Manifest

$ rpki-client -vvf rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
File:                     CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft (raw, json)
Hash identifier:          JN844agpAO9Yg0YUhQLMCPsIIgF3y0cnmcg4xBu9TR4=
Subject key identifier:   1D:88:B8:15:7B:D5:F7:4C:C8:4F:39:82:88:45:C7:B4:13:2A:0E:B8
Authority key identifier: CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Certificate issuer:       /CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Certificate serial:       37EFA4AF3B33CFF4F6997D221577FAFA09E80E68
Authority info access:    rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
Subject info access:      rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
Manifest number:          0200
Signing time:             Mon 06 May 2024 16:28:42 +0000
Manifest this update:     Mon 06 May 2024 16:23:42 +0000
Manifest next update:     Tue 07 May 2024 17:00:42 +0000
Files and hashes:         1: 326131323a646434373a383034373a3a2f34382d3438203d3e203331383938.roa (hash: pbzoAL6bSjwb4gc+PZnFjXPuJZVzdqTCKfAwtckveWc=)
                          2: 326131323a646434373a383065343a3a2f34382d3438203d3e20323033383433.roa (hash: 3nY8L3o5lR0Q16UI0AHDkhO/uXF+88Uvpro2HoVNJFg=)
                          3: CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl (hash: Ljx36UfDdxM+QXSJa7kbgbv7LvhfcmsyF3BDca/Zxpg=)
                          4: 326131323a646434373a383034373a3a2f34382d3438203d3e20323033383433.roa (hash: WpX5Px/w8AfOQ2WJYc++RvBgYLZccmvtA4ziGBESXZc=)
                          5: 326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa (hash: FKSdCbF8/xfag/Yj4mGDd3ZcLqfrMkInbVn7rj7NVJs=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl
                          rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
                          rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:a4:af:3b:33:cf:f4:f6:99:7d:22:15:77:fa:fa:09:e8:0e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
        Validity
            Not Before: May  6 16:23:42 2024 GMT
            Not After : May  7 17:00:42 2024 GMT
        Subject: CN=1D88B8157BD5F74CC84F39828845C7B4132A0EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:85:74:44:a4:15:c9:9e:a1:ac:e5:51:54:ec:
                    3c:dc:ef:64:26:f2:d2:d1:34:33:91:cf:83:19:1e:
                    6c:7d:c3:0a:9f:bd:98:96:64:6b:56:1f:0f:54:02:
                    97:4d:36:b4:67:47:40:51:95:7b:46:b7:aa:e4:b9:
                    e8:db:ad:4b:11:a1:c9:2f:a2:36:e0:f5:12:60:83:
                    12:6f:8e:27:b6:a2:c3:b7:16:af:9d:fd:c3:cb:6e:
                    4c:a4:97:63:6f:95:00:9a:7a:1d:e2:d7:bd:62:ae:
                    57:62:ce:e2:24:ff:1f:c0:cc:c7:6b:96:72:f8:6a:
                    32:4e:c0:56:78:ac:35:b8:42:2e:08:97:40:f2:12:
                    35:11:a4:3a:3d:1b:5e:ea:16:a8:ca:c9:59:c9:2d:
                    75:a9:b9:b8:40:60:e3:23:71:4c:6c:04:95:d4:26:
                    f0:be:63:30:d0:f2:cf:fe:34:65:4f:88:39:7b:ef:
                    83:ad:b9:f5:be:19:7c:0f:64:ee:c2:ff:30:82:69:
                    8e:2c:6b:09:f7:c1:fe:16:1e:ec:42:e2:8f:77:d7:
                    6b:14:c0:f6:2a:00:ef:02:33:95:f0:77:6a:58:6a:
                    60:a0:34:e6:36:85:a3:a6:03:27:02:12:98:57:7e:
                    ed:ec:f1:01:1e:d6:b3:98:cf:72:a6:6d:1e:c8:88:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:88:B8:15:7B:D5:F7:4C:C8:4F:39:82:88:45:C7:B4:13:2A:0E:B8
            X509v3 Authority Key Identifier:
                keyid:CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:c5:82:a7:46:93:2a:8a:7f:f3:c5:ec:f0:83:f8:92:22:
         71:db:2d:f8:7e:4c:66:aa:1e:28:40:8c:b2:10:c5:fd:4a:6a:
         47:05:a2:8e:79:3b:48:26:45:59:59:e4:01:d1:76:a7:27:04:
         ae:cd:d2:cc:12:83:b4:1a:89:2a:5b:f8:3b:11:2a:71:7f:5b:
         bf:30:d7:d7:51:00:24:2e:0d:1e:ab:dc:39:36:b0:68:d2:0e:
         c0:13:45:d4:9f:09:99:34:6b:40:3c:c0:aa:6c:5d:e1:b3:42:
         5c:ee:75:03:f1:ae:e0:5a:24:e3:8a:b2:8b:e2:76:1f:72:ac:
         c3:44:fc:63:bc:25:06:8e:10:d2:59:dc:aa:5d:ad:bb:bf:b9:
         b7:b8:e1:f7:69:6c:cb:9d:8e:f9:9c:06:ab:3b:e2:e5:18:51:
         98:7d:8e:82:f6:60:11:c1:87:9c:01:9f:5a:d0:b7:4d:0c:25:
         3f:0e:ed:06:ad:77:83:4e:ae:a3:e3:be:0f:23:ff:c0:eb:b2:
         30:52:60:57:d1:38:b4:33:a1:54:88:23:7f:ed:6e:48:c9:dc:
         67:83:e5:20:f6:24:f6:6c:3e:d7:af:73:8b:33:c0:a8:6b:5e:
         4e:7e:20:79:ad:fc:c0:bf:01:53:ec:ce:be:05:f6:82:99:68:
         a0:c5:4e:e6
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgIUN++krzszz/T2mX0iFXf6+gnoDmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2NzI1NjhFREFGRDA0M0FDQzlDMkI2OTNDNkYyQkY5
REY2NDJGRTAeFw0yNDA1MDYxNjIzNDJaFw0yNDA1MDcxNzAwNDJaMDMxMTAvBgNV
BAMTKDFEODhCODE1N0JENUY3NENDODRGMzk4Mjg4NDVDN0I0MTMyQTBFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDthXREpBXJnqGs5VFU7Dzc72Qm
8tLRNDORz4MZHmx9wwqfvZiWZGtWHw9UApdNNrRnR0BRlXtGt6rkuejbrUsRockv
ojbg9RJggxJvjie2osO3Fq+d/cPLbkykl2NvlQCaeh3i171irldizuIk/x/AzMdr
lnL4ajJOwFZ4rDW4Qi4Il0DyEjURpDo9G17qFqjKyVnJLXWpubhAYOMjcUxsBJXU
JvC+YzDQ8s/+NGVPiDl774OtufW+GXwPZO7C/zCCaY4sawn3wf4WHuxC4o9312sU
wPYqAO8CM5Xwd2pYamCgNOY2haOmAycCEphXfu3s8QEe1rOYz3KmbR7IiGuJAgMB
AAGjggHYMIIB1DAdBgNVHQ4EFgQUHYi4FXvV90zITzmCiEXHtBMqDrgwHwYDVR0j
BBgwFoAUzWclaO2v0EOsycK2k8byv532Qv4wDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjAzODQzLzAvQ0Q2
NzI1NjhFREFGRDA0M0FDQzlDMkI2OTNDNkYyQkY5REY2NDJGRS5jcmwwZQYIKwYB
BQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0
NS8xL0NENjcyNTY4RURBRkQwNDNBQ0M5QzJCNjkzQzZGMkJGOURGNjQyRkUuY2Vy
MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDM4NDMvMC9DRDY3MjU2OEVEQUZEMDQzQUNDOUMyQjY5M0M2RjJCRjlE
RjY0MkZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAKgLFgqdGkyqKf/PF7PCD+JIicdst+H5MZqoeKECM
shDF/UpqRwWijnk7SCZFWVnkAdF2pycErs3SzBKDtBqJKlv4OxEqcX9bvzDX11EA
JC4NHqvcOTawaNIOwBNF1J8JmTRrQDzAqmxd4bNCXO51A/Gu4Fok44qyi+J2H3Ks
w0T8Y7wlBo4Q0lncql2tu7+5t7jh92lsy52O+ZwGqzvi5RhRmH2OgvZgEcGHnAGf
WtC3TQwlPw7tBq13g06uo+O+DyP/wOuyMFJgV9E4tDOhVIgjf+1uSMncZ4PlIPYk
9mw+169zizPAqGteTn4gea38wL8BU+zOvgX2gplooMVO5g==
-----END CERTIFICATE-----
Generated at Mon May 6 17:47:17 2024 by rpki-client on console-ams.rpki-client.org