Manifest

$ rpki-client -vvf rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft
File:                     332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft (raw, json)
Hash identifier:          YEbLpVjtvY4oeCmvUTAjib+0Ks/tud1OuicQdJalYNA=
Subject key identifier:   CB:1A:8F:15:35:65:66:1C:0D:7D:4B:7D:68:54:B5:C9:B4:64:C3:F4
Authority key identifier: 33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2
Certificate issuer:       /CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2
Certificate serial:       1CC08513E50146312230F30EFB1BF8DEF8F24E5C
Authority info access:    rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer
Subject info access:      rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft
Manifest number:          0240
Signing time:             Thu 13 Jun 2024 18:45:20 +0000
Manifest this update:     Thu 13 Jun 2024 18:40:20 +0000
Manifest next update:     Fri 14 Jun 2024 20:57:20 +0000
Files and hashes:         1: 326131323a646434373a333930303a3a2f34302d3438203d3e20313939373632.roa (hash: 273sVNqKnEAm0igpvB9O4NaMB4LiEhBU5Dk1KgHSG0k=)
                          2: 326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa (hash: Qjby29vfdE7TcMGFUb7P3ZY36wD3AsMu7W1JHnEl9g0=)
                          3: 332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.crl (hash: QTDy1JxPerrEl+qu16/J8YsL3P704fZ1t4Va0FM21TA=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.crl
                          rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft
                          rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Jun 2024 13:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c0:85:13:e5:01:46:31:22:30:f3:0e:fb:1b:f8:de:f8:f2:4e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2
        Validity
            Not Before: Jun 13 18:40:20 2024 GMT
            Not After : Jun 14 20:57:20 2024 GMT
        Subject: CN=CB1A8F153565661C0D7D4B7D6854B5C9B464C3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:f3:9f:80:6e:53:6a:c9:86:52:1f:6e:f2:
                    9d:74:4f:88:bf:02:53:59:98:b5:08:60:82:5f:27:
                    48:e0:62:70:2b:04:c2:6e:b9:cc:87:fc:30:51:b8:
                    40:33:23:1e:64:03:87:81:9a:f0:ad:84:19:2d:f3:
                    67:0d:c2:90:52:f7:0a:06:0e:87:22:23:ba:97:80:
                    2d:b7:ea:47:52:cc:9d:07:7c:38:99:1c:9a:ba:1a:
                    d3:b5:f3:67:1a:69:2b:7c:dd:6a:68:37:b6:e7:ec:
                    92:a1:af:d1:5d:ec:18:ae:ee:4d:2e:10:79:98:4b:
                    85:c9:a8:c2:d3:64:95:23:f1:a0:1a:e0:ff:61:3d:
                    18:ce:f9:91:1d:ff:ac:79:f5:a0:48:99:ea:11:ab:
                    74:c3:59:43:41:6e:63:21:ed:4f:fb:0f:31:6b:6a:
                    84:18:22:e5:94:b6:3a:65:cf:8a:15:65:85:99:14:
                    3d:fd:f1:a6:31:c9:03:85:c7:0a:02:4b:fa:56:a6:
                    21:51:1d:e1:b0:f1:fe:47:30:3d:59:55:64:c4:ce:
                    1c:5f:a3:aa:d0:85:07:86:ac:3c:00:ca:9a:f0:84:
                    8c:4f:96:50:4f:36:16:e7:f4:e9:cb:23:6a:20:7b:
                    d8:0e:b3:79:f7:40:49:56:48:5c:36:38:08:0b:91:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1A:8F:15:35:65:66:1C:0D:7D:4B:7D:68:54:B5:C9:B4:64:C3:F4
            X509v3 Authority Key Identifier:
                keyid:33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:af:52:63:56:7d:74:97:52:2c:5a:d7:33:c2:6a:bd:df:20:
         b3:f3:2a:3a:0e:ba:81:a8:3a:df:e8:fb:ae:39:ef:43:ea:3d:
         85:4f:7c:56:a9:9c:25:db:a3:ed:47:3d:e6:e9:c5:55:fd:e8:
         c6:b6:52:72:31:29:9b:92:06:98:53:1b:50:c9:6f:3b:97:73:
         7a:e4:02:35:f8:d0:3e:b8:df:67:61:26:64:8b:a6:35:49:64:
         ae:a4:c2:f6:e4:98:59:ad:06:fa:fb:ee:f8:62:68:85:96:5c:
         6b:6c:aa:4d:4d:6c:4e:f3:e9:dd:c2:2c:ae:d4:78:a2:db:e7:
         2a:6e:73:ac:21:4b:1d:4d:e3:2b:d8:10:7a:1f:66:14:da:1d:
         ca:74:02:5a:ae:40:4b:22:fb:66:62:db:a3:68:45:84:c9:90:
         81:5a:24:43:45:33:80:df:40:c6:e2:91:b2:88:e8:de:9d:94:
         3a:2c:ae:36:4b:6b:76:d0:54:04:a6:8c:86:85:6d:4f:77:04:
         1b:23:94:c7:31:ec:21:99:58:00:fd:6a:44:4f:9c:ab:21:62:
         67:b9:a2:0e:b4:95:5b:10:ab:ad:73:fc:2e:0f:56:7f:7e:73:
         83:ea:0e:01:f6:37:b0:73:21:98:c7:05:58:8b:77:cc:fd:ea:
         f0:f4:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 19:27:27 2024 by rpki-client on console-fra.rpki-client.org