Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File:                     3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier:          a6uY4ynWYssz29heFQ1j+2CBi7FTU4DaKyJ5UEoE0Kw=
Subject key identifier:   C3:13:B3:B5:31:AF:2D:23:DC:EC:1A:94:A3:0A:84:33:40:B7:CC:07
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       5AE5E344D46AE1FE9F6CB2C67020B2B926818EB4
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number:          0299
Signing time:             Fri 03 May 2024 10:11:37 +0000
Manifest this update:     Fri 03 May 2024 10:06:37 +0000
Manifest next update:     Sat 04 May 2024 12:08:37 +0000
Files and hashes:         1: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: SdUWKy5XLtVze0/Rv2RArh0H5JOIA7HiiOgtZpo8YWw=)
                          2: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: gBNR1az3gaFB67uY/7gHIjeyw1bIcqg6hUT6zadmDWc=)
                          3: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: Jh26BX1q+qXHImixzi5M1CtNnGxBxI01Fk0lSPpOp1g=)

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 22:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e5:e3:44:d4:6a:e1:fe:9f:6c:b2:c6:70:20:b2:b9:26:81:8e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  3 10:06:37 2024 GMT
            Not After : May  4 12:08:37 2024 GMT
        Subject: CN=C313B3B531AF2D23DCEC1A94A30A843340B7CC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:c2:21:90:ca:25:6e:ff:9a:4f:2a:47:e7:
                    ee:d4:26:54:9b:62:54:ef:d7:24:81:31:d0:4b:26:
                    00:5c:07:8b:f2:af:7b:20:cf:13:26:3a:7b:dd:16:
                    57:e5:26:13:7e:1c:b7:17:d4:d6:3c:51:33:a3:6f:
                    c7:3c:36:f6:02:03:b3:9e:b6:29:7d:e1:9a:1e:fc:
                    96:e0:1f:26:e4:41:96:63:32:7f:94:08:09:5e:2c:
                    d4:05:4e:20:e4:ec:ea:30:e8:42:e5:ff:4d:df:ed:
                    e3:35:f1:46:8d:d9:72:f6:58:62:64:e5:df:95:a1:
                    d2:f9:dd:68:c4:e2:9c:2c:98:37:53:44:b6:e3:ca:
                    b4:5a:21:85:d1:25:02:ec:21:92:5a:9e:f2:e5:cd:
                    9b:7e:c0:96:47:ab:e0:0f:82:e4:fb:cd:f9:a6:c7:
                    34:ce:be:70:2a:70:f6:a0:3d:59:c6:33:21:8a:12:
                    88:52:b9:47:29:7f:17:66:ac:af:11:a6:8e:89:25:
                    f8:e9:c8:da:0e:13:7e:61:d5:4d:94:f2:da:5f:41:
                    6d:74:4d:a7:ff:79:02:e8:b7:1d:d9:67:35:91:c8:
                    aa:03:c1:b2:16:e1:64:cf:08:8e:df:8e:a1:71:10:
                    81:71:48:0b:56:be:4c:44:50:c2:ae:9b:cf:1c:36:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:13:B3:B5:31:AF:2D:23:DC:EC:1A:94:A3:0A:84:33:40:B7:CC:07
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:74:5e:f2:93:22:94:0e:91:bd:bf:29:5f:6c:6b:0f:49:
         79:71:4c:25:73:cc:df:e3:b1:fa:14:fe:bf:9a:31:b3:5c:a7:
         3a:7e:bd:a0:55:c1:2f:e0:0c:ac:cf:63:90:c3:65:6a:b3:d1:
         78:d9:33:05:9f:45:bc:3c:59:ec:73:30:8b:c2:b1:87:eb:ed:
         e6:87:6d:62:d7:45:1b:83:86:7e:34:9d:ce:eb:a2:f8:4b:a4:
         b1:36:28:1e:23:f5:0a:ff:54:04:e2:2c:2c:a1:49:a3:19:c6:
         c9:51:91:07:6d:63:2a:5d:22:62:9a:14:f3:01:70:c6:1c:81:
         c1:57:d5:e2:83:a5:84:13:24:80:d3:72:40:25:70:56:79:bb:
         50:42:5a:1f:5d:6c:9b:5a:12:1e:14:62:a7:a7:8c:b4:1e:5f:
         af:8a:3f:56:86:7d:a3:0c:d5:7c:18:c3:16:b1:e8:de:4c:5e:
         1c:4d:9a:90:62:4e:51:ee:7e:0d:63:7a:40:e6:42:4d:b4:b1:
         af:ea:63:3b:c5:f1:0d:d1:15:9e:24:d2:99:55:d1:ed:16:c5:
         bb:60:c8:3f:b3:5f:9b:29:3e:71:34:10:0b:97:0d:d2:ce:6b:
         a6:7c:76:60:80:0b:f8:82:03:a0:a5:2e:f4:bf:9a:6f:22:14:
         5d:14:78:a3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUWuXjRNRq4f6fbLLGcCCyuSaBjrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yNDA1MDMxMDA2MzdaFw0yNDA1MDQxMjA4MzdaMDMxMTAvBgNV
BAMTKEMzMTNCM0I1MzFBRjJEMjNEQ0VDMUE5NEEzMEE4NDMzNDBCN0NDMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FMIhkMolbv+aTypH5+7UJlSb
YlTv1ySBMdBLJgBcB4vyr3sgzxMmOnvdFlflJhN+HLcX1NY8UTOjb8c8NvYCA7Oe
til94Zoe/JbgHybkQZZjMn+UCAleLNQFTiDk7Oow6ELl/03f7eM18UaN2XL2WGJk
5d+VodL53WjE4pwsmDdTRLbjyrRaIYXRJQLsIZJanvLlzZt+wJZHq+APguT7zfmm
xzTOvnAqcPagPVnGMyGKEohSuUcpfxdmrK8Rpo6JJfjpyNoOE35h1U2U8tpfQW10
Taf/eQLotx3ZZzWRyKoDwbIW4WTPCI7fjqFxEIFxSAtWvkxEUMKum88cNpaJAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUwxOztTGvLSPc7BqUowqEM0C3zAcwHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIweQYIKwYBBQUH
AQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3Jl
cG8vcGFyYWRveG5ldHdvcmtzLzEvM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgw
QjI4N0ExQ0RCMkE1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAH5tdF7ykyKUDpG9vylfbGsPSXlxTCVz
zN/jsfoU/r+aMbNcpzp+vaBVwS/gDKzPY5DDZWqz0XjZMwWfRbw8WexzMIvCsYfr
7eaHbWLXRRuDhn40nc7rovhLpLE2KB4j9Qr/VATiLCyhSaMZxslRkQdtYypdImKa
FPMBcMYcgcFX1eKDpYQTJIDTckAlcFZ5u1BCWh9dbJtaEh4UYqenjLQeX6+KP1aG
faMM1XwYwxax6N5MXhxNmpBiTlHufg1jekDmQk20sa/qYzvF8Q3RFZ4k0plV0e0W
xbtgyD+zX5spPnE0EAuXDdLOa6Z8dmCAC/iCA6ClLvS/mm8iFF0UeKM=
-----END CERTIFICATE-----
Generated at Fri May 3 11:55:22 2024 by rpki-client on console-fra.rpki-client.org