Manifest

$ rpki-client -vvf dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
File:                     442C354A483A8B70D839D3F798CD870684F02186.mft (raw, json)
Hash identifier:          A2uW2DznW3Rat0ASwXY19YVrd5ZZSIPV0vr/XzzNE3k=
Subject key identifier:   B4:5C:9C:0B:12:1E:E4:F3:EA:62:3C:51:CB:C2:9C:E9:5F:42:B4:EE
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       7DB4FF5D7478B1040FF78B80D60CA0F850BF79BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Subject info access:      rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
Manifest number:          02D8
Signing time:             Fri 22 Nov 2024 07:28:06 +0000
Manifest this update:     Fri 22 Nov 2024 07:23:06 +0000
Manifest next update:     Sat 23 Nov 2024 09:50:06 +0000
Files and hashes:         1: 442C354A483A8B70D839D3F798CD870684F02186.crl (hash: XDmbGpUwc0sfhuFO8AuLpw/vb+TCnOdq79sHdH+L3oQ=)
                          2: A5B1E05036940FBC80C2944856DC1168E62E2364.cer (hash: TipsdPZVaTPzrpNeb2amqIl8lm8dpy4enAeS2pB13jU=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b4:ff:5d:74:78:b1:04:0f:f7:8b:80:d6:0c:a0:f8:50:bf:79:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: Nov 22 07:23:06 2024 GMT
            Not After : Nov 23 09:50:06 2024 GMT
        Subject: CN=B45C9C0B121EE4F3EA623C51CBC29CE95F42B4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ba:df:bd:07:ca:09:90:25:76:e8:de:85:c4:
                    82:11:3a:25:49:78:09:e8:a8:a3:2c:c8:f8:1d:9a:
                    68:1f:1f:d0:67:1e:73:b2:cd:be:81:02:0b:66:29:
                    5c:04:72:42:e9:cb:e6:37:b6:a4:bf:75:c3:1a:dd:
                    34:35:46:aa:43:23:46:8b:a7:eb:55:df:13:8d:08:
                    58:4f:a2:9a:96:80:2f:c8:45:df:7e:92:e4:6d:53:
                    ae:de:9b:88:68:df:33:60:43:83:17:2a:41:79:fb:
                    36:9e:52:c2:92:88:90:f0:4f:40:28:84:d1:b4:6b:
                    b8:7c:69:42:a3:03:77:75:17:ce:23:52:a6:da:d9:
                    a7:94:4f:17:c0:f5:cf:07:ae:f4:b4:9a:53:ea:c8:
                    7f:12:54:66:de:1a:7f:72:66:fc:8d:82:94:11:f4:
                    63:ce:b8:79:0c:1d:9c:75:f5:3a:1a:ff:08:60:8f:
                    94:24:a2:88:c3:4a:f0:68:fd:c3:7f:3a:0e:56:cb:
                    fb:19:37:92:41:ae:c5:de:4f:f0:b9:a2:84:7b:18:
                    95:b8:27:62:7e:c6:95:0b:0e:50:d6:3d:61:eb:7f:
                    0a:43:13:d2:f1:85:31:a0:dc:49:51:de:21:f1:07:
                    61:d4:92:81:08:ab:35:3f:5e:14:8f:7f:35:ef:d5:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5C:9C:0B:12:1E:E4:F3:EA:62:3C:51:CB:C2:9C:E9:5F:42:B4:EE
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:09:27:4a:f6:88:de:56:8a:00:5d:fd:f2:0c:b2:d7:2d:
         a8:63:11:41:8d:bc:4d:00:fd:43:5a:7d:22:ae:9b:a5:76:f9:
         68:e7:92:03:b7:30:95:60:dd:43:aa:5d:ac:4f:17:9e:80:99:
         ab:49:39:86:09:dd:46:eb:52:a3:01:9a:eb:9a:e6:9c:c9:0e:
         d5:45:28:8b:32:ef:e1:2d:8f:0a:a3:6f:26:38:be:e1:08:69:
         46:a1:5b:03:79:31:2e:b3:f6:35:d5:b6:38:79:d9:6e:1a:ac:
         8f:42:0f:64:b9:f7:dc:a7:91:85:6d:db:4f:e8:35:0a:88:5b:
         f0:e6:e4:72:2c:e4:7f:74:9c:1e:7d:72:66:cc:1a:6a:e4:07:
         e6:a1:a1:21:55:5f:b1:61:88:81:e7:dc:77:9a:57:67:89:24:
         93:9f:e2:6d:1c:4e:fc:14:97:cd:04:c7:6c:72:d2:c7:fb:a7:
         48:5b:13:ab:c9:28:1c:68:12:93:4c:9f:e6:b4:8b:53:41:f8:
         0e:c3:18:1b:9d:13:0b:f8:7a:75:5a:6e:28:ed:13:70:26:1a:
         48:e9:e0:94:01:6b:e6:82:32:10:fa:3c:07:90:53:c6:8b:9f:
         d3:59:e0:e6:4a:ce:1c:fc:90:82:c6:5f:ed:9b:a2:44:9c:2d:
         b5:f4:4e:2d
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUfbT/XXR4sQQP94uA1gyg+FC/eb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQyYzM1NGE0ODNhOGI3MGQ4MzlkM2Y3OThjZDg3MDY4
NGYwMjE4NjAeFw0yNDExMjIwNzIzMDZaFw0yNDExMjMwOTUwMDZaMDMxMTAvBgNV
BAMTKEI0NUM5QzBCMTIxRUU0RjNFQTYyM0M1MUNCQzI5Q0U5NUY0MkI0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeut+9B8oJkCV26N6FxIIROiVJ
eAnoqKMsyPgdmmgfH9BnHnOyzb6BAgtmKVwEckLpy+Y3tqS/dcMa3TQ1RqpDI0aL
p+tV3xONCFhPopqWgC/IRd9+kuRtU67em4ho3zNgQ4MXKkF5+zaeUsKSiJDwT0Ao
hNG0a7h8aUKjA3d1F84jUqba2aeUTxfA9c8HrvS0mlPqyH8SVGbeGn9yZvyNgpQR
9GPOuHkMHZx19Toa/whgj5QkoojDSvBo/cN/Og5Wy/sZN5JBrsXeT/C5ooR7GJW4
J2J+xpULDlDWPWHrfwpDE9LxhTGg3ElR3iHxB2HUkoEIqzU/XhSPfzXv1fWHAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUtFycCxIe5PPqYjxRy8Kc6V9CtO4wHwYDVR0j
BBgwFoAURCw1Skg6i3DYOdP3mM2HBoTwIYYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzEvNDQyQzM1
NEE0ODNBOEI3MEQ4MzlEM0Y3OThDRDg3MDY4NEYwMjE4Ni5jcmwwZAYIKwYBBQUH
AQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL1JDdzFTa2c2aTNEWU9kUDNtTTJIQm9Ud0lZWS5jZXIwZQYI
KwYBBQUHAQsEWTBXMFUGCCsGAQUFBzALhklyc3luYzovL2Rldi50dy9ycGtpL0F1
Z3VzdC8xLzQ0MkMzNTRBNDgzQThCNzBEODM5RDNGNzk4Q0Q4NzA2ODRGMDIxODYu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBuFwknSvaI3laKAF398gyy1y2oYxFBjbxNAP1DWn0irpuldvlo
55IDtzCVYN1Dql2sTxeegJmrSTmGCd1G61KjAZrrmuacyQ7VRSiLMu/hLY8Ko28m
OL7hCGlGoVsDeTEus/Y11bY4edluGqyPQg9kuffcp5GFbdtP6DUKiFvw5uRyLOR/
dJwefXJmzBpq5AfmoaEhVV+xYYiB59x3mldniSSTn+JtHE78FJfNBMdsctLH+6dI
WxOrySgcaBKTTJ/mtItTQfgOwxgbnRML+Hp1Wm4o7RNwJhpI6eCUAWvmgjIQ+jwH
kFPGi5/TWeDmSs4c/JCCxl/tm6JEnC219E4t
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:55 2024 by rpki-client on console-ams.rpki-client.org