Manifest
$ rpki-client -vvf dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
File: F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft (raw, json)
Hash identifier: SRdMYpjqg8OEHI2tuXWaeobJzc0OtiI18UYfZ/D0+44=
Subject key identifier: 1B:84:B2:65:60:9C:D1:3A:E8:48:5E:19:8E:F8:17:E2:A5:A8:FF:69
Authority key identifier: F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
Certificate issuer: /CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
Certificate serial: 65F4C05010CE63FB12A9C39F164734207561A0F2
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
Subject info access: rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
Manifest number: 02E8
Signing time: Mon 25 Nov 2024 20:27:50 +0000
Manifest this update: Mon 25 Nov 2024 20:22:50 +0000
Manifest next update: Tue 26 Nov 2024 22:57:50 +0000
Files and hashes: 1: F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl (hash: aqcah6NPrAjLSyLc4XfqcuOMK/4pD7F5p8wLl08VHmE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f4:c0:50:10:ce:63:fb:12:a9:c3:9f:16:47:34:20:75:61:a0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
Validity
Not Before: Nov 25 20:22:50 2024 GMT
Not After : Nov 26 22:57:50 2024 GMT
Subject: CN=1B84B265609CD13AE8485E198EF817E2A5A8FF69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:0e:1e:95:f0:3f:7d:8b:ba:81:eb:f9:4f:
31:23:05:0f:f5:69:89:73:0b:ca:42:3f:30:a1:21:
1d:e5:51:0a:8d:4f:8f:69:0a:5d:2f:fa:0f:1d:df:
06:aa:f8:dd:b0:4b:82:ff:a6:00:70:3f:e3:a4:93:
bd:2d:ad:77:c9:24:33:b6:9d:ac:c1:ed:3e:cc:73:
a6:39:be:b6:6f:2b:68:64:07:a8:cd:7c:29:b3:7c:
44:cb:1a:04:25:a3:86:00:5e:1c:92:12:35:11:83:
a5:41:04:a8:75:1a:85:2e:0e:2e:28:75:71:64:84:
73:56:f3:19:60:11:16:19:28:9a:06:34:b5:7d:72:
a7:10:2e:7a:29:2d:02:4d:31:a6:27:be:d0:f5:d0:
23:97:45:b0:c2:af:40:1a:a2:a3:cb:1e:c1:d0:d9:
fd:cb:30:7c:56:a3:e6:75:a7:4f:7b:06:c5:00:36:
9e:5d:aa:09:7d:92:49:67:09:03:b7:2c:0e:b3:04:
4d:92:61:8d:85:fb:02:62:61:08:f4:57:b0:4d:0c:
04:28:7f:13:92:c3:71:df:98:d5:34:75:f3:49:5e:
88:62:c3:d7:c6:e2:bf:f7:e6:07:2b:91:50:2f:9f:
7d:6b:77:ca:c3:e1:9f:e6:e3:f6:3f:a2:b9:6b:db:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:B2:65:60:9C:D1:3A:E8:48:5E:19:8E:F8:17:E2:A5:A8:FF:69
X509v3 Authority Key Identifier:
keyid:F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:a0:69:81:02:c3:9d:df:e7:83:ed:cd:d3:40:24:31:ef:
65:cd:cb:60:34:fd:1f:28:39:c7:c1:f0:ac:20:bd:0a:af:75:
ae:8d:d9:76:5e:60:17:e0:90:cb:ab:b2:ed:5e:15:3e:00:8d:
4c:46:5f:69:19:66:90:75:b6:d4:1d:91:09:65:88:83:62:90:
74:c0:c6:13:ff:ff:19:1a:73:9f:03:e3:9b:fc:e9:24:d8:00:
7b:24:8b:4e:0c:70:a9:ac:5b:ca:cd:10:5f:04:7a:73:b5:b1:
1b:c6:8b:60:c4:c9:b9:7d:d0:dc:f7:8a:ff:d2:02:ea:cf:f0:
bb:94:5c:57:de:d9:f2:4a:7a:71:9b:ac:b6:0b:62:7f:99:df:
6d:54:21:92:9c:9e:be:a9:71:11:22:bd:8f:e9:d9:25:a7:63:
bd:ef:09:9a:ae:84:11:80:36:63:ce:c8:e4:89:d7:c4:59:1b:
e3:86:22:68:cc:e1:b1:45:2d:dc:8e:30:10:9f:74:da:4c:1e:
20:36:a7:c1:23:dc:a6:23:08:86:e1:0d:56:6f:dc:6e:3e:da:
c4:0a:5c:bb:6c:5b:ee:2b:1e:0a:a6:f3:49:f7:b3:95:34:8d:
5f:9a:dd:46:5e:86:a0:dd:4d:48:2b:25:97:b3:d6:1a:f0:9e:
12:7c:7a:a8
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIUZfTAUBDOY/sSqcOfFkc0IHVhoPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAzOTlD
RUM2RkJDRTAeFw0yNDExMjUyMDIyNTBaFw0yNDExMjYyMjU3NTBaMDMxMTAvBgNV
BAMTKDFCODRCMjY1NjA5Q0QxM0FFODQ4NUUxOThFRjgxN0UyQTVBOEZGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIg4elfA/fYu6gev5TzEjBQ/1
aYlzC8pCPzChIR3lUQqNT49pCl0v+g8d3waq+N2wS4L/pgBwP+Okk70trXfJJDO2
nazB7T7Mc6Y5vrZvK2hkB6jNfCmzfETLGgQlo4YAXhySEjURg6VBBKh1GoUuDi4o
dXFkhHNW8xlgERYZKJoGNLV9cqcQLnopLQJNMaYnvtD10COXRbDCr0AaoqPLHsHQ
2f3LMHxWo+Z1p097BsUANp5dqgl9kklnCQO3LA6zBE2SYY2F+wJiYQj0V7BNDAQo
fxOSw3HfmNU0dfNJXohiw9fG4r/35gcrkVAvn31rd8rD4Z/m4/Y/orlr2+hJAgMB
AAGjggIDMIIB/zAdBgNVHQ4EFgQUG4SyZWCc0TroSF4ZjvgX4qWo/2kwHwYDVR0j
BBgwFoAU9GSYlqcKIM2Ku5ZE3gwDmc7G+84wDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzEzL0Y0NjQ5
ODk2QTcwQTIwQ0Q4QUJCOTY0NERFMEMwMzk5Q0VDNkZCQ0UuY3JsMIGTBggrBgEF
BQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5u
ZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8y
L0Y0NjQ5ODk2QTcwQTIwQ0Q4QUJCOTY0NERFMEMwMzk5Q0VDNkZCQ0UuY2VyMGYG
CCsGAQUFBwELBFowWDBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9kZXYudHcvcnBraS9B
dWd1c3QvMTMvRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAzOTlDRUM2RkJD
RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIuCoGmBAsOd3+eD7c3TQCQx72XNy2A0/R8oOcfB8KwgvQqv
da6N2XZeYBfgkMursu1eFT4AjUxGX2kZZpB1ttQdkQlliINikHTAxhP//xkac58D
45v86STYAHski04McKmsW8rNEF8EenO1sRvGi2DEybl90Nz3iv/SAurP8LuUXFfe
2fJKenGbrLYLYn+Z321UIZKcnr6pcREivY/p2SWnY73vCZquhBGANmPOyOSJ18RZ
G+OGImjM4bFFLdyOMBCfdNpMHiA2p8Ej3KYjCIbhDVZv3G4+2sQKXLtsW+4rHgqm
80n3s5U0jV+a3UZehqDdTUgrJZez1hrwnhJ8eqg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:18:46 2025 by rpki-client