Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File:                     3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier:          MATsBvNJt19qvQnQ8pG/2QxiD+7LAb2Kx93BxId4UQg=
Subject key identifier:   ED:E4:3D:F2:EA:E6:B6:53:31:F7:42:F5:F9:72:83:50:2D:8F:4F:25
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       67A446A949C0263A4FECF048AFB5C2B1E3D06D6E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number:          05A0
Signing time:             Sun 29 Jun 2025 06:29:57 +0000
Manifest this update:     Sun 29 Jun 2025 06:24:57 +0000
Manifest next update:     Mon 30 Jun 2025 22:23:57 +0000
Files and hashes:         1: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: NL752tylFXdvyD8P40hIPwQGYCgeo3HHF9F6LZSoj0I=)
                          2: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: hnOSReG/7hd4p1QjBxkQpn/X6pBVjQcA/addSxh/P54=)
                          3: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: B7lSDIrBTgwVQm/vcJcAfhxgJeVcyzUT4n4/zGRIaRU=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a4:46:a9:49:c0:26:3a:4f:ec:f0:48:af:b5:c2:b1:e3:d0:6d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Jun 29 06:24:57 2025 GMT
            Not After : Jun 30 22:23:57 2025 GMT
        Subject: CN=EDE43DF2EAE6B65331F742F5F97283502D8F4F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:7f:f7:83:46:b9:3c:c8:9c:12:a0:f9:3f:
                    85:9d:ff:5e:5a:85:1e:2f:57:48:39:52:fd:f8:f0:
                    ea:2b:eb:56:a8:b0:e3:99:96:e6:34:e7:ec:6e:cf:
                    ee:f3:69:19:98:c9:b3:a2:f2:c8:20:e5:85:c3:a8:
                    b6:7d:e6:91:c1:a7:7b:f7:d0:7a:86:1e:74:2f:a7:
                    82:2b:06:b4:04:4f:48:f2:46:c8:2d:78:f1:bc:eb:
                    e0:df:46:7d:89:ce:9f:75:71:19:86:7c:2b:bf:bd:
                    f9:fa:e1:12:69:3e:75:de:50:07:ed:78:3e:33:f4:
                    82:00:ca:2f:e3:50:50:62:b7:92:7f:06:14:4a:a7:
                    19:9c:85:b9:90:3b:b7:bf:3d:99:cd:95:dc:20:ef:
                    06:a1:13:dd:70:b0:e5:8e:7e:22:ff:31:f5:ff:66:
                    71:f3:e3:7d:3d:7d:be:e5:f9:24:ac:bb:12:95:02:
                    b2:52:a5:66:bb:57:ce:26:23:ca:44:35:30:4f:37:
                    62:ac:16:ee:6f:91:11:93:b5:e5:b2:1e:65:4d:94:
                    2c:e6:f4:0d:ce:2f:79:2d:00:da:0c:c0:ae:15:74:
                    7c:83:c4:43:d0:0f:48:37:c2:71:5b:65:3b:11:c8:
                    a9:f8:c5:9a:91:68:99:3a:85:de:66:6d:fa:6d:53:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:3D:F2:EA:E6:B6:53:31:F7:42:F5:F9:72:83:50:2D:8F:4F:25
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6f:c9:3a:38:02:5b:95:96:eb:2b:0c:6a:28:fd:fe:c5:5c:
         bb:42:34:6a:fe:b2:72:7d:45:15:5b:53:93:e2:47:a2:0f:46:
         1e:07:14:1e:ee:ef:81:ea:e7:ae:9c:87:d8:00:ac:00:42:52:
         db:89:d0:3a:1c:7d:48:69:d2:eb:64:4c:ed:58:dc:74:79:c3:
         d9:cd:8a:e5:28:35:74:9f:ea:4f:b6:c8:5c:bc:ca:d2:d0:89:
         f3:cd:c6:29:92:47:59:97:14:41:96:5d:ef:be:37:54:fc:7b:
         6a:f1:73:56:64:ff:c8:4b:e9:8f:1a:92:6a:0f:c4:e8:9c:78:
         c3:e6:a3:60:a6:c8:24:58:2a:01:68:65:77:d6:af:5a:3f:13:
         aa:8e:10:d9:df:cb:13:5f:15:3f:48:f4:70:85:57:6c:fa:b0:
         c0:5e:03:86:a3:24:57:16:a8:15:8f:3c:1b:8d:15:8c:56:1b:
         90:f4:37:b6:46:0d:4b:2f:8b:3e:3e:44:ad:f6:b4:14:ee:39:
         44:3a:51:6c:8a:e7:64:23:e7:58:97:4a:72:7d:b9:82:cc:18:
         2f:bd:44:ce:48:72:0e:64:a6:68:42:92:9c:cf:b6:00:00:8e:
         0a:52:e6:73:5a:6a:a8:b2:ee:2a:d8:57:54:35:46:00:18:ba:
         9b:6a:00:26
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUZ6RGqUnAJjpP7PBIr7XCsePQbW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yNTA2MjkwNjI0NTdaFw0yNTA2MzAyMjIzNTdaMDMxMTAvBgNV
BAMTKEVERTQzREYyRUFFNkI2NTMzMUY3NDJGNUY5NzI4MzUwMkQ4RjRGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczX/3g0a5PMicEqD5P4Wd/15a
hR4vV0g5Uv348Oor61aosOOZluY05+xuz+7zaRmYybOi8sgg5YXDqLZ95pHBp3v3
0HqGHnQvp4IrBrQET0jyRsgtePG86+DfRn2Jzp91cRmGfCu/vfn64RJpPnXeUAft
eD4z9IIAyi/jUFBit5J/BhRKpxmchbmQO7e/PZnNldwg7wahE91wsOWOfiL/MfX/
ZnHz4309fb7l+SSsuxKVArJSpWa7V84mI8pENTBPN2KsFu5vkRGTteWyHmVNlCzm
9A3OL3ktANoMwK4VdHyDxEPQD0g3wnFbZTsRyKn4xZqRaJk6hd5mbfptU3kJAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU7eQ98urmtlMx90L1+XKDUC2PTyUwHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIweQYIKwYBBQUH
AQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3Jl
cG8vcGFyYWRveG5ldHdvcmtzLzEvM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgw
QjI4N0ExQ0RCMkE1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBADlvyTo4AluVlusrDGoo/f7FXLtCNGr+
snJ9RRVbU5PiR6IPRh4HFB7u74Hq566ch9gArABCUtuJ0DocfUhp0utkTO1Y3HR5
w9nNiuUoNXSf6k+2yFy8ytLQifPNximSR1mXFEGWXe++N1T8e2rxc1Zk/8hL6Y8a
kmoPxOiceMPmo2CmyCRYKgFoZXfWr1o/E6qOENnfyxNfFT9I9HCFV2z6sMBeA4aj
JFcWqBWPPBuNFYxWG5D0N7ZGDUsviz4+RK32tBTuOUQ6UWyK52Qj51iXSnJ9uYLM
GC+9RM5Icg5kpmhCkpzPtgAAjgpS5nNaaqiy7irYV1Q1RgAYuptqACY=
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:33:43 2025 by rpki-client