Manifest

$ rpki-client -vvf dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft
File:                     DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft (raw, json)
Hash identifier:          HETV4glFBlYGC5ytxcLlDTxwvAO7oqo82qgL1kY/gSQ=
Subject key identifier:   8D:04:CC:11:77:80:36:62:F0:23:02:05:FD:82:3C:10:34:F5:9C:E8
Authority key identifier: DB:0E:EC:2B:FD:2F:E5:56:26:1F:B4:FF:C4:EC:97:A5:FC:13:32:CB
Certificate issuer:       /CN=db0eec2bfd2fe556261fb4ffc4ec97a5fc1332cb
Certificate serial:       2A47D1FDC3D01B9063B88C272C67084BECA8E97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2w7sK_0v5VYmH7T_xOyXpfwTMss.cer
Subject info access:      rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft
Manifest number:          0166
Signing time:             Tue 07 May 2024 02:53:29 +0000
Manifest this update:     Tue 07 May 2024 02:48:29 +0000
Manifest next update:     Wed 08 May 2024 04:33:29 +0000
Files and hashes:         1: DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.crl (hash: GJiuXft1U58oJQWhREw/p/VwWhfdTPo5kPusnMndKYM=)
                          2: 4A208C7877CBF7D9680C15023B778994D27CBFBB.cer (hash: SybOPtHsbJFxxTpXmW/XFrBkNXxzy8QPZprz0egOe84=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.crl
                          rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2w7sK_0v5VYmH7T_xOyXpfwTMss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:47:d1:fd:c3:d0:1b:90:63:b8:8c:27:2c:67:08:4b:ec:a8:e9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0eec2bfd2fe556261fb4ffc4ec97a5fc1332cb
        Validity
            Not Before: May  7 02:48:29 2024 GMT
            Not After : May  8 04:33:29 2024 GMT
        Subject: CN=8D04CC1177803662F0230205FD823C1034F59CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:df:19:fc:fd:f0:71:b3:7e:5e:df:c0:81:
                    ec:5d:a6:23:14:f8:1a:9d:56:d9:13:95:89:d1:0b:
                    46:f3:26:74:5d:16:a2:30:00:eb:75:15:72:85:3f:
                    ec:47:05:48:74:e8:b6:ff:bd:86:8f:88:40:bc:02:
                    14:53:ff:ef:95:61:0f:0d:61:2d:a6:f6:31:9b:df:
                    f6:e6:2c:79:03:a6:d6:69:20:1b:e5:b8:4c:dc:02:
                    50:1c:4f:90:7d:0b:9a:7d:e1:2f:a0:f0:75:6d:92:
                    9b:41:01:f8:db:5d:ee:64:26:2a:af:c8:ac:2f:70:
                    6c:2c:97:29:29:bb:9d:bb:31:79:13:aa:83:76:55:
                    3a:33:78:10:99:8c:ef:0c:e8:dd:19:43:f5:74:59:
                    68:26:b8:4a:9c:d9:4b:ca:60:e8:d3:7e:c5:e8:99:
                    c6:89:c7:bc:ae:b2:f1:75:0d:1d:06:c5:cc:1e:c3:
                    ec:dc:80:6b:33:1f:0a:41:b3:c6:f6:ef:08:22:84:
                    99:a5:96:45:fc:2c:6d:83:a4:eb:9d:be:be:b3:f3:
                    f5:57:2a:a7:b7:d0:d6:6d:e1:7a:47:65:0c:d1:a9:
                    bf:2e:12:7f:99:1a:51:e5:e4:a0:4b:a2:6b:12:22:
                    88:0a:50:87:cc:62:20:ca:3a:7c:1f:5c:b8:3e:74:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:04:CC:11:77:80:36:62:F0:23:02:05:FD:82:3C:10:34:F5:9C:E8
            X509v3 Authority Key Identifier:
                keyid:DB:0E:EC:2B:FD:2F:E5:56:26:1F:B4:FF:C4:EC:97:A5:FC:13:32:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2w7sK_0v5VYmH7T_xOyXpfwTMss.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f3:8c:40:70:54:54:c0:81:64:1d:c5:b7:a5:4e:96:ba:b8:
         45:fd:b7:9b:ff:37:98:14:6f:dd:25:5a:11:81:12:2f:8a:55:
         c7:c5:91:20:b6:7e:4b:3e:d4:09:f4:6e:2e:16:50:a3:fd:37:
         98:9a:e3:48:e4:12:4a:81:bb:9d:de:76:cb:6b:f9:45:11:92:
         e7:ee:6b:d9:a6:b5:36:54:00:5b:23:37:80:54:d4:64:d8:80:
         51:ab:a4:85:11:1d:92:cf:c2:73:1a:dc:d1:ea:56:2a:f6:1f:
         a7:59:1b:af:22:82:0a:7d:48:e7:9a:5c:3e:06:07:43:62:7e:
         2d:10:aa:7d:be:36:40:62:d2:b8:24:a9:b3:c3:16:c7:e7:dd:
         17:e3:aa:67:05:dc:15:30:33:4c:38:89:f1:a6:8e:34:91:73:
         b1:90:ba:e4:77:ad:c9:c8:b3:03:ec:24:2c:dd:14:f0:d6:5f:
         b1:d4:19:70:f8:cd:74:e3:8c:23:f3:9e:b7:75:c1:63:8b:c5:
         04:fa:a8:32:92:0f:00:4b:68:d0:11:95:6b:99:7a:0c:b6:aa:
         f1:de:d8:96:02:1b:d1:e9:c8:77:4d:39:05:07:06:7c:99:f9:
         e5:d2:43:8e:72:15:d4:39:2e:46:95:2b:15:0a:3d:48:a5:de:
         06:1f:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:49:11 2024 by rpki-client on console-ams.rpki-client.org