Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft
File:                     3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft (raw, json)
Hash identifier:          9pk9KXUt08G38oOO1M9b4udWpgnyijEnfP3TPdGBVqk=
Subject key identifier:   5B:91:99:5E:02:68:24:CF:BF:79:58:2F:16:63:CE:F0:0E:6F:A2:26
Authority key identifier: 3C:8C:1B:29:CC:37:83:7A:2E:3B:EC:C5:0D:55:C3:62:B6:28:04:DA
Certificate issuer:       /CN=3C8C1B29CC37837A2E3BECC50D55C362B62804DA
Certificate serial:       419B40116CC22EC2CFF7ADDD3201B8D903983898
Authority info access:    rsync://dev.tw/rpki/August/10/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft
Manifest number:          55
Signing time:             Mon 08 Jul 2024 08:54:08 +0000
Manifest this update:     Mon 08 Jul 2024 08:49:08 +0000
Manifest next update:     Tue 09 Jul 2024 10:30:08 +0000
Files and hashes:         1: 3C8C1B29CC37837A2E3BECC50D55C362B62804DA.crl (hash: //28aXu6T1PFLG1exCvgG1fhWR7k8cNiW4M78Z8sqmk=)

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft
                          rsync://dev.tw/rpki/August/10/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.cer
                          rsync://dev.tw/rpki/August/10/1D7108A12E3339EA0B0237F0AC544AEAEB6BDAD3.crl
                          rsync://dev.tw/rpki/August/10/1D7108A12E3339EA0B0237F0AC544AEAEB6BDAD3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HXEIoS4zOeoLAjfwrFRK6utr2tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jul 2024 03:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9b:40:11:6c:c2:2e:c2:cf:f7:ad:dd:32:01:b8:d9:03:98:38:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8C1B29CC37837A2E3BECC50D55C362B62804DA
        Validity
            Not Before: Jul  8 08:49:08 2024 GMT
            Not After : Jul  9 10:30:08 2024 GMT
        Subject: CN=5B91995E026824CFBF79582F1663CEF00E6FA226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:10:3b:aa:ca:ae:35:32:ba:21:d3:8b:fe:
                    37:d3:1f:d3:bf:43:58:12:44:3e:1e:97:2d:70:e3:
                    df:00:70:0f:85:65:76:9e:c2:ad:80:c5:11:e2:93:
                    ce:a9:76:d5:a3:69:86:19:51:5c:b1:e6:ce:16:be:
                    53:ea:f8:3e:9e:27:12:1b:84:6b:a6:5c:4f:19:4b:
                    ed:cc:83:6a:a5:d1:87:e4:23:02:8c:cb:45:89:29:
                    31:42:2e:e4:11:25:56:09:e5:0d:08:d8:2f:c7:2b:
                    d5:10:08:20:0a:68:3f:e2:41:41:b4:6c:db:83:12:
                    ea:d6:f3:0e:af:0c:7c:1b:17:62:19:45:f8:3d:99:
                    98:c3:14:2f:bf:01:d3:f3:67:b2:cf:58:8e:47:a3:
                    5e:9a:71:0a:11:52:7f:28:a6:fe:64:f7:22:28:3d:
                    a2:ec:5b:0f:79:21:2d:11:d3:95:da:06:4c:ba:b1:
                    5f:65:3a:d6:01:9a:ae:51:f4:cc:5e:d6:60:80:d8:
                    32:ef:f2:63:76:d0:b0:1e:da:76:dc:39:40:02:34:
                    72:41:13:aa:ad:89:10:c5:aa:c0:c7:41:bf:06:da:
                    9b:a7:e6:c8:28:8b:19:71:43:04:d5:14:b6:6b:b6:
                    8b:d8:3b:5f:a3:92:00:a5:09:c6:28:55:e7:23:31:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:99:5E:02:68:24:CF:BF:79:58:2F:16:63:CE:F0:0E:6F:A2:26
            X509v3 Authority Key Identifier:
                keyid:3C:8C:1B:29:CC:37:83:7A:2E:3B:EC:C5:0D:55:C3:62:B6:28:04:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/10/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:cb:61:cd:47:58:02:06:d7:62:e2:8f:40:45:56:f6:ac:c8:
         43:88:30:e8:d5:16:4d:27:7b:f5:ef:30:9e:6d:fd:ca:76:22:
         84:72:b2:d7:a5:dc:4c:d2:e9:6d:85:6d:f4:9d:4e:5a:5c:29:
         d8:f0:50:43:f7:a4:e9:3f:6d:38:03:f3:f4:9f:df:70:e3:a2:
         ce:89:2f:c4:c2:c3:c9:95:a9:01:96:41:49:ed:74:bf:7c:1a:
         90:ec:1d:05:b0:ef:35:de:23:20:5a:91:ad:82:0b:f1:70:89:
         d2:d5:44:42:2d:25:ee:d7:af:78:19:ec:28:b6:c2:90:ff:2a:
         fe:29:b2:c6:00:41:2e:5a:f9:35:76:da:10:e7:0b:fa:cd:f2:
         99:3c:eb:9a:d6:61:37:ab:98:b3:65:a9:73:2b:72:76:28:e0:
         26:51:2f:17:3d:f9:32:99:bd:fc:e8:89:cf:0f:27:14:58:a0:
         c8:e9:5a:2b:f8:5a:ce:a0:0b:14:1b:e8:d9:a0:5f:0b:bd:05:
         17:44:b8:23:2c:fb:6f:c1:09:81:e6:77:d4:36:47:fe:40:22:
         6b:54:9f:f9:07:1e:dd:a0:98:bf:77:cb:1c:46:ba:c2:de:86:
         70:e9:c3:1e:a9:a9:88:37:ac:b9:da:95:d6:fc:12:0d:13:6b:
         70:38:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 09:36:13 2024 by rpki-client on console-fra.rpki-client.org