Manifest

$ rpki-client -vvf dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
File:                     442C354A483A8B70D839D3F798CD870684F02186.mft (raw, json)
Hash identifier:          kzKn1TLUMKmfPS1T15tggNoZukFVlI9PKluyBirRfK4=
Subject key identifier:   EA:A2:09:AD:8C:C3:16:40:9A:40:F3:29:72:B9:2B:51:50:8C:68:DE
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       15EF96A773C9CC1162028D989229FB422467E45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Subject info access:      rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
Manifest number:          0166
Signing time:             Tue 07 May 2024 20:48:33 +0000
Manifest this update:     Tue 07 May 2024 20:43:33 +0000
Manifest next update:     Wed 08 May 2024 22:47:33 +0000
Files and hashes:         1: 326131333a633030303a3a2f32392d3438203d3e20393435.roa (hash: bpLVvpSDyxJC3yf0Akm6nlzlWeUR/9XHf/OCM+kRbs8=)
                          2: 323030313a3766383a323a3a2f34382d3438203d3e20393435.roa (hash: pQVzXz+x4w7J/85NbAGdG92s9gYeAY/Hgf0DVGD2GE4=)
                          3: 442C354A483A8B70D839D3F798CD870684F02186.crl (hash: LiOgqoMge7iu5DK+pyElnH+EP+lOZP3FcpIAKT6912A=)
                          4: AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer (hash: UcuD3hPjY5h2EszvBFyngh9xLyp7dyP7MamNEHLMHzU=)
                          5: 3138352e302e31392e302f32342d3234203d3e203531383138.roa (hash: 9v/sEZvOdzEB5ZJ0pEOyIj3Llq9eYm+31fRrCP4tnL0=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ef:96:a7:73:c9:cc:11:62:02:8d:98:92:29:fb:42:24:67:e4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: May  7 20:43:33 2024 GMT
            Not After : May  8 22:47:33 2024 GMT
        Subject: CN=EAA209AD8CC316409A40F32972B92B51508C68DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:07:f2:30:83:a5:82:cb:a0:96:09:ac:e7:
                    c3:5c:16:96:0a:dc:1f:c9:5e:a2:52:6b:39:f2:24:
                    54:ab:85:48:b3:80:a9:82:60:fc:6b:bd:4e:a7:57:
                    08:4a:97:1a:54:bd:ec:3e:d8:97:5e:f1:f2:7c:07:
                    02:bf:7d:2f:92:3d:7a:38:1c:16:ba:95:00:a8:d9:
                    d2:ec:06:be:24:45:22:e7:76:61:99:9d:0d:19:88:
                    8d:e7:ee:36:25:b6:83:9f:0a:53:db:b3:cd:09:97:
                    a8:71:f2:15:c8:e1:24:07:b7:90:bd:3f:1d:2e:57:
                    39:9d:48:92:9e:bd:eb:c2:ed:7c:59:c9:ad:dc:2a:
                    f2:6c:45:99:41:01:b0:3f:86:96:d2:91:4c:62:5a:
                    e8:3d:2d:4e:1b:ac:8d:e8:f5:e7:09:86:c8:7a:7c:
                    b9:d0:a9:0c:2b:37:00:f9:94:9c:f6:c6:65:ee:ca:
                    d7:0a:27:d5:1a:58:e6:ef:06:27:c0:16:9b:45:fb:
                    b4:b6:77:e5:56:eb:8e:a9:bd:e3:ad:87:96:0b:f8:
                    05:68:16:7d:40:fd:29:ed:fb:2d:e3:9d:b7:4d:05:
                    a1:a5:a2:84:34:8e:a1:07:de:d1:03:5f:e9:04:c0:
                    64:00:58:21:ad:13:8d:ba:e6:44:a9:8e:4e:cf:ac:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A2:09:AD:8C:C3:16:40:9A:40:F3:29:72:B9:2B:51:50:8C:68:DE
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:87:e7:2c:ce:7f:2f:db:ac:0e:b1:fb:f4:e9:a1:79:1f:
         90:df:49:49:7e:e5:bb:39:da:cb:fe:4f:ab:d8:ce:24:b1:17:
         7e:b8:b2:ed:d0:ab:88:9a:fc:0e:24:c0:7d:64:6e:25:7f:21:
         89:3c:45:0d:d1:a0:a7:63:f3:84:a9:9b:7e:f4:39:6e:43:ed:
         7c:94:2f:9d:84:a0:99:c2:c6:b9:00:4a:11:48:8d:a6:2c:10:
         81:d0:e4:9f:0d:87:f1:3d:ee:11:25:46:cd:bf:8b:e4:26:5a:
         de:06:1d:a0:63:9d:00:44:a0:70:3b:66:73:44:f7:c6:cf:4e:
         8b:a0:d6:67:0b:2e:69:59:a8:64:f6:70:7c:cc:d4:21:7b:47:
         e7:d4:05:b2:02:4a:14:7c:e2:3c:93:a5:18:1e:44:ae:ee:39:
         0d:c7:61:94:fe:92:a8:f8:a3:2a:10:f2:a4:a0:b9:bb:6c:d8:
         9f:28:98:14:02:8d:3a:28:60:2e:c2:ec:55:7e:8e:ba:4d:7a:
         10:c6:02:c0:a4:28:de:18:0c:e7:fa:57:ad:16:f6:a0:ed:89:
         05:4c:1b:79:14:56:25:bc:f2:f0:b9:8e:69:cb:47:f7:0e:2e:
         b1:4a:5b:59:d4:0b:f8:04:bd:62:e3:f6:c1:ce:f6:3d:77:8e:
         eb:a4:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:35:32 2024 by rpki-client on console-ams.rpki-client.org