Manifest

$ rpki-client -vvf dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
File:                     1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft (raw, json)
Hash identifier:          pWbS3f7JkwsuCUEf/pdq3xWkWe3LLDDaZ8YezfIhjBA=
Subject key identifier:   9D:A4:2E:9C:C9:DB:F0:20:66:13:08:98:57:5D:4F:27:6F:B5:B0:DB
Authority key identifier: 1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2
Certificate issuer:       /CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
Certificate serial:       3AC1C6D5246F62325CF827366202311D294177EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
Subject info access:      rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
Manifest number:          015F
Signing time:             Fri 03 May 2024 02:58:10 +0000
Manifest this update:     Fri 03 May 2024 02:53:10 +0000
Manifest next update:     Sat 04 May 2024 06:54:10 +0000
Files and hashes:         1: B518B581E73CE1F6CD4FD84ADD509383346F7AC1.cer (hash: BcNMxXGDVt7PUnnhCAa1jM7WerJ8xvyqvfb6SX09mHs=)
                          2: 1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl (hash: B/JJUjvl+ZqbasI0yXXocOJYeiNgTt1+lKLejJZKasU=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl
                          rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c1:c6:d5:24:6f:62:32:5c:f8:27:36:62:02:31:1d:29:41:77:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
        Validity
            Not Before: May  3 02:53:10 2024 GMT
            Not After : May  4 06:54:10 2024 GMT
        Subject: CN=9DA42E9CC9DBF02066130898575D4F276FB5B0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:11:64:aa:a0:6a:ec:71:b6:0c:b6:d2:d7:
                    ec:27:ef:7a:51:f2:cc:69:ba:77:fc:88:3a:65:e4:
                    c9:6f:a8:16:10:a5:4c:64:91:bc:36:77:e1:5f:24:
                    11:b5:81:42:16:50:71:d9:eb:8d:55:7c:52:ff:ff:
                    4f:c2:7d:4a:3b:5f:5c:09:e5:32:33:a0:6e:c3:cc:
                    ea:01:ac:03:82:d7:5c:c8:bc:57:c0:bb:46:48:c4:
                    ff:2c:6a:35:f4:e7:7f:8d:a9:87:45:a1:30:33:ad:
                    14:f9:6d:bf:81:8e:11:f1:7a:6e:fc:e2:f8:ee:eb:
                    c4:5f:9d:4f:aa:07:7c:51:c3:08:15:ad:8b:ad:6b:
                    4a:97:ac:0a:53:82:a9:11:94:09:86:11:be:89:19:
                    5f:39:21:14:42:44:db:0d:94:c2:f6:21:55:b0:d9:
                    23:59:65:a6:8f:08:39:dd:2d:9f:a9:03:e2:0c:b5:
                    4e:a1:e4:75:fe:84:47:ed:2c:5c:52:6f:55:a5:f1:
                    3e:ca:9d:a6:21:d0:e2:a0:a2:39:8a:ea:3d:ae:b8:
                    a4:fa:b7:88:46:8f:71:e7:2c:ab:93:f5:29:17:94:
                    9b:a7:56:e2:18:a5:8b:24:76:d5:81:65:f3:15:e9:
                    dd:b6:f5:4f:2a:4f:f9:0a:53:40:e3:59:6a:90:f3:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A4:2E:9C:C9:DB:F0:20:66:13:08:98:57:5D:4F:27:6F:B5:B0:DB
            X509v3 Authority Key Identifier:
                keyid:1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:1e:69:1c:09:57:cb:1e:ae:e6:fa:ba:7d:d6:23:88:25:
         c3:66:09:49:a7:5d:5c:36:e8:de:b2:0b:e8:14:82:c6:8c:3c:
         6d:39:c5:d7:94:4f:db:d6:6d:71:32:eb:4f:35:ae:4b:28:9d:
         5b:f7:8c:c3:65:13:e3:f6:48:32:ad:7a:6b:fc:d4:43:30:7a:
         61:33:5a:0c:c2:20:97:cf:67:21:03:6c:11:b3:b4:63:41:b2:
         c2:83:f9:50:60:47:c5:51:78:54:f7:6f:1d:ae:aa:4f:7a:07:
         38:3a:cf:8e:b6:7f:a7:9b:4f:f9:47:70:f8:02:74:da:48:53:
         5a:56:12:e7:3d:6e:a0:79:fd:d1:a5:0f:c5:9b:e8:80:b9:f5:
         93:7e:e0:4f:8f:96:b5:97:50:9b:4c:0b:46:7e:90:c9:98:a9:
         21:c1:dd:2f:9e:8d:a5:bd:36:05:35:66:c1:c6:a9:c2:14:a0:
         47:08:94:99:86:c7:08:72:21:14:96:f0:a5:53:01:78:6b:2a:
         40:9d:a4:0c:91:a1:06:b9:40:a4:55:51:d9:29:c2:39:18:c0:
         09:a3:1e:bf:71:68:9c:12:34:7b:50:9e:9d:f0:7d:cd:ca:1b:
         c5:30:34:83:94:aa:bb:15:40:40:4e:a9:8e:82:2e:f8:21:e0:
         70:06:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:13 2024 by rpki-client on console-ams.rpki-client.org