Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.mft
File:                     D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.mft (raw, json)
Hash identifier:          WiOgatpWkPYoNGkt0PPhsYXStH+CPUOeKAow4ln7ZN4=
Subject key identifier:   9D:F3:38:D7:C3:4C:26:F2:45:04:AC:00:99:84:25:02:8E:02:F7:2C
Authority key identifier: D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B
Certificate issuer:       /CN=D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B
Certificate serial:       5DA3D222CF505D2DFD53CCF66948231B28D56F2C
Authority info access:    rsync://dev.tw/rpki/August/0/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer
Subject info access:      rsync://dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.mft
Manifest number:          18
Signing time:             Sun 20 Oct 2024 20:53:42 +0000
Manifest this update:     Sun 20 Oct 2024 20:48:42 +0000
Manifest next update:     Tue 22 Oct 2024 00:18:42 +0000
Files and hashes:         1: 3231362e3134362e32392e302f32342d3234203d3e203130313033.roa (hash: Gnl7zooCLFucBbYEUzaTubtON1NZJG4n6GxHEz3U0ME=)
                          2: D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.crl (hash: e0tehFeFsdC1iQOdwruvZO+PxYj2YmUUvO22kDvFQ48=)
                          3: 3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa (hash: nLxV84FrSfzITKdmyxJyU4mGdESJKOsrmSjXil1BbqQ=)
                          4: 32332e3133332e382e302f32342d3234203d3e20393435.roa (hash: 4hK8TfrA0EyDZXlK3n5RAkbogKaHg6luywEFJa/MWAQ=)
                          5: 3231362e3134362e33302e302f32342d3234203d3e203130313033.roa (hash: cGdaIjlArOn8cp3SRuq5F+6pTsp733H54fs7sU7+L+0=)
                          6: 3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (hash: jyCmw9GomMQa5cIj87jssC2QHZWRfsmMvmjkXuWDKvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:d2:22:cf:50:5d:2d:fd:53:cc:f6:69:48:23:1b:28:d5:6f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B
        Validity
            Not Before: Oct 20 20:48:42 2024 GMT
            Not After : Oct 22 00:18:42 2024 GMT
        Subject: CN=9DF338D7C34C26F24504AC00998425028E02F72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:bb:29:1a:1a:23:ef:d8:7b:ba:c1:fe:47:
                    8a:07:dd:be:e1:54:23:77:6b:36:e1:fe:8a:06:24:
                    81:3f:a4:69:c2:c4:44:09:68:7d:d2:86:c8:9b:eb:
                    73:90:8f:c1:fe:5d:0b:5d:4b:79:0f:59:8b:9e:41:
                    39:7e:2a:24:1d:c4:54:69:ae:1f:dc:16:f6:08:7a:
                    b4:9a:00:61:13:b3:dc:7e:3a:8a:20:f3:4e:6f:14:
                    46:4d:bf:06:ca:24:6d:1a:80:7b:ed:7b:bd:43:47:
                    ce:f3:b9:c6:c3:0f:0e:0b:de:8a:87:3b:6b:a2:64:
                    ed:b5:61:cb:d8:4f:ea:a9:d1:00:ff:ef:02:06:37:
                    12:61:6f:ad:eb:77:25:44:94:3a:86:33:0a:e7:17:
                    f0:94:12:65:c2:30:b9:ea:2b:7a:bb:fd:eb:d4:22:
                    9c:b4:71:da:fd:3a:26:59:75:96:c3:dd:ec:11:6e:
                    c6:4e:10:39:4c:c9:7a:e7:1d:08:61:e5:67:1b:3a:
                    d7:9e:25:0e:27:97:b1:c8:3e:57:8b:5a:56:e4:9b:
                    3a:89:a6:16:87:cf:0b:3e:24:25:39:6d:c5:7f:88:
                    0e:1a:04:c2:3d:73:65:47:dc:07:09:f8:5f:85:7d:
                    a1:1a:f0:22:db:ed:51:cc:3c:62:79:7a:18:40:45:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F3:38:D7:C3:4C:26:F2:45:04:AC:00:99:84:25:02:8E:02:F7:2C
            X509v3 Authority Key Identifier:
                keyid:D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fc:a9:eb:c4:8a:45:8d:1a:a9:bc:98:ca:ef:53:fe:ce:cd:
         66:6a:1b:87:47:46:58:c2:1c:14:40:67:ed:28:08:25:17:ba:
         4c:f5:c7:64:08:3b:bd:30:78:96:ad:a6:04:b9:0b:0e:ab:8d:
         2a:c1:4e:b0:b2:1f:d6:1e:62:d2:88:ae:58:d2:05:18:d7:79:
         dd:2c:62:b6:ea:d9:f8:15:67:03:bb:e2:96:cc:f4:8b:31:b7:
         7a:88:a4:23:09:71:9a:b1:a6:5d:e2:36:07:61:9d:81:30:da:
         52:75:2b:c9:9e:5a:6f:2b:7f:cc:28:79:fa:61:f9:43:33:78:
         9d:4d:81:54:66:f1:76:5c:fe:6e:17:1d:4b:10:52:0a:af:bb:
         85:66:34:8a:bf:be:44:ba:c7:9d:c1:de:84:b8:32:bf:7d:0a:
         af:f1:98:41:f5:aa:46:5a:03:f9:7b:e5:21:6b:42:a8:e1:30:
         8d:46:7e:31:6a:08:ac:eb:fe:2e:b5:e0:f8:24:79:3c:bc:35:
         aa:28:be:37:3d:45:63:cc:25:b7:a1:a6:9b:54:c0:bf:f0:91:
         9a:bf:c9:10:06:db:18:3c:07:f1:ac:3f:21:04:7a:0f:b7:da:
         e3:2c:e1:55:f1:3c:6a:12:c4:79:08:8a:3d:14:a5:4a:73:a3:
         87:c9:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----