:c0:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:AD:05:29:8F:C0:80:08:25:25:C5:B6:52:F4:7A:6C:C6:51:75
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:05:89:de:aa:51:99:c8:7e:5c:fa:68:61:bf:db:7c:b3:cd:
         81:ea:f7:cd:91:39:39:0c:12:13:ce:b1:94:93:b5:b1:f7:85:
         39:06:20:db:e4:69:2b:66:64:ef:9a:0c:83:9a:a7:73:0a:e3:
         56:c7:6a:29:ad:6f:96:15:74:67:b2:22:76:63:72:39:c1:df:
         99:2b:f3:32:25:36:b1:f0:68:01:5b:70:34:45:25:ff:bc:d9:
         f9:b5:79:81:12:a7:5a:cc:6e:59:75:5b:c0:2e:77:9f:85:93:
         de:35:32:49:e8:64:f4:6b:d7:20:63:c4:17:94:96:5a:4b:09:
         c2:d6:f9:6d:43:00:4e:be:4b:d8:12:69:88:d5:bf:2a:ff:4f:
         3c:17:f2:25:1f:cc:4d:df:b8:ed:00:91:7f:42:c7:63:0d:93:
         9a:62:ff:ca:6f:14:d8:56:f6:20:64:56:73:63:8c:2c:67:64:
         ab:88:4e:a1:93:5f:30:e1:6b:33:ac:fe:e4:78:66:1c:21:33:
         45:52:c8:33:a4:05:72:17:ce:ea:2b:02:14:33:e6:13:60:0b:
         b6:b7:e6:8b:3d:f6:1d:42:c7:04:3f:09:ee:c2:b9:97:99:84:
         47:ad:96:83:e8:84:46:ae:dc:da:39:54:ae:59:2e:84:3f:65:
         54:36:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:25:44 2025 by rpki-client