Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          f4MbGjW4wELNl0NGyMLSS3hTFh0y2HujIag1BZ9lXpY=
Subject key identifier:   AF:CB:9B:AC:E6:01:26:D5:D3:4C:9B:E0:F2:C6:00:EA:99:10:A8:A4
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       7A3DBE6741C4AEDB2F5C0394025713EBD554F61C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          0581
Signing time:             Fri 06 Jun 2025 22:32:14 +0000
Manifest this update:     Fri 06 Jun 2025 22:27:14 +0000
Manifest next update:     Sat 07 Jun 2025 22:32:14 +0000
Files and hashes:         1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: wtRi/L95ieDz92jrODawXWrOqCHl1+5d9QkGSegIA8Q=)
                          2: AS52025.asa (hash: xTCa1RgQJU4azwOHdCduRuLDlRPa85VZAUmiySfE3hI=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3d:be:67:41:c4:ae:db:2f:5c:03:94:02:57:13:eb:d5:54:f6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Jun  6 22:27:14 2025 GMT
            Not After : Jun  7 22:32:14 2025 GMT
        Subject: CN=AFCB9BACE60126D5D34C9BE0F2C600EA9910A8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:b2:22:28:03:a8:72:fb:1a:5f:74:b0:d3:
                    fa:1a:92:40:f5:5b:93:ff:88:0d:f5:fd:53:06:e4:
                    92:c9:53:b0:c7:6f:d1:b3:7c:b0:9d:18:fc:a1:18:
                    5d:59:44:06:09:49:75:59:bd:db:1a:43:d0:3a:13:
                    74:86:ba:e5:67:55:0d:2a:e0:57:50:8d:f4:34:f4:
                    d1:f9:76:35:49:62:ff:9d:61:f0:50:67:8c:8e:fe:
                    bb:80:80:c2:50:a0:1e:01:c4:d3:0c:e7:34:0e:42:
                    93:d1:15:9a:90:01:86:68:de:c0:e0:71:de:b5:89:
                    28:3f:3e:ff:ce:87:03:8d:e9:0a:9a:b9:40:55:3e:
                    7f:4a:d8:48:ca:29:d2:d4:54:19:e4:d3:49:e7:c1:
                    10:31:55:af:e2:5b:11:7d:3c:b4:24:f9:80:d5:65:
                    a4:a4:78:86:5a:8d:6e:33:e7:7d:15:cc:57:89:ee:
                    b3:12:fd:e6:39:8a:d6:e8:f9:7c:a9:77:b9:ff:03:
                    a5:d2:58:cc:9d:a4:10:9d:75:66:3d:3b:9d:a2:7b:
                    01:15:53:fd:4e:c7:c4:ab:cb:55:1b:d8:b2:92:3e:
                    31:28:6e:bc:fb:9c:a7:eb:e8:5b:01:94:73:0f:cd:
                    6a:46:7c:03:f8:bb:04:07:0a:14:0a:4f:82:dd:50:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CB:9B:AC:E6:01:26:D5:D3:4C:9B:E0:F2:C6:00:EA:99:10:A8:A4
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b7:e4:c5:76:76:0d:db:a3:77:99:51:f0:5c:9a:ef:80:e4:
         cf:13:e5:2f:83:af:9f:52:a5:e9:58:a4:6e:af:57:55:8e:35:
         f2:88:40:be:da:16:19:9a:8d:c7:d4:3d:cb:1b:ae:e9:8c:e6:
         f4:15:a1:ae:ee:ec:47:63:91:43:7d:f2:64:5e:64:cb:73:f6:
         26:11:0d:74:4a:71:e1:b5:da:59:64:40:91:27:db:61:9f:35:
         ca:a7:68:19:c8:fd:6f:da:d5:24:20:3a:06:42:75:59:4d:07:
         dc:b8:e1:ca:85:d6:57:25:dc:e8:a6:53:1d:36:07:27:55:8d:
         6b:32:04:c7:76:59:39:9a:2e:0c:df:69:5c:f2:37:b6:14:d1:
         f3:72:12:0f:2c:f4:c7:8e:bf:6f:6c:2c:19:fb:90:c3:d1:18:
         75:12:f1:9f:05:04:37:ec:9b:b6:59:90:c1:03:ca:53:1a:84:
         0a:13:4a:90:42:b0:0f:b2:e6:8b:10:fd:f3:f4:04:f8:13:a7:
         13:02:9a:72:26:45:8c:55:c7:6f:f3:a7:4b:0c:13:6f:df:36:
         61:0b:45:68:c9:b2:37:08:16:ad:b7:35:d7:25:fc:5c:55:f5:
         7e:b2:f2:6e:b8:3e:1f:5c:2b:4c:04:97:a7:68:fe:23:ed:5e:
         e5:36:e6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:36 2025 by rpki-client