Manifest

$ rpki-client -vvf rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
File:                     95A38A1816A990804357FCAC49C09B0CA3A221E5.mft (raw, json)
Hash identifier:          dTjB+oMK7Tn34JopYy5+co5j65+fYZSuZ66YWhGmOZw=
Subject key identifier:   B6:F9:8E:53:91:5B:22:3A:38:8B:DD:31:55:0D:07:B6:3D:D6:D5:E9
Authority key identifier: 95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
Certificate issuer:       /CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
Certificate serial:       0CF363877B52F20ACC3D5937A6C930CD92DAA565
Authority info access:    rsync://dev.tw/rpki/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer
Subject info access:      rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
Manifest number:          0194
Signing time:             Mon 25 Nov 2024 08:06:56 +0000
Manifest this update:     Mon 25 Nov 2024 08:01:56 +0000
Manifest next update:     Tue 26 Nov 2024 09:17:56 +0000
Files and hashes:         1: 326131323a646434373a333032363a3a2f34382d3438203d3e20323136313233.roa (hash: 53TgU1ECGMjBAXcrAQxaT4AgRhK2U19SQspOvCtzlL4=)
                          2: 326131323a646434373a333032353a3a2f34382d3438203d3e20323135393933.roa (hash: SRNIFLyF9rgr2vNMs8WmXgoHH9zFtNi5/LN1J6pSj2s=)
                          3: 326131323a646434373a333032353a3a2f34382d3438203d3e20313432303436.roa (hash: 2sJv+1JULybbDLom8ub71ZfP3GDzrCOP/58bomKD/GA=)
                          4: 95A38A1816A990804357FCAC49C09B0CA3A221E5.crl (hash: MgAn3XlJdYlknMxk0qL9wYvEJdKWL5xYZ01W8J++UaY=)
                          5: 326131323a646434373a333030303a3a2f34302d3438203d3e20313939323033.roa (hash: ndY8u+f5ZeoU/wrnQe6KrCdnR015JiNd3AvxGKfZCv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:63:87:7b:52:f2:0a:cc:3d:59:37:a6:c9:30:cd:92:da:a5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
        Validity
            Not Before: Nov 25 08:01:56 2024 GMT
            Not After : Nov 26 09:17:56 2024 GMT
        Subject: CN=B6F98E53915B223A388BDD31550D07B63DD6D5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:31:f4:11:1c:94:7f:bd:53:41:59:ac:97:
                    84:81:4d:28:01:a2:49:61:9a:8a:36:d3:11:8e:71:
                    0d:dc:ed:bf:5c:dd:fd:7f:e2:c7:25:bd:1a:9f:da:
                    5b:c4:3b:78:cc:f3:52:e0:3d:37:2d:f5:b8:75:20:
                    f3:62:08:13:72:9c:99:1c:b9:f8:fb:89:1a:aa:f4:
                    72:8d:30:d9:25:66:5f:e4:d9:31:14:3a:4e:bc:df:
                    32:f8:c1:6e:6b:4f:74:71:e9:c9:9c:f2:5d:dc:7f:
                    6e:45:38:ea:45:78:40:72:8d:ac:a2:7e:fd:d7:5a:
                    09:e1:d0:fc:dc:15:b7:0a:94:f6:b1:3b:20:da:3a:
                    2d:9c:44:4b:86:68:d1:60:f4:86:19:b6:74:a4:bb:
                    c7:4a:5f:41:96:88:58:8b:8f:ad:a1:64:3c:5f:47:
                    8a:ad:c2:ff:a3:73:1a:85:8f:b1:0c:8e:df:02:06:
                    3c:71:28:9a:43:14:a9:5c:72:ca:30:02:c0:42:fb:
                    39:72:28:b6:f1:c9:ba:6e:a9:0a:66:09:fe:ac:f7:
                    a1:e2:37:7a:9c:1d:78:89:ad:c1:aa:ee:f6:53:64:
                    5f:3c:af:52:b5:77:d6:94:48:7d:ce:6d:82:77:f6:
                    38:55:eb:09:36:93:0a:52:28:4b:3a:9a:fe:bd:f9:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:8E:53:91:5B:22:3A:38:8B:DD:31:55:0D:07:B6:3D:D6:D5:E9
            X509v3 Authority Key Identifier:
                keyid:95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:8f:de:d0:12:68:24:8c:5a:0c:51:9e:af:3f:c6:36:ae:
         05:2f:68:45:4f:87:5f:80:e4:dc:11:27:02:91:fc:49:3a:a3:
         dc:c3:dc:13:19:5a:58:30:c6:a0:26:36:04:e2:cf:50:d1:29:
         93:e9:5d:64:56:c4:43:e8:b9:ad:29:02:7b:e3:82:b8:7c:d3:
         cd:cb:fb:d9:bb:12:76:2d:79:bd:61:2a:32:40:3e:07:d9:bb:
         9b:4c:33:54:33:a5:3e:93:50:95:e0:06:5e:7f:06:a7:a3:97:
         22:f1:fa:4a:74:f5:3f:e5:74:04:82:e8:cb:b7:86:6d:0e:2a:
         a6:ee:50:2a:06:32:ed:20:23:88:c5:c4:23:00:f3:f3:43:06:
         c1:80:9d:14:36:62:81:31:54:72:b2:00:f9:02:30:a9:ca:7f:
         c8:86:3f:9a:7f:ba:80:c2:74:d0:78:cc:8c:55:a4:0f:8f:38:
         54:72:f4:29:b9:b6:0a:de:6a:ea:4f:4c:da:83:fd:45:00:a5:
         fd:01:26:69:30:8c:1e:9e:ce:b7:35:f6:02:ca:81:f8:99:13:
         79:ef:40:b5:ef:af:06:21:1a:36:62:c9:37:4b:42:c4:60:14:
         be:92:75:91:d1:18:d4:83:78:bc:6d:22:22:c6:56:4f:74:2d:
         fa:ce:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----