Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          zWRYnYOEBpYSgv5CWnLB63vboh71tlIAJgH8jE1Wizk=
Subject key identifier:   BC:16:B3:C2:15:8C:7F:56:88:80:7E:C1:38:4B:F5:21:51:06:8C:D6
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       599E727D1C4B68A74801C487524BCC0E803C4E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          0261
Signing time:             Thu 28 Mar 2024 22:44:26 +0000
Manifest this update:     Thu 28 Mar 2024 22:39:26 +0000
Manifest next update:     Sat 30 Mar 2024 00:06:26 +0000
Files and hashes:         1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: JF027N0KPEFbeXHxPj9fhaL12rfEQk92GQGthy9r5ps=)
                          2: AS52025.asa (hash: Lc3tC2pceRcpzxfp11QhI7Xk9PkL+kjfCJqYX5X7gk0=)

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 18:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9e:72:7d:1c:4b:68:a7:48:01:c4:87:52:4b:cc:0e:80:3c:4e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Mar 28 22:39:26 2024 GMT
            Not After : Mar 30 00:06:26 2024 GMT
        Subject: CN=BC16B3C2158C7F5688807EC1384BF52151068CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:d3:04:9e:57:27:35:4d:b1:46:e2:66:c9:
                    52:dc:9e:b1:27:32:82:af:9d:93:2b:84:d9:b1:62:
                    da:c2:e3:62:90:cd:cd:0a:2a:cb:c9:2a:4c:a4:e8:
                    91:bc:a7:69:56:a1:45:8b:95:33:cd:d7:89:91:2b:
                    da:3d:87:20:ed:54:ed:68:ff:f4:65:d3:88:b9:9a:
                    3d:4a:53:49:7d:f0:1b:92:1a:72:5a:6d:30:57:da:
                    be:66:8d:8d:82:d7:5a:1b:44:13:c0:11:5a:35:63:
                    80:df:0e:61:1c:94:80:70:a4:fb:d1:8d:42:6f:3c:
                    25:61:a6:ef:7d:af:c5:56:3e:27:e8:57:4b:d3:8a:
                    da:dd:d6:57:9e:c9:9f:9b:4a:2b:67:64:44:45:7b:
                    a1:55:6e:4c:e0:93:ce:dd:5b:97:46:ea:7d:2f:cd:
                    82:12:0a:75:d0:f9:a7:6a:2b:27:3a:21:dd:5f:68:
                    55:cd:00:01:2d:6c:f3:e8:0e:9f:eb:a6:2a:43:50:
                    17:df:9a:d9:ad:7a:8a:2a:79:aa:09:98:6f:8c:a1:
                    e1:53:91:0b:5b:ef:4a:33:c7:43:dd:83:07:ec:41:
                    8b:55:ce:e7:62:1e:0e:d0:8c:a4:7c:8e:e5:43:d4:
                    79:e3:fc:e5:cd:85:07:0e:37:33:f4:7f:e2:cb:d5:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:B3:C2:15:8C:7F:56:88:80:7E:C1:38:4B:F5:21:51:06:8C:D6
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:00:c2:a7:fb:3d:ba:19:5f:1f:a0:a0:fa:da:44:d2:0c:60:
         04:dc:29:d3:8c:74:48:99:42:df:6b:c3:fa:42:ea:2f:e9:76:
         00:31:1e:43:53:9b:0a:dc:c5:61:8a:3b:09:0a:82:d8:32:2a:
         9f:0a:3c:04:ae:9d:b1:b0:b4:6f:5a:66:c9:95:72:1b:b3:9f:
         75:8c:1f:24:5f:5f:ce:c1:8a:e9:5f:b8:84:db:a4:54:54:80:
         f4:f9:8d:17:41:d7:18:3b:ae:8b:a1:57:4d:03:72:93:59:9d:
         ff:b7:00:f6:a4:34:20:89:dd:1e:14:4d:bd:98:95:fd:39:e1:
         18:9c:01:d0:d4:81:6c:cc:49:60:2b:e6:3e:5b:9a:70:15:59:
         a5:9d:c0:2a:42:63:e6:20:d6:1c:7c:fb:ca:3a:2f:4a:3c:f5:
         f5:fb:a0:a9:0c:b6:9b:1e:75:9f:e9:59:d8:b5:4e:53:f6:1a:
         3c:00:82:a1:15:ab:8d:2b:ee:80:48:cf:b4:85:90:69:bf:18:
         fd:47:62:1b:7c:86:73:ab:55:f6:6f:ab:29:73:49:2e:30:fb:
         1c:38:76:19:4d:69:d3:71:54:f2:21:81:31:88:70:ba:3f:41:
         b8:98:c1:33:fd:1f:d5:2b:b0:25:7c:a3:ba:00:17:50:1c:c6:
         78:00:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:12:15 2024 by rpki-client on console-fra.rpki-client.org