Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier: Eph+X4wAD8wHbrgQfQ+mv7YdGSdx+i1XoTJFrgY7tDc=
Subject key identifier: 56:9B:A6:0B:6D:45:48:01:89:6C:6A:EA:B2:65:47:C8:F2:F3:CA:91
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer: /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial: 6ED50E1BE7A127747B3DF69B46388A331F7518E5
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number: 05A6
Signing time: Wed 02 Jul 2025 17:12:55 +0000
Manifest this update: Wed 02 Jul 2025 17:07:55 +0000
Manifest next update: Fri 04 Jul 2025 07:03:55 +0000
Files and hashes: 1: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: zczV/lw5ookEJZ7PS8cK6wm0rqNR6FmFYGOH2X4jyaI=)
2: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: hnOSReG/7hd4p1QjBxkQpn/X6pBVjQcA/addSxh/P54=)
3: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: B7lSDIrBTgwVQm/vcJcAfhxgJeVcyzUT4n4/zGRIaRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d5:0e:1b:e7:a1:27:74:7b:3d:f6:9b:46:38:8a:33:1f:75:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Validity
Not Before: Jul 2 17:07:55 2025 GMT
Not After : Jul 4 07:03:55 2025 GMT
Subject: CN=569BA60B6D454801896C6AEAB26547C8F2F3CA91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6b:4c:47:15:bf:27:63:54:e2:08:bb:eb:94:
ec:82:3f:9d:e5:d8:32:47:93:2d:65:82:ff:84:50:
99:65:cc:9e:54:f6:65:8b:9a:fa:ad:eb:32:db:15:
99:88:09:ae:31:c8:34:9e:f7:72:92:14:b9:45:9d:
b4:e0:34:4e:8e:d8:af:69:bd:f1:93:a4:25:9b:ab:
ee:83:de:8c:e7:50:f8:70:9e:11:4d:dc:7e:c4:ae:
ab:e4:05:d8:c4:52:af:18:cb:a5:41:77:c3:d0:90:
3b:12:80:bb:89:87:ff:f6:91:f7:0e:5b:03:4a:20:
27:42:f7:3d:ea:e4:3c:97:34:fd:9f:e5:6c:8f:bb:
18:41:f9:9e:fd:22:3b:2b:5b:a1:f7:22:10:86:7c:
81:ae:6a:b7:3e:6e:9c:9e:82:d1:e5:12:d5:71:48:
4b:60:ad:ed:d5:34:22:cb:dd:17:25:b4:38:72:7d:
d4:79:12:f0:26:62:e1:cb:8c:1e:60:73:9a:af:9c:
61:f6:01:8c:27:38:e7:7f:75:e5:ba:ff:d3:6d:22:
6a:e3:1f:64:4c:c2:a9:81:be:20:27:e9:ac:5f:a9:
e2:43:54:b6:8b:a5:bd:4f:3f:11:04:7b:af:2c:bd:
0a:f4:01:58:f1:85:69:85:82:0a:43:e5:3d:71:a5:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:A6:0B:6D:45:48:01:89:6C:6A:EA:B2:65:47:C8:F2:F3:CA:91
X509v3 Authority Key Identifier:
keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:44:c8:05:06:d5:29:5e:dd:b8:dc:de:b1:01:7a:b0:b6:2d:
2e:5c:ae:af:d5:fc:47:bf:eb:72:b2:75:31:44:38:d8:63:d3:
53:76:df:04:02:c4:78:4c:7f:40:69:df:c5:4e:67:51:25:c5:
40:9a:95:14:c1:c5:d2:b4:2d:65:4c:66:dd:21:3c:f5:73:e3:
dc:00:46:b4:a8:6b:36:df:75:82:de:ab:10:14:af:68:1d:aa:
64:b2:63:47:3b:71:70:77:34:5d:56:77:38:2c:e6:8e:31:59:
8e:89:20:2a:b5:ba:3e:52:7b:19:25:a3:66:9e:f6:30:d4:a1:
a7:67:d4:24:75:e7:7d:01:91:0e:78:ce:26:8a:ea:4a:58:10:
ad:29:44:9d:7b:15:49:a9:7a:cc:37:66:96:a5:a6:9f:a3:5f:
31:a6:4c:42:b0:f6:11:ab:cf:61:38:a1:e1:9c:43:cb:10:2a:
0a:35:73:50:d8:f7:68:a4:27:88:c2:24:de:ba:a8:4a:5d:b0:
a5:9e:0f:f2:d3:73:f9:02:49:9b:11:eb:b6:07:23:73:8a:b2:
b8:b5:77:b5:20:92:43:26:95:26:5d:89:a7:3d:b3:77:b9:a4:
3a:80:53:19:87:3f:df:b7:ac:89:45:cb:04:5e:78:b8:ec:aa:
6b:e6:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 15:57:30 2025 by rpki-client