
Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
File: 716ED138312A679CA1B1F88B3EF7301163F16356.mft (raw, json)
Hash identifier: +U1c2ik3LmL5FKflP67VhwcEN77I83pjndUhygAb79w=
Subject key identifier: 4A:51:38:E2:8C:F4:5F:67:D8:7D:C1:26:F9:E2:77:F3:88:6E:2B:F2
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Certificate issuer: /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial: DBADA1D61D6E86A352F3853FBA4425FD3F6BF0
Authority info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
Manifest number: 02CB
Signing time: Tue 14 Oct 2025 12:26:29 +0000
Manifest this update: Tue 14 Oct 2025 12:21:29 +0000
Manifest next update: Wed 15 Oct 2025 14:20:29 +0000
Files and hashes: 1: 3137322e39392e3233332e302f32342d3332203d3e203532303235.roa (hash: KkRFwWoVouYPlN9FZtAB+SIniYegt5ZgOLBqQB0aq0w=)
2: 716ED138312A679CA1B1F88B3EF7301163F16356.crl (hash: fnYXOhRjrdpqYPycI4v80eacZEIF5dYT406+HUVc07E=)
3: 3139322e36372e33322e302f32332d3332203d3e203532303235.roa (hash: zkVtE0WfV+Fwn0tQgQ5KR4l9aClA3aKxUq3YYzClvB8=)
4: 3139322e36372e33322e302f32342d3332203d3e203335393532.roa (hash: mUfNY7os5fr8QGeFHlo42Vgs7dXdlP2eLn8gGRtO7nc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
db:ad:a1:d6:1d:6e:86:a3:52:f3:85:3f:ba:44:25:fd:3f:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
Validity
Not Before: Oct 14 12:21:29 2025 GMT
Not After : Oct 15 14:20:29 2025 GMT
Subject: CN=4A5138E28CF45F67D87DC126F9E277F3886E2BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:f3:4a:95:e0:c7:43:1a:a3:bc:a8:ba:af:
d4:24:34:b1:84:cb:1d:4d:d2:13:e8:c2:2b:24:7c:
60:84:fb:73:a6:d0:80:c6:c7:fd:75:30:c4:54:f8:
6b:97:22:76:f6:3d:50:20:d3:77:0c:d3:6a:06:bd:
a0:c7:78:86:1d:39:dc:99:60:f7:bd:2e:d7:4d:ff:
1f:d7:3e:8c:12:94:22:68:a7:8c:46:59:8e:b7:10:
c2:20:86:c9:93:e0:31:9d:bd:c8:3c:45:13:8d:a2:
46:0c:04:23:67:df:a4:e0:da:df:4d:65:81:f0:6b:
18:be:2c:a9:a9:46:f9:66:e2:ae:00:e1:fd:ae:c2:
b5:29:b9:d6:17:9e:52:15:ca:4a:df:95:16:da:2b:
44:29:c3:77:ef:ac:72:f4:3b:4e:a7:09:30:51:ba:
f7:1c:40:ac:3c:b9:8a:50:e5:67:2a:75:f6:73:c6:
fa:ed:e5:e2:b6:0c:64:0c:17:ef:c3:c1:97:5a:72:
e3:e1:83:08:e1:44:f6:b5:de:80:63:92:cc:55:5f:
3b:58:dc:cd:af:6e:d7:d3:88:b5:00:9d:a3:fd:7e:
90:fd:f3:61:14:ba:7c:aa:28:08:bd:87:37:c8:fc:
5a:5d:91:81:9b:3d:e5:d9:22:7a:b3:07:a5:a9:26:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:38:E2:8C:F4:5F:67:D8:7D:C1:26:F9:E2:77:F3:88:6E:2B:F2
X509v3 Authority Key Identifier:
keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:af:f8:77:9e:c0:51:0b:57:10:77:64:d5:90:87:40:81:52:
05:6d:4b:b5:b2:67:ab:6f:c9:22:4c:b7:57:d9:4a:42:64:88:
32:de:9e:5a:68:30:3c:38:5b:68:aa:65:63:0e:43:26:52:0d:
ce:da:a3:df:61:0f:29:38:b3:ac:95:2e:09:fd:43:70:0b:89:
16:7d:c7:66:8f:32:51:36:83:5e:9b:c5:73:e2:4e:10:20:13:
1b:89:09:5c:f4:f7:1b:20:91:30:89:db:a7:6d:ae:b9:90:8e:
16:e2:7d:d8:3a:58:9a:92:68:35:a0:65:0f:fe:0f:33:bb:c2:
74:47:9d:23:19:98:b8:bd:c5:7d:f3:d5:8d:9e:aa:c1:99:38:
cb:d0:97:37:23:e4:d3:aa:ca:af:68:e0:25:e7:d7:9a:bc:ac:
ef:82:29:b4:71:85:58:16:4d:c1:a2:07:0c:56:19:ba:42:bf:
4e:6e:14:fc:98:3f:a2:19:2b:5e:e7:7c:49:41:7f:3d:ce:f8:
94:0f:c7:f9:87:f1:bc:db:fd:1a:57:bf:c8:b7:ac:9a:e7:c7:
30:e9:3a:22:e1:bd:4c:37:01:53:67:ff:66:77:3d:39:e9:12:
dd:99:3e:02:34:9a:00:7b:b4:99:82:ef:03:95:eb:41:e5:36:
6d:7c:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:48 2025 by rpki-client