Manifest

$ rpki-client -vvf dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
File:                     9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft (raw, json)
Hash identifier:          DCVrlCBkK4b4GBTHztClTdcAnKg1tmPmAxoacpRLyqI=
Subject key identifier:   77:DA:50:2D:A7:EF:5F:05:F1:5B:CC:97:78:00:56:BC:D2:C0:4B:81
Authority key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Certificate issuer:       /CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Certificate serial:       53A6C18505ECCE6B4A6F151FD3BFE414DE8E3CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Subject info access:      rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
Manifest number:          01C8
Signing time:             Fri 21 Jun 2024 10:47:22 +0000
Manifest this update:     Fri 21 Jun 2024 10:42:22 +0000
Manifest next update:     Sat 22 Jun 2024 14:02:22 +0000
Files and hashes:         1: 3139342e3131362e3232372e302f32342d3234203d3e20393435.roa (hash: ByGC669kSSLUKCIz9aUzEiPXJ9Keu9dFvopvf2dPqdc=)
                          2: 9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl (hash: Bz4CvICnMZUYHZuBslHGXIAA3nt331TnuP9dV1lZroY=)
                          3: 326131323a646434373a3230303a3a2f34302d3438203d3e20313531333338.roa (hash: Lt/+IPwKT9jA7szXCA5NlKYGyKG4azER4FwYn8Cxn1A=)
                          4: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (hash: g/dY4aO3OBlAenhmFGDJaf5GHpGCpph+2qZAfkLioT4=)
                          5: 326131323a646434303a3a2f32392d3438203d3e20393435.roa (hash: 9nCmzIPrc5eg9srqb6+v/A6MguU+yUqUMBj/yxbVHvg=)
                          6: 765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer (hash: ejS4s8asKUJYOWKSS0ZjkL768HzK5LRDx5W2s+QCSKg=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:c1:85:05:ec:ce:6b:4a:6f:15:1f:d3:bf:e4:14:de:8e:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
        Validity
            Not Before: Jun 21 10:42:22 2024 GMT
            Not After : Jun 22 14:02:22 2024 GMT
        Subject: CN=77DA502DA7EF5F05F15BCC97780056BCD2C04B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:f8:5c:04:09:f8:30:38:c0:f8:d1:9c:98:
                    23:03:4e:20:8e:b9:e3:aa:dc:3f:91:b3:31:38:a6:
                    4b:4b:dc:15:e7:d2:6c:46:a5:79:60:04:2c:a8:4d:
                    85:3b:70:9a:e0:a3:af:cd:97:df:c9:92:0d:eb:52:
                    0d:c4:71:0d:e7:ec:c4:09:86:51:55:b3:c9:38:50:
                    96:40:7e:c1:23:e7:8d:fe:09:30:b3:18:d5:c8:e6:
                    e4:8f:63:5c:f9:b2:8a:4b:b4:13:de:60:93:ce:0d:
                    62:8a:58:47:db:9a:7f:74:06:bd:ba:e8:5a:6a:ce:
                    40:9f:93:8c:34:e9:31:ef:f8:5e:d6:13:c6:22:e0:
                    86:d6:d0:12:ca:0b:da:1d:76:2e:18:21:65:09:a9:
                    4a:09:ce:4c:9a:9c:09:59:81:c3:c0:e9:93:95:b8:
                    c7:1f:1d:57:31:f5:0f:ca:a2:a1:ab:93:60:9a:35:
                    1c:e2:ab:bb:a7:9e:de:f6:f2:f0:b3:50:bf:e9:73:
                    ae:e2:57:da:ed:4a:d6:87:9a:a1:3b:67:08:39:6d:
                    8e:2c:b2:24:b0:ec:0f:d0:d9:87:13:1b:f6:f1:4d:
                    b9:ab:31:04:d0:b6:d2:ce:99:43:df:12:0d:b7:37:
                    ba:8d:75:25:97:c5:97:ce:42:a1:19:30:16:2d:a7:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DA:50:2D:A7:EF:5F:05:F1:5B:CC:97:78:00:56:BC:D2:C0:4B:81
            X509v3 Authority Key Identifier:
                keyid:9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:77:de:a0:b6:1a:27:30:89:d0:5f:e4:b0:36:14:49:e1:
         7f:cf:e9:0a:6a:ef:6e:36:7d:eb:e1:ed:9b:67:dd:28:a3:1f:
         4f:3f:0d:dd:8b:b7:07:e9:22:34:9a:94:06:63:01:07:b9:dc:
         29:84:ca:f6:53:eb:71:c8:89:b5:78:52:c5:3e:b6:22:f3:a0:
         bf:47:9f:ed:7b:ee:ab:20:73:f2:83:8d:44:41:00:31:d9:e8:
         ca:00:c5:1c:7e:f9:f7:5a:be:36:fd:e5:2a:d2:a2:88:7d:af:
         2f:85:f8:28:f7:16:83:19:88:a3:f4:3b:c5:4e:24:14:3d:b1:
         f5:68:20:ef:e6:f7:93:8e:f5:39:ed:e3:81:02:06:51:cd:c4:
         fc:7c:ca:49:78:57:31:5a:82:fe:ac:ff:0e:ef:e1:d0:ca:87:
         72:65:74:e9:91:f2:6b:bb:1e:9c:30:4a:28:34:98:87:6f:cc:
         8a:6d:67:64:67:46:bf:c8:f0:87:d0:4f:d9:d6:c5:ea:68:72:
         17:0f:3f:97:9e:28:e1:c1:5a:0d:19:67:39:ad:68:14:87:8e:
         19:46:a8:11:2c:47:7d:8e:99:f9:94:e9:1d:35:6b:8d:57:cd:
         41:03:4e:25:99:7f:a3:09:ad:9d:36:48:91:78:fc:18:11:c5:
         89:4c:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:44:10 2024 by rpki-client on console-fra.rpki-client.org