Manifest

$ rpki-client -vvf dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
File:                     F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft (raw, json)
Hash identifier:          SRdMYpjqg8OEHI2tuXWaeobJzc0OtiI18UYfZ/D0+44=
Subject key identifier:   1B:84:B2:65:60:9C:D1:3A:E8:48:5E:19:8E:F8:17:E2:A5:A8:FF:69
Authority key identifier: F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
Certificate issuer:       /CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
Certificate serial:       65F4C05010CE63FB12A9C39F164734207561A0F2
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
Subject info access:      rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
Manifest number:          02E8
Signing time:             Mon 25 Nov 2024 20:27:50 +0000
Manifest this update:     Mon 25 Nov 2024 20:22:50 +0000
Manifest next update:     Tue 26 Nov 2024 22:57:50 +0000
Files and hashes:         1: F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl (hash: aqcah6NPrAjLSyLc4XfqcuOMK/4pD7F5p8wLl08VHmE=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f4:c0:50:10:ce:63:fb:12:a9:c3:9f:16:47:34:20:75:61:a0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
        Validity
            Not Before: Nov 25 20:22:50 2024 GMT
            Not After : Nov 26 22:57:50 2024 GMT
        Subject: CN=1B84B265609CD13AE8485E198EF817E2A5A8FF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:0e:1e:95:f0:3f:7d:8b:ba:81:eb:f9:4f:
                    31:23:05:0f:f5:69:89:73:0b:ca:42:3f:30:a1:21:
                    1d:e5:51:0a:8d:4f:8f:69:0a:5d:2f:fa:0f:1d:df:
                    06:aa:f8:dd:b0:4b:82:ff:a6:00:70:3f:e3:a4:93:
                    bd:2d:ad:77:c9:24:33:b6:9d:ac:c1:ed:3e:cc:73:
                    a6:39:be:b6:6f:2b:68:64:07:a8:cd:7c:29:b3:7c:
                    44:cb:1a:04:25:a3:86:00:5e:1c:92:12:35:11:83:
                    a5:41:04:a8:75:1a:85:2e:0e:2e:28:75:71:64:84:
                    73:56:f3:19:60:11:16:19:28:9a:06:34:b5:7d:72:
                    a7:10:2e:7a:29:2d:02:4d:31:a6:27:be:d0:f5:d0:
                    23:97:45:b0:c2:af:40:1a:a2:a3:cb:1e:c1:d0:d9:
                    fd:cb:30:7c:56:a3:e6:75:a7:4f:7b:06:c5:00:36:
                    9e:5d:aa:09:7d:92:49:67:09:03:b7:2c:0e:b3:04:
                    4d:92:61:8d:85:fb:02:62:61:08:f4:57:b0:4d:0c:
                    04:28:7f:13:92:c3:71:df:98:d5:34:75:f3:49:5e:
                    88:62:c3:d7:c6:e2:bf:f7:e6:07:2b:91:50:2f:9f:
                    7d:6b:77:ca:c3:e1:9f:e6:e3:f6:3f:a2:b9:6b:db:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:84:B2:65:60:9C:D1:3A:E8:48:5E:19:8E:F8:17:E2:A5:A8:FF:69
            X509v3 Authority Key Identifier:
                keyid:F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:a0:69:81:02:c3:9d:df:e7:83:ed:cd:d3:40:24:31:ef:
         65:cd:cb:60:34:fd:1f:28:39:c7:c1:f0:ac:20:bd:0a:af:75:
         ae:8d:d9:76:5e:60:17:e0:90:cb:ab:b2:ed:5e:15:3e:00:8d:
         4c:46:5f:69:19:66:90:75:b6:d4:1d:91:09:65:88:83:62:90:
         74:c0:c6:13:ff:ff:19:1a:73:9f:03:e3:9b:fc:e9:24:d8:00:
         7b:24:8b:4e:0c:70:a9:ac:5b:ca:cd:10:5f:04:7a:73:b5:b1:
         1b:c6:8b:60:c4:c9:b9:7d:d0:dc:f7:8a:ff:d2:02:ea:cf:f0:
         bb:94:5c:57:de:d9:f2:4a:7a:71:9b:ac:b6:0b:62:7f:99:df:
         6d:54:21:92:9c:9e:be:a9:71:11:22:bd:8f:e9:d9:25:a7:63:
         bd:ef:09:9a:ae:84:11:80:36:63:ce:c8:e4:89:d7:c4:59:1b:
         e3:86:22:68:cc:e1:b1:45:2d:dc:8e:30:10:9f:74:da:4c:1e:
         20:36:a7:c1:23:dc:a6:23:08:86:e1:0d:56:6f:dc:6e:3e:da:
         c4:0a:5c:bb:6c:5b:ee:2b:1e:0a:a6:f3:49:f7:b3:95:34:8d:
         5f:9a:dd:46:5e:86:a0:dd:4d:48:2b:25:97:b3:d6:1a:f0:9e:
         12:7c:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:12 2024 by rpki-client on console-ams.rpki-client.org