Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
File:                     1A8C29884038907EDD0174FADC751F16456E1C56.mft (raw, json)
Hash identifier:          xhuC7cXQszqWSQFLgFBThV0rrTsjflm5jGiSdkmm6HY=
Subject key identifier:   6E:48:12:09:CB:1D:8F:94:60:5C:26:A7:3D:A9:B1:C3:0F:17:18:7D
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       570091DC6DFF0198E7BF27E39D1952531D52F15D
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
Manifest number:          1F
Signing time:             Tue 22 Oct 2024 10:19:14 +0000
Manifest this update:     Tue 22 Oct 2024 10:14:14 +0000
Manifest next update:     Wed 23 Oct 2024 12:12:14 +0000
Files and hashes:         1: 323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa (hash: jkOz+freQt5DQIgD9ck63dgA9q8zxXWUPk3gKSpSeGA=)
                          2: 3136352e3134302e3134322e302f32342d3234203d3e20393435.roa (hash: 4Gh2Onjbwc9hX7bUt/WfMegvH+lsPYnS2AiGsYeQRpw=)
                          3: 52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer (hash: UUr3nP4hnSEjSNPf0LpAd5jIPivw4aKa+lNUg2pGMlM=)
                          4: 323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa (hash: gqcPrhTcaJ6FVIDR0LswYmUfAJoqp5JhsdEM9hCJL/U=)
                          5: 323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (hash: E8bBcjoq3ooleg2bY+Xsc+MrgeuC9/HobMu4necY1/Y=)
                          6: 1A8C29884038907EDD0174FADC751F16456E1C56.crl (hash: l24ksBB7rWXKEVMQ6ghks3w7lBAiiGSiBvdxlT3K+D0=)
                          7: 323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa (hash: xlIDgBHwUiq987v+OiWBg2FDGoeV6vDit5Ty0gP15sc=)
                          8: 32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa (hash: Izi9S6BMgRvZACqQTWUDPmBKNInYvbaQaeVON4pVnuY=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl
                          rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
                          rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:00:91:dc:6d:ff:01:98:e7:bf:27:e3:9d:19:52:53:1d:52:f1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Oct 22 10:14:14 2024 GMT
            Not After : Oct 23 12:12:14 2024 GMT
        Subject: CN=6E481209CB1D8F94605C26A73DA9B1C30F17187D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:1c:cc:ad:0d:ec:1f:18:14:e1:02:25:2b:
                    67:fc:6b:e0:11:89:b1:5b:8c:c9:5e:f3:e2:7f:b7:
                    de:1f:54:1d:3b:3f:fe:eb:55:03:61:1b:97:4f:b7:
                    08:56:bc:63:99:4c:9f:b2:03:bd:d7:aa:13:a0:c1:
                    c2:20:c1:b1:ba:88:5d:f0:9b:e4:8c:ae:0b:e1:98:
                    2f:e3:74:67:a6:b0:ab:be:e8:b7:4d:4a:c9:3d:ee:
                    ba:77:fb:88:73:ed:4d:4e:ee:44:75:54:02:23:a4:
                    69:13:2b:26:84:cd:5e:9e:2f:19:8d:27:d1:0b:84:
                    31:84:1b:d1:40:c9:d4:33:32:4e:e0:1e:5a:ac:25:
                    5c:74:b2:d9:b9:14:38:c2:0b:29:ce:05:61:c1:b7:
                    39:f3:91:85:6f:00:57:fc:2f:7d:3d:0f:a1:e2:54:
                    3d:03:fa:fa:71:e4:76:37:a0:4e:c2:81:48:fe:53:
                    3b:c9:8c:a0:d4:aa:0e:5f:ea:45:eb:ae:ce:9c:52:
                    d7:06:09:18:33:6b:fd:64:b7:52:d1:bd:72:85:8e:
                    2d:fc:00:ef:4e:4a:61:b8:8b:8e:2b:14:b4:33:0c:
                    18:7c:be:a1:39:1e:03:f7:34:6e:36:a4:8a:51:dc:
                    19:5c:dd:95:5b:bb:9e:4d:95:e0:d2:d6:51:4b:bd:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:48:12:09:CB:1D:8F:94:60:5C:26:A7:3D:A9:B1:C3:0F:17:18:7D
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:99:f5:11:f6:6d:b0:1b:2b:b2:c9:28:95:08:3d:c7:7f:5c:
         a6:81:a1:74:ff:8c:f1:5a:fb:22:83:b4:93:bd:67:6d:4c:c3:
         a9:ce:b1:08:f1:15:85:1f:e6:ef:38:50:2d:20:07:7a:5f:bd:
         bf:2c:fb:8d:60:4b:ce:5e:f7:a1:3d:f9:be:b7:6d:6e:b0:e7:
         93:4b:6a:a6:c0:df:cc:e2:41:55:77:19:63:3e:c9:db:f3:c7:
         65:41:11:9f:b0:4b:a5:2b:9e:86:86:6f:09:01:78:ff:ed:83:
         cb:c7:db:a9:1d:7c:66:14:3d:01:9f:06:14:de:19:fa:4c:3f:
         23:e6:e7:fc:b3:fb:e5:68:ad:9c:65:b9:58:6e:97:e3:c5:dc:
         de:28:28:10:e3:ae:8b:89:76:7e:e7:6b:e1:4a:2b:bc:12:96:
         43:2a:ca:7e:2c:22:29:b4:7c:ce:5a:a4:97:05:41:02:7f:7b:
         b8:71:78:b8:98:16:b0:73:f2:27:cb:d2:5b:bb:2e:e7:1d:1f:
         aa:b3:08:16:aa:2a:fb:b0:c9:fb:ee:81:ed:65:2a:cf:79:ad:
         ba:1a:5f:75:34:d2:a3:44:03:6c:9f:21:a1:dd:ce:e5:87:73:
         4e:6a:b3:cb:da:75:7f:41:23:cc:f7:f1:ae:71:e9:f0:4c:a4:
         90:80:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 12:32:43 2024 by rpki-client on console-ams.rpki-client.org