Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          9k3LVekPUwTJp+nCwzkL2iBQBM6msTK7h3HlRsH+ypo=
Subject key identifier:   79:C7:66:F5:FD:7F:27:13:A5:54:E5:93:3F:E0:05:ED:87:4A:A1:CB
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       3E59523B7E9D2AE5BFC4C4674FE516471DD6D48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          059D
Signing time:             Sat 28 Jun 2025 05:59:54 +0000
Manifest this update:     Sat 28 Jun 2025 05:54:54 +0000
Manifest next update:     Sun 29 Jun 2025 21:52:54 +0000
Files and hashes:         1: AS52025.asa (hash: 77cCkc6eluo0N6RH76WLEOW0TKrHKy8dmUnQoInw2vQ=)
                          2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: ZBmWTsCy9gVx7REGuHFatHtO7eDZUHAkNNg9QU3sQc0=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:59:52:3b:7e:9d:2a:e5:bf:c4:c4:67:4f:e5:16:47:1d:d6:d4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Jun 28 05:54:54 2025 GMT
            Not After : Jun 29 21:52:54 2025 GMT
        Subject: CN=79C766F5FD7F2713A554E5933FE005ED874AA1CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:51:90:ef:42:84:ac:e0:8d:39:cf:97:b5:
                    e5:ae:d5:61:fd:7e:d1:cb:f6:da:d9:ec:86:d6:34:
                    99:e4:c9:b3:87:57:39:ea:bc:97:28:82:6c:a9:4f:
                    0e:fe:f4:ee:d5:b6:a0:50:87:2b:d3:44:4c:5a:a9:
                    b6:d6:b5:e1:8a:e3:45:93:75:60:69:59:bc:48:c9:
                    9c:34:f8:8a:2c:60:e3:4f:4c:15:7e:79:2d:23:de:
                    fe:a1:4a:aa:4c:db:43:8d:5e:64:0d:6f:1c:ba:87:
                    70:b5:62:b8:15:18:3e:31:d0:14:4a:69:25:db:1e:
                    b8:2c:96:0f:b4:e6:23:84:39:9f:2d:e8:d3:c6:05:
                    54:1d:29:82:60:de:3b:b1:51:07:8a:22:ec:15:33:
                    92:c5:74:32:bf:04:3c:76:2f:e6:96:3a:3c:59:a1:
                    cf:ca:5b:2b:d6:4d:4c:b9:c8:89:ae:03:a4:62:55:
                    4d:59:59:71:09:68:85:60:05:05:a1:85:ca:83:79:
                    5a:61:48:b0:83:cd:2b:69:91:d6:b5:10:52:2b:45:
                    50:f4:14:dd:5b:9d:19:10:09:c0:33:9c:60:28:0c:
                    71:12:16:65:f0:47:02:88:fe:22:59:94:46:68:bd:
                    24:da:4e:be:4d:f9:55:a0:59:4f:83:f5:91:75:4d:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C7:66:F5:FD:7F:27:13:A5:54:E5:93:3F:E0:05:ED:87:4A:A1:CB
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:95:23:b8:b3:7b:06:f8:bc:c9:ba:93:6c:3f:b9:6c:d1:
         64:7b:fc:e8:d0:62:47:a1:50:de:28:b4:af:52:b2:e1:00:a0:
         5a:aa:3a:fa:bb:40:27:37:66:04:d0:1d:33:84:65:ae:c9:7f:
         ee:d6:f4:a0:02:4c:65:ec:27:36:7c:8b:03:87:1d:96:50:73:
         e9:89:1e:90:75:e2:7e:7e:84:75:52:43:3a:e3:da:42:b9:d3:
         39:43:11:50:16:95:b6:13:13:cf:4c:4e:0c:8e:10:ba:d6:d8:
         b1:ca:c1:62:7e:43:94:7b:b3:27:7f:0c:e6:e1:eb:91:bc:4b:
         2e:bf:7f:11:fb:7e:d5:17:ff:69:db:2d:ca:f7:2f:22:85:6e:
         2f:c9:ff:9c:8f:f8:b9:3b:ba:24:03:b7:fa:28:64:9f:32:eb:
         67:c6:a3:2a:b8:6a:af:bd:d6:3b:97:92:c9:9f:f4:08:61:e7:
         7f:44:0d:e0:9d:ce:27:82:71:b0:29:d6:38:92:94:49:3e:4a:
         a7:31:b7:be:55:38:18:fc:47:5b:a3:14:e0:0f:61:98:be:e8:
         e7:47:cf:1f:42:51:7e:a8:c0:96:cd:a4:c0:96:c3:05:9e:a1:
         12:b3:bf:c1:46:39:fb:fd:72:92:61:3e:53:ce:42:77:f5:a2:
         74:e9:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:25 2025 by rpki-client