Manifest

$ rpki-client -vvf dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
File:                     2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft (raw, json)
Hash identifier:          pC7m8lSfejDZiI97F4n40YXK/ORlaEzq+k/k3Y0UrbA=
Subject key identifier:   57:F4:A9:E2:28:AF:17:2F:E8:74:5C:A8:BF:B5:E3:92:5F:E2:B2:99
Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
Certificate issuer:       /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Certificate serial:       29D64D1DFFB93146A59AAE419EBE4101122F4EF8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject info access:      rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
Manifest number:          02E2
Signing time:             Mon 25 Nov 2024 20:27:50 +0000
Manifest this update:     Mon 25 Nov 2024 20:22:50 +0000
Manifest next update:     Tue 26 Nov 2024 22:15:50 +0000
Files and hashes:         1: 1A8C29884038907EDD0174FADC751F16456E1C56.cer (hash: xL2Tvy1ql1sAdwotZRR0gntZerivJtgiKMvNr9vylyQ=)
                          2: 2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl (hash: iBzSrxILt1IBZSRzj3ZbilstjpWj2leAb2bqwe5vkmo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d6:4d:1d:ff:b9:31:46:a5:9a:ae:41:9e:be:41:01:12:2f:4e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
        Validity
            Not Before: Nov 25 20:22:50 2024 GMT
            Not After : Nov 26 22:15:50 2024 GMT
        Subject: CN=57F4A9E228AF172FE8745CA8BFB5E3925FE2B299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f6:9c:2b:eb:a2:90:ae:f2:bd:c5:9c:5a:dd:
                    2a:4b:2c:e4:13:1f:90:de:5b:ad:b6:5e:22:e4:42:
                    a7:0d:cb:2d:56:7f:fc:d4:de:4d:b3:36:a8:b2:f3:
                    8d:90:00:9c:c1:98:f2:ff:61:64:dd:e1:80:e9:c0:
                    ed:b9:5c:49:62:2f:cc:14:c9:10:1a:76:06:78:91:
                    ae:f2:ab:95:01:fe:9f:95:ab:fd:f0:f9:04:0c:97:
                    96:c6:8a:96:eb:36:c2:9b:f3:5b:ea:de:57:73:63:
                    4d:af:25:26:1e:e8:e2:73:e4:02:d8:23:9e:bc:8e:
                    59:1c:27:d5:6c:1a:7d:13:85:f4:58:83:12:d9:74:
                    51:75:e2:e6:59:5a:d1:1b:64:07:8f:7c:e8:fe:66:
                    44:68:d7:d6:bf:ff:81:ad:d7:cc:7a:20:b7:b5:27:
                    49:6b:f2:fc:f9:fb:de:b0:65:42:9f:ba:f5:93:a7:
                    4f:15:d8:86:c0:0e:33:e2:62:1b:50:1a:44:00:64:
                    ea:59:c4:41:12:c3:d1:d9:8e:0a:90:49:dc:88:5e:
                    bc:4a:17:fe:96:ca:bf:66:b2:bb:08:5f:93:5e:a5:
                    90:23:30:03:74:40:cf:9d:9e:f1:df:c6:23:bc:6f:
                    f4:f5:91:9e:3e:2a:70:1e:9c:90:fb:79:cd:10:2f:
                    85:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F4:A9:E2:28:AF:17:2F:E8:74:5C:A8:BF:B5:E3:92:5F:E2:B2:99
            X509v3 Authority Key Identifier:
                keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:81:44:bb:3e:a7:13:f2:fa:79:e1:06:8c:0c:95:a5:ff:
         27:6d:03:bd:a0:96:92:38:c4:24:ce:36:5c:61:41:08:bf:69:
         b7:4f:de:36:cf:a7:3b:1b:ee:48:ac:9d:5f:a1:b6:31:7b:24:
         fa:c4:0c:c3:b6:c6:40:2e:ca:e8:5f:1f:33:54:7f:49:27:a4:
         19:c2:d6:15:65:f0:c5:33:66:53:6a:9e:6c:c4:18:8e:55:c4:
         a5:06:38:75:77:3c:a0:da:41:4a:f1:56:a8:20:3c:a0:c4:b5:
         25:82:5e:96:bf:4c:ed:d3:aa:60:9f:0b:bc:0d:73:30:50:a9:
         3a:8c:7a:25:b0:e1:a7:df:fe:a1:3b:49:86:01:95:95:ef:5e:
         7b:db:be:a8:45:de:17:7f:8c:21:c7:e8:aa:b2:c1:8d:c8:a7:
         f7:3f:e6:20:9a:74:4f:dd:fc:55:2b:60:2f:5f:32:1c:8b:8e:
         26:1a:c4:df:24:19:e3:6f:39:6e:0d:4a:5a:06:15:83:1c:57:
         2e:b1:96:c8:88:08:62:04:9d:f4:3b:fd:54:4e:43:3d:a8:b4:
         06:b5:e0:4a:d9:35:b1:c3:3c:db:a1:62:14:fc:5a:31:84:63:
         a9:0d:20:9c:7f:fa:bd:7c:c6:de:10:f7:16:52:bf:65:2d:49:
         d8:b0:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----