Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier: V23F5Q7Fg40TaRVQN7wkZml+535zo0UeOQG7g2H8H9E=
Subject key identifier: 2A:C9:4B:95:BC:46:F1:3C:08:70:A5:F0:AD:F5:D8:E8:20:49:1A:7E
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer: /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial: 6130464028118FE68F53F4408AED68B1E2BFF1AE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number: 053D
Signing time: Sun 13 Apr 2025 08:14:18 +0000
Manifest this update: Sun 13 Apr 2025 08:09:18 +0000
Manifest next update: Mon 14 Apr 2025 12:00:18 +0000
Files and hashes: 1: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=)
2: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=)
3: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: uKd9bVpN5ngQ27mWV7k8foFRilinWH84q5DsfzASWiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:30:46:40:28:11:8f:e6:8f:53:f4:40:8a:ed:68:b1:e2:bf:f1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Validity
Not Before: Apr 13 08:09:18 2025 GMT
Not After : Apr 14 12:00:18 2025 GMT
Subject: CN=2AC94B95BC46F13C0870A5F0ADF5D8E820491A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:cb:dd:c8:66:06:e3:90:5e:93:b0:07:a7:
f8:21:33:78:47:e0:7a:a2:8a:2c:c3:c4:76:df:06:
53:04:26:58:db:d1:5e:22:e8:c6:9c:68:ef:0d:5d:
28:f2:2e:46:01:a6:98:5c:7c:86:98:ce:3d:e9:66:
36:5d:27:ee:f8:66:33:5e:fc:a1:11:fb:1d:f4:d8:
da:66:1b:4c:b2:10:32:fa:a4:a8:01:0f:36:ba:f5:
89:9d:54:3e:d9:9d:3f:fa:d1:af:ac:74:22:86:0e:
f6:39:6c:4e:53:40:f0:d4:94:9f:f5:f3:ce:3b:37:
cc:3f:da:27:3f:34:6e:60:2d:da:ce:c9:12:30:43:
5d:61:9a:3d:db:7b:54:c6:80:28:f7:00:76:77:dd:
c3:ac:e9:db:7e:a7:fc:6e:90:6d:ab:c3:71:f9:3f:
a5:70:c0:ba:b5:f5:96:3a:cd:20:dc:12:bd:a4:28:
10:38:5c:6c:52:3c:fe:f7:3e:6e:2e:08:37:03:95:
04:d1:a5:a8:73:0b:cf:eb:d1:89:df:3f:ec:c8:d0:
d8:db:f2:1e:9f:57:4a:a5:23:0f:39:16:e9:b3:69:
2b:df:af:83:83:18:cb:37:7f:3f:9c:d4:a4:f2:6b:
f1:38:e3:d8:ac:01:91:14:75:bd:ec:62:97:78:95:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:4B:95:BC:46:F1:3C:08:70:A5:F0:AD:F5:D8:E8:20:49:1A:7E
X509v3 Authority Key Identifier:
keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5b:96:b1:3d:4c:8a:74:65:14:84:28:0f:34:f8:a6:3d:2a:
9b:68:d4:5c:6e:8d:db:8d:28:2f:b6:1f:48:38:23:ec:15:db:
8d:16:35:0f:56:ed:ef:61:9f:50:23:86:59:95:5c:fd:80:9f:
10:ac:26:78:dd:93:6f:5f:70:d3:f6:43:6b:4c:1e:bf:d9:27:
ca:98:fb:9b:3d:dc:7e:4d:5e:5c:b3:b6:f5:47:8b:8f:aa:cb:
bc:41:36:a1:c3:a7:28:ea:a1:7f:c9:41:e3:b6:2e:3f:a6:12:
c3:50:ec:4b:2f:61:2c:36:89:4a:b5:d6:fe:1f:7f:6d:56:02:
65:2f:0d:60:fa:f1:b3:70:79:8c:82:06:c9:38:2b:3f:7d:81:
69:26:9d:bb:cc:fa:67:72:a8:93:19:a8:12:c2:5e:9b:6f:27:
3a:e7:16:7d:43:e5:a1:cb:4f:c7:a6:fa:35:e2:8f:8a:e5:73:
e0:8d:ed:97:a9:09:ab:32:1b:08:31:40:76:e4:ac:3e:02:f4:
18:74:07:a9:f6:72:7a:3a:d7:d3:25:95:c2:40:dd:be:18:e7:
22:67:3d:ba:88:6c:60:20:0c:69:34:02:07:c7:8c:ae:36:c4:
99:62:3e:f4:c3:83:48:61:f2:6c:51:f3:d8:a2:21:a2:32:d2:
d6:55:38:70
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUYTBGQCgRj+aPU/RAiu1oseK/8a4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yNTA0MTMwODA5MThaFw0yNTA0MTQxMjAwMThaMDMxMTAvBgNV
BAMTKDJBQzk0Qjk1QkM0NkYxM0MwODcwQTVGMEFERjVEOEU4MjA0OTFBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zMvdyGYG45Bek7AHp/ghM3hH
4HqiiizDxHbfBlMEJljb0V4i6MacaO8NXSjyLkYBpphcfIaYzj3pZjZdJ+74ZjNe
/KER+x302NpmG0yyEDL6pKgBDza69YmdVD7ZnT/60a+sdCKGDvY5bE5TQPDUlJ/1
8847N8w/2ic/NG5gLdrOyRIwQ11hmj3be1TGgCj3AHZ33cOs6dt+p/xukG2rw3H5
P6VwwLq19ZY6zSDcEr2kKBA4XGxSPP73Pm4uCDcDlQTRpahzC8/r0YnfP+zI0Njb
8h6fV0qlIw85FumzaSvfr4ODGMs3fz+c1KTya/E449isAZEUdb3sYpd4lbhHAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUKslLlbxG8TwIcKXwrfXY6CBJGn4wHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIweQYIKwYBBQUH
AQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3Jl
cG8vcGFyYWRveG5ldHdvcmtzLzEvM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgw
QjI4N0ExQ0RCMkE1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAKlblrE9TIp0ZRSEKA80+KY9Kpto1Fxu
jduNKC+2H0g4I+wV240WNQ9W7e9hn1AjhlmVXP2AnxCsJnjdk29fcNP2Q2tMHr/Z
J8qY+5s93H5NXlyztvVHi4+qy7xBNqHDpyjqoX/JQeO2Lj+mEsNQ7EsvYSw2iUq1
1v4ff21WAmUvDWD68bNweYyCBsk4Kz99gWkmnbvM+mdyqJMZqBLCXptvJzrnFn1D
5aHLT8em+jXij4rlc+CN7ZepCasyGwgxQHbkrD4C9Bh0B6n2cno619MllcJA3b4Y
5yJnPbqIbGAgDGk0AgfHjK42xJliPvTDg0hh8mxR89iiIaIy0tZVOHA=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net