Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
File:                     A5B1E05036940FBC80C2944856DC1168E62E2364.mft (raw, json)
Hash identifier:          ERjf0R3QofaXVxvbU2+bWQFvC5d3VxmV8mHQIwC9Qbo=
Subject key identifier:   1D:7B:9F:5F:38:12:B3:CE:93:EF:BE:9C:AB:2C:F2:6D:F4:9E:54:D2
Authority key identifier: A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64
Certificate issuer:       /CN=A5B1E05036940FBC80C2944856DC1168E62E2364
Certificate serial:       758A312B09B451EE24E915F539CD17A2060A3019
Authority info access:    rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer
Subject info access:      rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
Manifest number:          4B
Signing time:             Thu 21 Nov 2024 21:41:06 +0000
Manifest this update:     Thu 21 Nov 2024 21:36:06 +0000
Manifest next update:     Fri 22 Nov 2024 21:58:06 +0000
Files and hashes:         1: 326131333a633030373a393030303a3a2f34302d3438203d3e20323135323632.roa (hash: WUBF1QxQD7vF+9C3VFjx931IZpZV7RkRzFxuKcQbO9Q=)
                          2: 326131333a633030373a383130303a3a2f34302d3438203d3e20323135323332.roa (hash: UUagBs8SeUSGyBHOT5W+P3Ak/xG0U9JziAlIh91OvUg=)
                          3: 3138352e3135352e37352e302f32342d3234203d3e20343031313131.roa (hash: Efjt6mMFZZ+K6rN7AgExbAi47sCBvKRdu7hcGnh8/9c=)
                          4: B05B9A671551176C23DA01A5FA4056943F58AA56.cer (hash: Jdpbf36VUP/hW+mUgfpWm++FgSNXoa/D3tGSLRoKJDg=)
                          5: 326131333a633030373a383430303a3a2f34302d3438203d3e20323135383535.roa (hash: gRgljrJk158KKyuSQrfAJJ8xfm7FAXMAw/BKKqJttbo=)
                          6: 326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa (hash: T0Mi+TQUJ1vA/Pq8uY4Dw/kG218IqzhYrECuQgdwXx0=)
                          7: 326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa (hash: 96DLYLi7WdFVEXV0pK91EtRsZDwMMCgn5CDOYmmLf1A=)
                          8: 326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa (hash: AG1A0S/x+3BFylUnOZaEq39/wRy5RZ1KuVWt6ZFTSZ0=)
                          9: A5B1E05036940FBC80C2944856DC1168E62E2364.crl (hash: kBVd9dWEpjmqAK6m5/LS2nboB8fCY+yAwfR7X6tniQ4=)
                          10: 326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa (hash: xnekyxaeGrtzxDKuyeKUBg6q0HaA2ZDs9lAL+QHkvB8=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.crl
                          rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
                          rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 15:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8a:31:2b:09:b4:51:ee:24:e9:15:f5:39:cd:17:a2:06:0a:30:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B1E05036940FBC80C2944856DC1168E62E2364
        Validity
            Not Before: Nov 21 21:36:06 2024 GMT
            Not After : Nov 22 21:58:06 2024 GMT
        Subject: CN=1D7B9F5F3812B3CE93EFBE9CAB2CF26DF49E54D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:3b:66:a5:cb:26:9b:7b:a5:a0:65:cd:d7:
                    da:09:bc:ea:62:3f:fb:e5:b0:c1:90:2d:7a:4c:99:
                    11:eb:26:a5:b7:43:38:5c:c4:ea:a7:32:ea:c6:40:
                    f5:9c:ac:3c:ce:e0:cf:b5:80:67:ae:55:c6:00:63:
                    41:af:1e:96:22:86:3d:3a:8f:e9:0a:ea:f7:c0:a0:
                    dc:d7:e3:eb:0d:4c:32:66:86:a3:70:f8:4b:83:93:
                    fa:bd:73:6f:a2:54:8c:59:2d:5a:8e:d4:63:b7:58:
                    55:b5:55:3a:50:64:f5:99:4b:fc:3c:30:bd:eb:f9:
                    88:5d:06:b3:35:98:28:e1:d4:4f:d4:68:6e:54:3f:
                    55:d5:66:ab:92:13:a0:e6:4c:6d:6d:23:32:7f:19:
                    7e:43:14:06:d2:c9:e2:46:9a:d2:56:6e:35:6e:75:
                    83:c9:b1:fe:64:56:9a:d6:47:bb:af:8e:7d:a9:88:
                    69:af:b5:d2:3b:fb:d8:16:0d:09:ac:cd:af:fe:10:
                    a9:93:71:96:8e:65:a8:69:35:0f:88:74:b2:27:7b:
                    7b:28:c4:3a:52:82:24:9d:fd:09:ae:6b:ca:f7:03:
                    18:73:a4:fa:37:74:cd:a7:0d:f8:0b:57:f5:49:1a:
                    63:62:da:35:7d:e9:bd:c0:41:05:dc:85:b7:51:7c:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7B:9F:5F:38:12:B3:CE:93:EF:BE:9C:AB:2C:F2:6D:F4:9E:54:D2
            X509v3 Authority Key Identifier:
                keyid:A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:31:2b:53:b6:b7:78:89:0d:ab:5b:18:bd:af:08:57:b7:59:
         9f:f0:c1:19:2d:8b:8f:28:58:34:fc:a4:ef:ac:b2:aa:aa:ea:
         df:31:60:70:68:f3:3d:de:73:82:82:d4:e1:f4:10:e4:e3:c2:
         b7:55:ee:38:3b:c4:8c:21:17:00:7c:54:14:63:11:86:2d:58:
         6c:53:40:11:d9:e0:fa:71:7a:75:e3:2a:43:cf:16:76:d9:70:
         e7:3c:a4:31:3c:ab:76:18:34:cf:6c:1c:3f:f8:e9:20:50:6c:
         05:ec:1c:7b:9d:28:a8:1d:b4:3a:59:83:d8:3a:cd:5f:6d:ff:
         20:97:0a:13:65:88:b8:37:d3:04:1b:d7:f9:b7:6e:a2:95:1b:
         09:0c:24:b3:19:7a:da:1f:45:e7:e5:e6:b0:f5:18:ff:a4:27:
         4f:55:fb:71:91:9f:5d:a3:5e:1e:48:bc:6e:7f:91:c6:d1:48:
         82:9c:2f:c0:e9:fc:cf:34:d7:27:0b:5e:dd:c3:61:63:bd:29:
         be:e2:8a:86:64:3f:3a:96:fc:3a:cb:c9:5d:d6:71:bb:e5:41:
         d3:01:e3:67:75:e0:7a:dd:7e:a9:cc:e7:8b:8e:47:13:50:56:
         5a:71:aa:21:b2:60:89:9f:70:c0:9d:26:d8:1c:93:88:08:76:
         70:3f:03:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:05 2024 by rpki-client on console-fra.rpki-client.org