Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.mft
File:                     44D2CED453B6999BF6145401EE88F58C7B5D2751.mft (raw, json)
Hash identifier:          hWXnfmTzz12G5v3JxlWoKDJCRC/SsNYIBNmnNSY0bUc=
Subject key identifier:   DE:CB:E5:2F:F3:2D:9E:46:FC:7D:34:57:5C:A2:40:7B:F6:83:07:7E
Authority key identifier: 44:D2:CE:D4:53:B6:99:9B:F6:14:54:01:EE:88:F5:8C:7B:5D:27:51
Certificate issuer:       /CN=44D2CED453B6999BF6145401EE88F58C7B5D2751
Certificate serial:       7473720FEAF3192B6FAB83864460C35298431744
Authority info access:    rsync://dev.tw/rpki/August/8/44D2CED453B6999BF6145401EE88F58C7B5D2751.cer
Subject info access:      rsync://dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.mft
Manifest number:          50
Signing time:             Mon 25 Nov 2024 17:12:02 +0000
Manifest this update:     Mon 25 Nov 2024 17:07:02 +0000
Manifest next update:     Tue 26 Nov 2024 20:21:02 +0000
Files and hashes:         1: 32332e3134392e3234382e302f32342d3234203d3e20323032373336.roa (hash: N7/79kB/YzNjT2pycarlj2VMNOhIzsfGa9IeU0NfTa8=)
                          2: 44D2CED453B6999BF6145401EE88F58C7B5D2751.crl (hash: Y801DdhTvU+wC0dUSVLsLSQo6Su4QfKPQSuZ1hzaTpk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:73:72:0f:ea:f3:19:2b:6f:ab:83:86:44:60:c3:52:98:43:17:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CED453B6999BF6145401EE88F58C7B5D2751
        Validity
            Not Before: Nov 25 17:07:02 2024 GMT
            Not After : Nov 26 20:21:02 2024 GMT
        Subject: CN=DECBE52FF32D9E46FC7D34575CA2407BF683077E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:32:37:33:fb:94:53:ec:e8:36:b7:9e:f6:
                    cc:c2:1d:f8:b3:65:d7:87:4a:76:a2:40:50:11:0d:
                    86:3e:1d:a5:55:55:86:34:95:12:be:b7:37:1f:29:
                    f7:da:30:43:ce:55:75:c2:de:13:ef:ec:4b:ef:ba:
                    bf:a6:f2:c0:fd:7a:63:9d:d8:08:fd:4b:f1:6d:b3:
                    99:bd:6f:db:f7:2a:53:86:0b:a6:b9:08:35:26:cd:
                    61:a8:c7:72:c0:3a:17:ae:42:a4:c2:8d:fc:7a:51:
                    ef:1f:b4:5f:71:37:2d:29:da:cf:f0:34:f0:52:07:
                    40:51:c9:d0:bf:25:29:4d:9b:f6:7b:46:26:0c:9b:
                    8c:da:ab:33:da:46:aa:33:b9:55:83:95:5c:e8:8c:
                    92:41:ab:1b:2e:69:a3:27:fd:08:af:13:c6:c2:11:
                    01:4c:73:f6:94:ae:46:26:70:b4:ed:35:f2:ce:83:
                    18:28:ea:64:90:fc:05:92:c7:bd:87:aa:ae:5f:a5:
                    f6:d9:e2:fd:62:72:b5:8f:f4:81:07:72:ff:ec:09:
                    96:7e:11:4a:32:5e:f1:aa:32:83:72:76:17:a1:65:
                    79:60:d8:09:24:27:1e:6f:9d:ed:92:dd:90:56:56:
                    b1:71:99:23:a9:38:e1:52:b2:9e:2d:03:e1:12:da:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CB:E5:2F:F3:2D:9E:46:FC:7D:34:57:5C:A2:40:7B:F6:83:07:7E
            X509v3 Authority Key Identifier:
                keyid:44:D2:CE:D4:53:B6:99:9B:F6:14:54:01:EE:88:F5:8C:7B:5D:27:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/8/44D2CED453B6999BF6145401EE88F58C7B5D2751.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:58:c2:b8:5f:1c:8c:b0:58:a4:65:9c:62:1b:8d:83:84:36:
         f3:12:ba:c3:7a:8a:f4:68:e3:6a:de:eb:e8:a4:57:10:96:f9:
         fb:da:79:40:12:60:30:b7:bf:1b:ec:ff:a9:ed:ca:e0:f3:03:
         8f:6e:79:44:21:b3:1b:25:ab:02:52:62:6f:13:e8:84:b8:cb:
         76:d5:23:fc:2c:77:08:ca:1a:38:f8:05:1e:5e:dd:e5:7c:99:
         ee:ce:ec:26:6e:78:41:30:8e:5b:15:2f:06:32:b3:35:08:28:
         3a:b5:04:6b:3f:8e:4f:fc:38:cd:40:d1:36:48:3f:98:aa:f0:
         42:b0:01:ca:2e:22:ae:90:90:31:1e:78:de:8e:28:f3:10:e2:
         af:08:16:14:42:38:7e:be:cc:20:99:f4:cc:cd:33:4b:b2:95:
         2e:d2:f0:89:5c:2c:b8:ab:72:c6:ea:51:d9:17:22:89:d1:a9:
         8f:7c:3c:89:63:41:db:0f:28:9f:99:19:d5:5c:8e:de:da:87:
         c2:4a:df:83:e5:30:0f:fe:75:2c:27:08:2d:f0:0c:5c:10:3d:
         a2:13:3f:0e:c6:c3:5a:68:68:63:87:ff:3e:e0:6a:39:7e:f8:
         a4:ef:88:a6:c8:8d:21:59:e1:c3:d0:cd:52:45:04:2b:79:31:
         e7:17:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:13:24 2025 by rpki-client