Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          98gR64crOuUuJv0rvuQwppRyJrQ9gen5ZSo72pDZCck=
Subject key identifier:   03:C9:28:11:B2:C7:21:28:A0:CF:9F:92:E3:80:5B:E8:D0:70:47:ED
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       1636E49074E60BFA3D6A1D6D65C9857AF6130BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          0453
Signing time:             Wed 20 Nov 2024 19:31:12 +0000
Manifest this update:     Wed 20 Nov 2024 19:26:12 +0000
Manifest next update:     Thu 21 Nov 2024 23:20:12 +0000
Files and hashes:         1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: +Xhz9UCxQ+yvgZvVXDm66e5UYB3msqDRhA8EiDptuwU=)
                          2: AS52025.asa (hash: 0bCq6uChy1FRBXXpvYLbMBBZw9CL0evNtco85YaHIR8=)

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:e4:90:74:e6:0b:fa:3d:6a:1d:6d:65:c9:85:7a:f6:13:0b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Nov 20 19:26:12 2024 GMT
            Not After : Nov 21 23:20:12 2024 GMT
        Subject: CN=03C92811B2C72128A0CF9F92E3805BE8D07047ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:1a:15:09:b0:51:c8:6e:e5:1f:64:05:a3:
                    f2:60:a5:ee:9e:80:c3:e7:e3:8b:09:e4:29:56:14:
                    e8:d8:d7:0e:bc:7b:ec:e3:9f:1a:dc:c5:7d:f9:ac:
                    5f:83:af:70:bc:6a:7c:d3:25:a2:c6:f4:cf:00:2f:
                    74:06:ec:d9:7f:de:67:af:0b:ad:a7:f6:e4:7a:19:
                    8d:a0:e1:ab:ae:a6:19:e3:f1:3d:3f:39:21:d6:e1:
                    4e:2d:bc:84:c9:62:d2:cc:95:e6:a8:18:54:d9:a0:
                    c9:2c:c3:ef:f8:3e:68:39:cf:80:48:99:66:80:f0:
                    57:57:76:35:25:8d:ed:56:43:5b:dd:a1:5c:d8:9c:
                    a0:8e:60:66:80:87:b1:c8:1c:ac:72:51:44:14:fc:
                    57:6d:44:dc:ef:67:ff:fa:82:2a:70:58:92:85:cf:
                    9e:cc:59:cd:15:11:9c:ac:6f:65:2c:a0:49:2f:93:
                    a4:bd:61:f9:c0:20:93:65:f0:17:66:d7:3e:76:dc:
                    e2:3a:81:9c:66:be:34:74:7b:58:17:76:8a:ff:e4:
                    98:5f:92:76:8c:c2:88:34:09:8b:00:d7:1c:15:69:
                    49:a7:22:f9:1b:b3:d9:2b:43:df:e9:5c:12:35:b7:
                    43:9b:86:eb:c5:71:06:0d:1e:4b:c2:05:ef:95:59:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:28:11:B2:C7:21:28:A0:CF:9F:92:E3:80:5B:E8:D0:70:47:ED
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:36:87:25:e3:93:03:86:be:bb:ae:09:ab:58:48:8f:80:fe:
         8e:82:68:da:d1:21:b0:30:51:96:da:73:43:bf:a3:01:dd:14:
         cc:e5:40:e2:cc:79:74:71:f3:0b:38:7f:b4:45:5f:fa:41:de:
         a4:d0:9e:1c:87:0d:33:a3:87:e1:8f:05:5a:88:d8:01:92:2f:
         e4:c3:88:37:1b:29:da:25:3e:99:3c:4c:62:c3:c0:de:62:3d:
         32:eb:0e:f3:fa:7a:96:97:f3:99:74:1b:10:be:2d:e0:7a:00:
         77:a2:0f:75:e5:58:bc:84:8b:26:f3:3a:9f:92:93:a6:c7:46:
         4c:ee:41:b0:ba:87:5c:69:0b:4f:03:59:c6:6c:8e:a0:e6:93:
         8c:33:29:7a:4a:bc:c1:fd:9f:dc:75:f8:2a:21:24:d4:72:97:
         79:3d:c9:5f:b5:f7:12:03:91:84:09:ca:a5:2c:f4:c6:0a:ca:
         c7:a4:f0:e1:89:8f:9e:f4:aa:a4:21:63:ab:d0:4e:b6:c6:12:
         23:ad:43:34:19:a2:27:e3:ed:08:bb:f2:d7:5f:9c:11:37:e9:
         b8:37:ba:e8:47:e2:1f:61:8c:6d:ee:89:31:8b:92:6e:b6:12:
         12:7f:83:6b:ab:e5:60:ca:d4:ab:5e:b8:ed:8e:2d:84:c6:dc:
         10:b2:6a:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUFjbkkHTmC/o9ah1tZcmFevYTC7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGJjZjg1M2U4MDMwNTVjODU5ZWYxMDU0NWViMWQ1ODA3
MTI0MmFjYzAeFw0yNDExMjAxOTI2MTJaFw0yNDExMjEyMzIwMTJaMDMxMTAvBgNV
BAMTKDAzQzkyODExQjJDNzIxMjhBMENGOUY5MkUzODA1QkU4RDA3MDQ3RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOxoVCbBRyG7lH2QFo/Jgpe6e
gMPn44sJ5ClWFOjY1w68e+zjnxrcxX35rF+Dr3C8anzTJaLG9M8AL3QG7Nl/3mev
C62n9uR6GY2g4auuphnj8T0/OSHW4U4tvITJYtLMleaoGFTZoMksw+/4Pmg5z4BI
mWaA8FdXdjUlje1WQ1vdoVzYnKCOYGaAh7HIHKxyUUQU/FdtRNzvZ//6gipwWJKF
z57MWc0VEZysb2UsoEkvk6S9YfnAIJNl8Bdm1z523OI6gZxmvjR0e1gXdor/5Jhf
knaMwog0CYsA1xwVaUmnIvkbs9krQ9/pXBI1t0ObhuvFcQYNHkvCBe+VWUjnAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUA8koEbLHISigz5+S44Bb6NBwR+0wHwYDVR0j
BBgwFoAUC8+FPoAwVchZ7xBUXrHVgHEkKswwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMC8wQkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcx
MjQyQUNDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQzgtRlBvQXdWY2haN3hC
VVhySFZnSEVrS3N3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJz
eW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMC8w
QkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcxMjQyQUNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApDaHJeOTA4a+u64Jq1hIj4D+joJo2tEhsDBRltpzQ7+jAd0UzOVA4sx5dHHz
Czh/tEVf+kHepNCeHIcNM6OH4Y8FWojYAZIv5MOINxsp2iU+mTxMYsPA3mI9MusO
8/p6lpfzmXQbEL4t4HoAd6IPdeVYvISLJvM6n5KTpsdGTO5BsLqHXGkLTwNZxmyO
oOaTjDMpekq8wf2f3HX4KiEk1HKXeT3JX7X3EgORhAnKpSz0xgrKx6Tw4YmPnvSq
pCFjq9BOtsYSI61DNBmiJ+PtCLvy11+cETfpuDe66EfiH2GMbe6JMYuSbrYSEn+D
a6vlYMrUq1647Y4thMbcELJqkw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org