Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
File:                     A5B1E05036940FBC80C2944856DC1168E62E2364.mft (raw, json)
Hash identifier:          ROGwYm6eCe0TNdVU0WK0SdgmzE3JW9x4DraN2Onz+ZY=
Subject key identifier:   C0:A6:97:17:60:5E:AB:84:5C:27:08:F9:1C:E3:1D:26:60:32:75:E3
Authority key identifier: A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64
Certificate issuer:       /CN=A5B1E05036940FBC80C2944856DC1168E62E2364
Certificate serial:       5DFC4224A95F59C3B3017146D64523F67F7DA08C
Authority info access:    rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer
Subject info access:      rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
Manifest number:          21
Signing time:             Wed 23 Oct 2024 02:42:40 +0000
Manifest this update:     Wed 23 Oct 2024 02:37:40 +0000
Manifest next update:     Thu 24 Oct 2024 05:38:40 +0000
Files and hashes:         1: 326131333a633030373a383430303a3a2f34302d3438203d3e20323135383535.roa (hash: gRgljrJk158KKyuSQrfAJJ8xfm7FAXMAw/BKKqJttbo=)
                          2: 326131333a633030373a383130303a3a2f34302d3430203d3e20323135323332.roa (hash: ROc+7C5oIIh8dAwYDS3pQybcID1lfPC8QK8Lj3n8wOY=)
                          3: 326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa (hash: T0Mi+TQUJ1vA/Pq8uY4Dw/kG218IqzhYrECuQgdwXx0=)
                          4: 326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa (hash: 96DLYLi7WdFVEXV0pK91EtRsZDwMMCgn5CDOYmmLf1A=)
                          5: 3138352e3135352e37352e302f32342d3234203d3e20343031313131.roa (hash: Efjt6mMFZZ+K6rN7AgExbAi47sCBvKRdu7hcGnh8/9c=)
                          6: A5B1E05036940FBC80C2944856DC1168E62E2364.crl (hash: q6SsVN8VtIRcscYN+mWvh7xNICEyS6YaSLAACDqXXPo=)
                          7: B05B9A671551176C23DA01A5FA4056943F58AA56.cer (hash: Jdpbf36VUP/hW+mUgfpWm++FgSNXoa/D3tGSLRoKJDg=)
                          8: 326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa (hash: AG1A0S/x+3BFylUnOZaEq39/wRy5RZ1KuVWt6ZFTSZ0=)
                          9: 326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa (hash: xnekyxaeGrtzxDKuyeKUBg6q0HaA2ZDs9lAL+QHkvB8=)
                          10: 326131333a633030373a393030303a3a2f34302d3438203d3e20323135323632.roa (hash: WUBF1QxQD7vF+9C3VFjx931IZpZV7RkRzFxuKcQbO9Q=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.crl
                          rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
                          rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 13:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fc:42:24:a9:5f:59:c3:b3:01:71:46:d6:45:23:f6:7f:7d:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B1E05036940FBC80C2944856DC1168E62E2364
        Validity
            Not Before: Oct 23 02:37:40 2024 GMT
            Not After : Oct 24 05:38:40 2024 GMT
        Subject: CN=C0A69717605EAB845C2708F91CE31D26603275E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:9f:f5:d2:46:d6:06:bd:49:04:bb:bb:78:
                    d4:ae:da:52:91:fd:3a:ee:37:6d:85:3e:26:6e:94:
                    22:9d:80:de:67:13:3c:4a:d4:46:0c:23:7d:cc:b0:
                    76:9a:9e:df:b1:95:89:f3:0a:24:86:d7:96:7e:b0:
                    73:81:0a:8a:00:14:4e:15:5a:42:eb:c9:37:43:45:
                    ec:fe:78:36:0b:b3:17:94:a6:58:3a:6a:00:c7:0a:
                    cc:79:dc:66:e4:8c:47:de:22:b3:8c:47:d7:38:16:
                    f5:29:2f:2a:cf:4a:f2:70:8e:76:c1:e8:54:0d:a7:
                    b9:ae:21:45:a4:c7:b7:0d:9f:ca:d5:00:b6:63:50:
                    6b:12:c8:1e:94:b3:09:e3:0e:2e:b5:02:46:ad:3c:
                    ea:b5:0d:02:22:b7:a1:87:db:81:54:f7:5c:98:57:
                    5e:e8:51:39:d9:5a:e0:76:c0:0f:f0:72:e4:92:0f:
                    7c:11:3f:55:0d:f0:29:e7:9f:6a:21:a3:b2:af:54:
                    48:25:58:5d:c4:e2:83:5b:8d:ab:85:55:d3:d9:94:
                    9e:7e:d3:83:93:63:9d:86:83:af:1c:84:c3:3d:f6:
                    fe:e3:27:6d:a7:c1:55:d8:c8:74:06:98:f5:2d:74:
                    97:dd:34:cb:d4:1c:c1:9d:5d:54:cf:2b:2a:af:d8:
                    66:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:97:17:60:5E:AB:84:5C:27:08:F9:1C:E3:1D:26:60:32:75:E3
            X509v3 Authority Key Identifier:
                keyid:A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:b5:9d:a1:3c:f8:a8:14:73:91:ad:1a:c8:12:ea:b2:3a:
         90:dc:54:b0:12:32:96:39:14:2c:46:84:65:70:e9:9d:60:6b:
         b8:97:97:6b:51:9c:47:54:9a:d2:75:ef:66:75:8a:cc:d0:3f:
         df:c7:07:b1:3b:90:68:fc:e4:2d:cd:7a:7a:67:3e:cf:2a:54:
         5a:72:b6:18:db:10:a8:b2:5d:38:4d:ca:dc:9e:ea:6a:78:7b:
         8b:88:24:7c:fd:2b:14:fb:b0:20:e8:13:13:a1:7d:9f:ef:98:
         df:29:22:5e:3c:3d:da:15:86:8f:e1:e4:9c:f5:4e:64:61:48:
         7d:3e:33:99:52:7e:68:8c:ed:49:bb:13:64:e7:17:81:ca:69:
         3f:b4:1a:49:4f:e4:9f:ec:89:da:b1:51:01:15:1e:70:51:19:
         b8:65:b7:e6:d5:85:fc:5e:57:a8:bb:8e:37:83:c5:82:6f:4f:
         47:85:be:87:96:14:2e:c4:15:e4:5f:61:6c:0a:d9:cc:6c:01:
         a6:6b:d3:82:d7:94:0b:70:76:d9:03:1e:7a:23:62:95:6e:3c:
         e7:88:1a:da:8b:04:59:c9:a2:ab:c6:8e:f5:6a:77:e2:53:ce:
         c6:df:df:2a:80:7f:0c:83:08:f9:09:62:cc:fe:45:68:97:0b:
         94:7b:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:38:58 2024 by rpki-client on console-ams.rpki-client.org