Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
File:                     E08A23B82DF37E4701E573987559B077CD666175.mft (raw, json)
Hash identifier:          Q5ockey5S8LEzrOXd79u8aJ+7cGnjLo+gRX3zPDE8bY=
Subject key identifier:   8E:80:58:50:89:F3:F9:7D:B2:32:2C:59:11:62:D5:72:1C:9E:D7:00
Authority key identifier: E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75
Certificate issuer:       /CN=E08A23B82DF37E4701E573987559B077CD666175
Certificate serial:       10D1EDA1685E592EC2CA48A2C1F90925EEBF3B63
Authority info access:    rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer
Subject info access:      rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
Manifest number:          4D
Signing time:             Fri 22 Nov 2024 08:16:16 +0000
Manifest this update:     Fri 22 Nov 2024 08:11:16 +0000
Manifest next update:     Sat 23 Nov 2024 11:18:16 +0000
Files and hashes:         1: 326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa (hash: Z7TCTzTsvDmLnPCx8145HLkwTRsWV/ZM20qu7F08Ils=)
                          2: 326130353a646663363a393330303a3a2f34302d3438203d3e203436313338.roa (hash: 9Dh6cYcek23o5WvDAWhc+kFKUeCU3Wffgqo2AsS2Ggc=)
                          3: E08A23B82DF37E4701E573987559B077CD666175.crl (hash: 9kCspiVbUsn7jATasGT8PXiiTmaz20XADhSfgGH+db4=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.crl
                          rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
                          rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d1:ed:a1:68:5e:59:2e:c2:ca:48:a2:c1:f9:09:25:ee:bf:3b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E08A23B82DF37E4701E573987559B077CD666175
        Validity
            Not Before: Nov 22 08:11:16 2024 GMT
            Not After : Nov 23 11:18:16 2024 GMT
        Subject: CN=8E80585089F3F97DB2322C591162D5721C9ED700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:6d:9b:a9:29:e5:3e:ae:cb:0c:97:79:12:
                    80:3c:54:bb:64:9d:45:ca:2e:78:ef:d5:72:00:67:
                    3b:2a:24:08:12:5c:b9:ee:ab:39:42:09:b2:75:01:
                    a6:04:ae:df:45:5c:8f:e0:d5:cf:cb:ea:75:6c:4b:
                    09:56:18:29:1e:63:3b:c9:b5:5d:37:69:e2:4e:aa:
                    c7:04:46:98:c2:e9:1f:43:0a:2b:40:b2:0e:27:26:
                    ef:df:5d:dc:2d:e1:84:48:e1:c1:ba:7a:53:56:58:
                    0f:e5:3c:5a:f3:a9:b2:50:ed:7f:1e:e4:ba:c5:c7:
                    83:92:f7:20:ac:e8:a7:5a:cd:05:96:fc:aa:12:a5:
                    b3:f9:3f:43:e5:ce:10:f5:65:0b:2b:e5:cd:71:26:
                    a6:18:03:c3:73:35:99:90:00:8c:23:42:5d:27:90:
                    46:5c:7b:35:66:90:ee:21:92:2a:a3:b3:24:d4:1e:
                    38:7a:fe:ad:1a:da:49:22:75:e0:2b:c8:51:eb:58:
                    1b:13:4b:d4:44:11:e6:f9:ad:bd:36:0d:4f:64:0c:
                    00:c4:74:56:bb:87:94:50:dc:2e:a9:e4:bf:ee:39:
                    7e:b8:cd:c9:87:07:7e:cf:a4:36:04:08:7e:a6:e6:
                    b3:7c:e3:c5:a5:a2:f9:c8:09:e6:6c:ce:c5:a2:6e:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:58:50:89:F3:F9:7D:B2:32:2C:59:11:62:D5:72:1C:9E:D7:00
            X509v3 Authority Key Identifier:
                keyid:E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7d:94:e3:b4:92:98:31:16:42:1b:82:ff:8a:1b:7f:b4:b8:
         9d:af:b8:6d:5c:3c:8b:4b:7c:6c:01:02:0a:75:51:52:02:8c:
         40:a1:8c:a1:ca:47:fc:81:df:d4:4a:08:62:87:55:e0:06:19:
         bf:ed:43:da:f9:3c:f9:a6:4f:74:48:6d:61:f0:1a:14:05:54:
         25:a3:bf:f3:af:e5:d7:e6:81:e7:a2:5e:15:e3:f0:c2:48:aa:
         79:89:e3:03:3c:34:8f:b1:2c:c0:0c:5b:22:9f:86:2e:94:69:
         28:ea:4c:ad:80:78:27:72:73:71:bf:a9:39:0c:dc:01:7d:30:
         6f:8b:1c:9d:11:db:f0:b0:19:8c:fb:1e:de:63:22:43:50:c5:
         83:e4:77:5c:ae:b9:2b:61:1b:06:9d:e0:09:3f:a3:ab:00:c0:
         e7:33:d9:cd:b0:41:2f:37:53:0f:39:84:65:0d:62:79:50:11:
         fe:39:87:c5:e0:ce:b3:f1:b2:66:bc:1c:e4:06:31:6c:d2:dd:
         f8:b7:f8:4f:66:fc:4c:3d:ac:2d:7f:17:bd:1f:d0:d4:08:05:
         66:2f:ba:88:92:de:81:69:b4:08:c9:72:68:94:22:c2:28:30:
         95:6f:de:ac:39:63:ee:e6:d2:d2:81:15:52:da:11:d0:75:f5:
         4a:23:c6:0a
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUENHtoWheWS7CykiiwfkJJe6/O2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA4QTIzQjgyREYzN0U0NzAxRTU3Mzk4NzU1OUIwNzdD
RDY2NjE3NTAeFw0yNDExMjIwODExMTZaFw0yNDExMjMxMTE4MTZaMDMxMTAvBgNV
BAMTKDhFODA1ODUwODlGM0Y5N0RCMjMyMkM1OTExNjJENTcyMUM5RUQ3MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLm22bqSnlPq7LDJd5EoA8VLtk
nUXKLnjv1XIAZzsqJAgSXLnuqzlCCbJ1AaYErt9FXI/g1c/L6nVsSwlWGCkeYzvJ
tV03aeJOqscERpjC6R9DCitAsg4nJu/fXdwt4YRI4cG6elNWWA/lPFrzqbJQ7X8e
5LrFx4OS9yCs6KdazQWW/KoSpbP5P0PlzhD1ZQsr5c1xJqYYA8NzNZmQAIwjQl0n
kEZcezVmkO4hkiqjsyTUHjh6/q0a2kkideAryFHrWBsTS9REEeb5rb02DU9kDADE
dFa7h5RQ3C6p5L/uOX64zcmHB37PpDYECH6m5rN848WlovnICeZszsWibinTAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUjoBYUInz+X2yMixZEWLVchye1wAwHwYDVR0j
BBgwFoAU4IojuC3zfkcB5XOYdVmwd81mYXUwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQVM5NDUvMTQvRTA4QTIz
QjgyREYzN0U0NzAxRTU3Mzk4NzU1OUIwNzdDRDY2NjE3NS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC8x
My9FMDhBMjNCODJERjM3RTQ3MDFFNTczOTg3NTU5QjA3N0NENjY2MTc1LmNlcjBl
BggrBgEFBQcBCwRZMFcwVQYIKwYBBQUHMAuGSXJzeW5jOi8vZGV2LnR3L3Jwa2kv
QVM5NDUvMTQvRTA4QTIzQjgyREYzN0U0NzAxRTU3Mzk4NzU1OUIwNzdDRDY2NjE3
NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAJp9lOO0kpgxFkIbgv+KG3+0uJ2vuG1cPItLfGwBAgp1UVIC
jEChjKHKR/yB39RKCGKHVeAGGb/tQ9r5PPmmT3RIbWHwGhQFVCWjv/Ov5dfmgeei
XhXj8MJIqnmJ4wM8NI+xLMAMWyKfhi6UaSjqTK2AeCdyc3G/qTkM3AF9MG+LHJ0R
2/CwGYz7Ht5jIkNQxYPkd1yuuSthGwad4Ak/o6sAwOcz2c2wQS83Uw85hGUNYnlQ
Ef45h8XgzrPxsma8HOQGMWzS3fi3+E9m/Ew9rC1/F70f0NQIBWYvuoiS3oFptAjJ
cmiUIsIoMJVv3qw5Y+7m0tKBFVLaEdB19Uojxgo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:55 2024 by rpki-client on console-ams.rpki-client.org