Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File:                     3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier:          SekzvbwHSAjpwojpBLqrc/0l39h5bzV1tJQBU6FFews=
Subject key identifier:   ED:AA:92:62:17:4C:29:02:03:94:76:D9:74:38:18:BA:CF:46:07:C5
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       410B4955E623B764957ED37288552292CF3FF10B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number:          0455
Signing time:             Wed 20 Nov 2024 21:36:26 +0000
Manifest this update:     Wed 20 Nov 2024 21:31:26 +0000
Manifest next update:     Fri 22 Nov 2024 01:32:26 +0000
Files and hashes:         1: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=)
                          2: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: x2XHQBOUkG4ZKOgywiZFhwYHbTjrytbArxJaWhfs1aA=)
                          3: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=)

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0b:49:55:e6:23:b7:64:95:7e:d3:72:88:55:22:92:cf:3f:f1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Nov 20 21:31:26 2024 GMT
            Not After : Nov 22 01:32:26 2024 GMT
        Subject: CN=EDAA9262174C2902039476D9743818BACF4607C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:61:20:06:dc:03:0c:49:2c:d4:1a:cb:1c:
                    ba:ad:bc:01:fb:f4:4d:d3:72:7e:0d:a1:63:d6:3f:
                    0f:8e:68:59:78:ed:1a:a2:4d:bb:4f:c5:a4:d0:36:
                    22:b9:84:88:95:77:da:b5:9e:f8:ef:b5:48:dd:3f:
                    f4:7b:48:50:6c:7c:48:f7:60:e5:e9:3f:a7:4a:5b:
                    f6:cb:b3:a5:0a:91:e0:32:1a:0e:c6:fa:f4:28:8a:
                    82:10:65:9b:10:1d:93:6c:fb:87:2c:e4:ea:e3:22:
                    5f:c7:c8:8d:7a:9d:78:c7:f8:06:f6:0d:ee:e8:bd:
                    3e:4f:86:95:7d:97:1c:ae:d8:b9:96:c5:8b:59:e7:
                    2c:21:20:a0:d7:82:ce:6e:b4:22:6f:f6:7a:6b:63:
                    e5:64:b5:95:ea:52:7e:fd:ae:f1:55:44:89:ef:d5:
                    2b:c2:8d:13:4e:77:37:73:b3:b7:59:5b:8d:a3:69:
                    a3:e9:02:ab:34:cb:bf:a6:6b:c3:e9:08:74:79:00:
                    24:98:25:66:eb:3d:04:ba:a1:19:fc:55:3b:cb:ea:
                    fa:89:1b:f6:88:79:a4:15:96:b3:21:64:a4:b6:75:
                    5d:ba:f2:d5:d6:14:ce:c8:de:f0:8d:71:18:fc:ce:
                    fb:39:ae:f1:86:03:d4:5e:2a:77:14:17:59:83:c6:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:92:62:17:4C:29:02:03:94:76:D9:74:38:18:BA:CF:46:07:C5
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:f8:3d:06:6c:a9:29:44:f7:48:5a:df:fd:ae:5a:72:1a:
         90:c7:99:d7:38:21:43:e4:91:25:55:76:e8:39:90:e2:53:45:
         0e:f8:a5:19:87:66:0d:b8:b9:7b:0e:d5:1f:c7:a7:7c:03:ed:
         ba:81:5b:90:ca:8a:eb:46:2d:3b:57:13:a7:76:fa:e1:4e:f0:
         f5:6f:89:8b:5c:7f:7c:00:54:66:f8:15:aa:48:62:fb:06:b3:
         a2:fc:a1:f2:47:69:2f:e7:f8:c2:c2:b8:43:d2:a7:e8:a2:09:
         f6:12:c2:9a:22:71:2a:80:a7:44:9d:f0:2a:36:41:6b:b0:37:
         db:b9:6c:5b:a6:05:5d:73:f6:c2:7c:ba:f5:3e:06:ae:93:36:
         60:a3:91:3f:fa:69:ae:71:55:c2:4b:75:82:34:2f:4d:ac:fd:
         0b:fa:ce:f1:69:87:b5:0e:6b:68:28:e3:d7:26:da:05:ff:99:
         65:d3:d0:c4:47:81:f5:f8:ca:5b:06:c7:63:d1:75:14:9b:17:
         4c:14:c2:15:ff:6c:52:5f:c9:2b:c4:50:75:a0:66:3c:c3:93:
         8a:8d:31:f8:59:b0:09:7a:8e:6b:a7:0d:93:3e:84:84:81:04:
         bf:94:e2:22:ef:66:a2:4b:cd:3f:05:9f:ec:0a:ab:5b:ff:93:
         09:37:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org