Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File:                     3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier:          yLZIUiOE6vxInquQDnzWWhDq5Zr/pjqdXOrMbA9GfP8=
Subject key identifier:   56:06:C3:75:A2:BE:F1:29:7D:C0:23:1A:85:8F:F7:D6:63:48:12:83
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       1DFC95942EECDF361DBABAC1D569E93735F7BE66
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number:          0583
Signing time:             Sat 07 Jun 2025 02:47:17 +0000
Manifest this update:     Sat 07 Jun 2025 02:42:17 +0000
Manifest next update:     Sun 08 Jun 2025 05:48:17 +0000
Files and hashes:         1: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=)
                          2: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: 3I9/VGm0iGXqf0O1h4TRkCdmCH2hRsZz9a+tPliKZSw=)
                          3: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:95:94:2e:ec:df:36:1d:ba:ba:c1:d5:69:e9:37:35:f7:be:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Jun  7 02:42:17 2025 GMT
            Not After : Jun  8 05:48:17 2025 GMT
        Subject: CN=5606C375A2BEF1297DC0231A858FF7D663481283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:6c:83:b3:46:bb:e7:b7:23:01:ce:a1:30:
                    4b:13:e0:a2:67:64:dc:ce:94:f7:8f:5a:74:0a:b7:
                    26:bb:ca:03:5d:a9:58:25:90:3d:96:e3:b3:d1:a4:
                    29:88:bf:de:75:32:6d:95:a6:da:cb:fe:5d:15:ce:
                    63:e5:7c:5c:fe:cc:f6:da:72:16:f1:70:06:4a:77:
                    5c:1e:8f:68:ed:1c:40:65:ee:16:6e:f0:4a:be:9c:
                    60:a9:97:8c:fb:76:d6:f7:74:ee:82:af:c2:93:ab:
                    e6:58:d3:47:1d:f7:b5:ee:89:bf:66:ff:3a:46:f5:
                    78:30:13:07:4c:10:cd:15:79:f2:87:a4:6a:1a:f4:
                    18:67:7a:a2:03:96:04:f0:56:bd:03:00:a8:0a:a3:
                    f1:7b:32:94:24:a2:af:8e:99:bb:37:79:d5:f0:a9:
                    f1:a7:a1:c1:3e:fe:3d:b0:f4:35:91:2b:a1:ea:0b:
                    66:09:18:cd:71:40:96:9a:02:87:2d:b0:e3:8e:19:
                    49:e5:8b:00:a7:69:41:dc:33:8a:42:2e:48:06:02:
                    3e:2a:c9:5e:7e:cd:c5:4c:b7:35:ed:ca:05:30:a2:
                    15:fb:48:6c:cc:6e:7d:fe:de:bd:d5:f8:96:82:c6:
                    68:9b:f5:d0:af:15:e0:90:35:44:d2:0f:48:20:71:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:C3:75:A2:BE:F1:29:7D:C0:23:1A:85:8F:F7:D6:63:48:12:83
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a4:e8:88:5a:c1:92:ff:2b:c6:65:e3:33:a5:0c:b4:73:44:
         2e:93:6f:1c:bf:e8:f3:46:a6:53:08:9f:52:86:d1:2c:51:51:
         ae:65:50:f9:a5:7c:f5:d5:fb:67:23:60:e2:3b:7b:6c:64:44:
         1c:5d:ed:8e:a9:21:09:99:d7:79:11:51:b1:67:1c:9c:c9:9c:
         08:ef:63:0e:08:1f:5c:80:b0:58:62:c6:68:87:3d:1d:b0:0e:
         9a:80:2c:03:5b:b0:83:c9:ca:e1:15:e8:68:74:20:fa:26:f7:
         17:9e:b6:7d:f0:ba:dc:62:da:5a:42:2d:56:34:43:74:d3:d1:
         dd:8b:fc:1d:5c:3a:e2:01:d0:eb:fc:84:4d:c1:33:c2:bc:46:
         0b:56:d3:7e:8d:e4:9c:97:cc:44:8c:1f:5f:5a:1b:10:1d:61:
         24:ec:54:0b:32:4b:42:2e:ae:56:7d:fb:bf:6e:ea:7f:18:28:
         6c:4b:5a:0c:aa:db:0a:34:6c:f2:3a:c2:df:2f:63:97:ac:5e:
         c8:f6:db:57:63:54:ce:ac:4d:c8:c0:8e:63:d0:22:bc:32:94:
         7f:e6:3c:cb:8d:7a:17:4f:6b:20:17:0f:7f:c0:8b:9f:6a:bc:
         e6:04:df:94:a3:4c:9a:c3:78:45:3b:43:05:1c:5f:e8:6e:b1:
         b3:64:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:08 2025 by rpki-client