Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
File:                     E08A23B82DF37E4701E573987559B077CD666175.mft (raw, json)
Hash identifier:          Wj7QEZHelUjE5t5qVuCJ97GVa27nykmBndnlg0tbsY4=
Subject key identifier:   85:E3:43:AE:E1:C0:75:87:59:E0:DF:E4:C3:8A:E9:EE:2C:13:2A:64
Authority key identifier: E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75
Certificate issuer:       /CN=E08A23B82DF37E4701E573987559B077CD666175
Certificate serial:       27ABA829BDDCA8CB97E3C7EEBBC3973B0D9FEF5F
Authority info access:    rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer
Subject info access:      rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
Manifest number:          22
Signing time:             Wed 23 Oct 2024 02:42:40 +0000
Manifest this update:     Wed 23 Oct 2024 02:37:40 +0000
Manifest next update:     Thu 24 Oct 2024 04:50:40 +0000
Files and hashes:         1: 326130353a646663363a393330303a3a2f34302d3438203d3e203436313338.roa (hash: 9Dh6cYcek23o5WvDAWhc+kFKUeCU3Wffgqo2AsS2Ggc=)
                          2: E08A23B82DF37E4701E573987559B077CD666175.crl (hash: obXxNmV7Gtmf33zFkayogRKIxVXHfEoLQkZchK0ZCFQ=)
                          3: 326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa (hash: Z7TCTzTsvDmLnPCx8145HLkwTRsWV/ZM20qu7F08Ils=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.crl
                          rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
                          rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 12:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ab:a8:29:bd:dc:a8:cb:97:e3:c7:ee:bb:c3:97:3b:0d:9f:ef:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E08A23B82DF37E4701E573987559B077CD666175
        Validity
            Not Before: Oct 23 02:37:40 2024 GMT
            Not After : Oct 24 04:50:40 2024 GMT
        Subject: CN=85E343AEE1C0758759E0DFE4C38AE9EE2C132A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:22:eb:cd:9a:2e:86:ed:6b:cb:70:ef:c9:
                    08:f6:d2:60:dc:0a:53:ee:1f:6b:23:72:89:13:fa:
                    39:a6:a6:b2:b4:90:ec:ac:a1:47:01:c0:cf:3e:c2:
                    01:f8:b0:43:b3:4d:db:3c:7f:3a:ac:88:02:62:48:
                    69:2b:5e:86:d7:ad:a7:9e:8e:cf:00:c4:bf:08:f9:
                    a9:b4:d5:cb:ac:ad:a5:96:7d:74:11:c7:1e:28:b5:
                    7d:4b:f3:e2:3a:df:0e:61:36:b8:d3:fd:9d:21:61:
                    2d:65:5d:18:0f:d3:22:8f:57:0d:89:21:33:ee:7d:
                    48:2e:04:8b:f3:f2:78:7d:c7:b4:57:1a:73:25:d2:
                    eb:33:b2:da:56:3d:8d:d4:86:86:2b:82:27:34:ae:
                    9f:0d:fa:bb:36:83:d8:a9:23:82:19:3b:ec:42:28:
                    79:5c:f1:85:3d:fe:97:d2:06:ef:77:cc:62:27:01:
                    82:ad:2a:19:cb:36:72:0c:f0:34:0d:54:68:df:e0:
                    74:52:44:3a:f2:73:d7:d5:f2:fd:d3:a0:f6:62:e5:
                    fd:7c:51:cd:70:48:32:19:36:d3:8b:03:7f:fd:67:
                    f4:5c:40:9a:e8:dc:ca:3a:9b:7e:46:68:75:43:4f:
                    bc:5f:9c:71:86:5b:87:3e:b5:61:66:95:85:b5:02:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E3:43:AE:E1:C0:75:87:59:E0:DF:E4:C3:8A:E9:EE:2C:13:2A:64
            X509v3 Authority Key Identifier:
                keyid:E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:15:e2:91:aa:c6:10:39:50:b9:82:64:1f:65:26:fb:07:62:
         40:ba:0f:b9:86:85:a8:df:a4:34:94:8c:b3:26:18:f1:65:ce:
         47:ab:55:b8:6a:75:fb:03:29:ea:a5:f8:58:8f:3a:b0:38:b9:
         d4:97:0d:53:69:f8:9a:3b:95:c9:8b:d1:eb:8b:a8:e7:51:d9:
         a1:83:31:d0:91:af:4f:a4:85:c3:21:be:ff:00:f0:a9:98:33:
         67:59:ef:8e:fe:a9:d7:e6:c5:07:fe:55:20:6c:27:79:a0:b0:
         ca:f9:45:1a:82:5e:35:d6:3f:82:2c:02:cd:31:40:11:7f:63:
         3c:2d:74:b1:f2:b4:e6:a5:e5:80:ec:8e:50:1b:a3:5d:4f:d3:
         97:b1:4c:ce:53:90:f1:5d:12:45:83:b8:63:1a:fe:c4:02:78:
         aa:17:9a:05:c3:d1:0d:80:5d:0f:9c:c1:72:f1:b5:de:1a:96:
         0d:f8:5d:66:c3:da:c2:17:d9:87:eb:a4:74:84:a0:9d:dd:75:
         ec:56:61:3e:d0:94:e9:4a:ae:53:17:cd:1d:26:c9:e9:34:7d:
         8b:e2:27:a9:2d:43:24:03:d3:74:a0:eb:2c:4b:51:91:60:5b:
         8a:9f:c2:c4:ee:ad:5b:f3:a6:7f:79:42:9c:fb:1e:0d:ac:ab:
         4b:f0:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 03:59:11 2024 by rpki-client on console-fra.rpki-client.org