Manifest

$ rpki-client -vvf dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
File:                     9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft (raw, json)
Hash identifier:          u8elu+P8qKNpPnC3TnZn28zIZk2+XD0sJJtxSco0LJM=
Subject key identifier:   5F:9F:62:56:81:0B:B4:4B:34:26:D0:86:F9:88:7F:BA:EA:94:98:73
Authority key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Certificate issuer:       /CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Certificate serial:       325E0B346B56B959D3E80F7AAACCCD3847E38810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Subject info access:      rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
Manifest number:          0159
Signing time:             Sat 27 Apr 2024 09:02:47 +0000
Manifest this update:     Sat 27 Apr 2024 08:57:47 +0000
Manifest next update:     Sun 28 Apr 2024 11:55:47 +0000
Files and hashes:         1: 326131323a646434303a3a2f32392d3438203d3e20393435.roa (hash: 9nCmzIPrc5eg9srqb6+v/A6MguU+yUqUMBj/yxbVHvg=)
                          2: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (hash: g/dY4aO3OBlAenhmFGDJaf5GHpGCpph+2qZAfkLioT4=)
                          3: 9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl (hash: WVH5CT3odrd1fg5U1phgywWRmtMlGasOHBJxPjGpv4g=)
                          4: 326131323a646434373a3230303a3a2f34302d3438203d3e20313531333338.roa (hash: Lt/+IPwKT9jA7szXCA5NlKYGyKG4azER4FwYn8Cxn1A=)
                          5: 3139342e3131362e3232372e302f32342d3234203d3e20393435.roa (hash: ByGC669kSSLUKCIz9aUzEiPXJ9Keu9dFvopvf2dPqdc=)
                          6: 6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer (hash: FsaYMO4xNQtYM/EZpbXHN6z9k8+gTqvkI9OJf8JaPcI=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5e:0b:34:6b:56:b9:59:d3:e8:0f:7a:aa:cc:cd:38:47:e3:88:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
        Validity
            Not Before: Apr 27 08:57:47 2024 GMT
            Not After : Apr 28 11:55:47 2024 GMT
        Subject: CN=5F9F6256810BB44B3426D086F9887FBAEA949873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:9d:17:37:92:31:8a:18:4f:a9:b4:4c:76:
                    b9:f0:50:0e:78:b5:4a:7c:c2:06:39:03:e5:4a:47:
                    bd:c1:40:71:b5:b6:ae:94:d7:4e:5e:58:69:85:fd:
                    42:b3:86:92:b2:d8:3f:1c:a2:14:cc:94:be:3d:34:
                    94:1c:4f:63:34:ae:3f:5b:6f:8e:b5:45:86:b9:15:
                    60:ee:4f:28:67:17:28:21:d7:e3:56:ea:be:fe:7c:
                    e6:dc:54:37:77:a9:76:7f:ca:bc:44:99:47:fd:1d:
                    4e:fd:71:21:de:98:4e:29:14:fe:04:15:7a:cc:74:
                    f9:78:79:c6:79:c6:79:90:c3:07:d7:7d:bf:13:d2:
                    ed:d0:ab:4f:c7:27:1b:eb:0e:f1:f7:c4:bb:74:2e:
                    bf:37:72:87:1d:28:b8:94:cc:e4:4e:26:24:35:f3:
                    1a:e7:9d:1a:4d:48:3b:a1:6d:3a:ee:aa:79:9e:3a:
                    26:8f:7b:1d:96:84:3d:04:3a:39:84:85:b2:87:cb:
                    de:c1:89:01:22:02:54:a3:a8:0c:0b:90:b0:e4:85:
                    d6:88:aa:69:02:1e:fb:29:44:0c:c1:eb:77:06:f2:
                    9a:cc:28:24:02:c0:9b:f9:5b:bb:dd:ca:c3:0b:59:
                    12:00:02:64:84:6d:ab:7a:d4:8d:35:47:f3:31:9d:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9F:62:56:81:0B:B4:4B:34:26:D0:86:F9:88:7F:BA:EA:94:98:73
            X509v3 Authority Key Identifier:
                keyid:9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:80:d0:c6:d7:de:14:5b:a8:8f:13:3c:7e:66:2e:be:65:
         67:70:63:98:9a:89:0f:c2:db:9c:60:d9:e1:9f:4c:3b:f9:dd:
         a5:df:f7:96:af:d4:cb:99:d7:d7:fe:25:94:10:0c:28:1a:da:
         76:8e:74:d9:3c:f5:93:25:5e:42:0d:94:f9:d4:89:81:b7:23:
         cf:49:88:c4:47:d4:68:a8:32:9b:8d:c8:95:ae:6a:29:e8:7e:
         fd:f9:ff:e4:d3:e1:09:98:1c:12:99:aa:2d:c3:c4:7e:ae:9b:
         9e:e9:c8:9f:28:ee:72:22:ce:ab:c2:d7:b2:63:9f:74:ec:76:
         fa:cf:41:1b:6e:4a:60:a6:05:bb:33:13:0c:8c:2c:8c:58:da:
         7b:3d:e7:8f:8e:23:d2:d4:c8:68:cf:b8:a9:92:a5:7a:06:06:
         9f:8b:11:24:68:31:e8:72:15:ce:73:4a:db:60:38:2a:75:ee:
         4e:1c:a6:6b:87:a5:c4:7a:8b:89:b6:28:2f:71:a9:e7:2f:1e:
         39:47:ac:1d:ed:b8:af:e8:52:d1:7e:30:a3:70:cd:3c:6f:64:
         fa:80:2f:86:8e:e5:a4:0d:f0:f3:26:96:d9:fd:67:00:fe:31:
         87:cb:40:7c:a1:c7:d4:c2:b6:cc:b4:6f:cf:2d:bc:2a:02:d5:
         d0:91:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:37 2024 by rpki-client on console-ams.rpki-client.org