Manifest

$ rpki-client -vvf rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.mft
File:                     4A208C7877CBF7D9680C15023B778994D27CBFBB.mft (raw, json)
Hash identifier:          8NhD1ob+yizkluOVwyGPxO/2sEj5gr/Spa5GjF5YPdQ=
Subject key identifier:   9A:60:AD:5A:D3:CA:57:99:7D:A3:7E:73:4B:56:F0:48:8A:02:AF:03
Authority key identifier: 4A:20:8C:78:77:CB:F7:D9:68:0C:15:02:3B:77:89:94:D2:7C:BF:BB
Certificate issuer:       /CN=4A208C7877CBF7D9680C15023B778994D27CBFBB
Certificate serial:       479938581217621EAA5A432FCC3DEA60F952C973
Authority info access:    rsync://dev.tw/rpki/August/2/4A208C7877CBF7D9680C15023B778994D27CBFBB.cer
Subject info access:      rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.mft
Manifest number:          0408
Signing time:             Thu 25 Apr 2024 19:27:06 +0000
Manifest this update:     Thu 25 Apr 2024 19:22:06 +0000
Manifest next update:     Fri 26 Apr 2024 20:54:06 +0000
Files and hashes:         1: 4A208C7877CBF7D9680C15023B778994D27CBFBB.crl (hash: hmMHfS+6/Ie7uPOz+Nr4ch/LR8blnDCzXmoflpleHxQ=)
                          2: AS51930.asa (hash: zS8LOeLMZDHmgFIiO5b9BNhhP2B6DmZSBzetjAC4DqM=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.crl
                          rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.mft
                          rsync://dev.tw/rpki/August/2/4A208C7877CBF7D9680C15023B778994D27CBFBB.cer
                          rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.crl
                          rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2w7sK_0v5VYmH7T_xOyXpfwTMss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:99:38:58:12:17:62:1e:aa:5a:43:2f:cc:3d:ea:60:f9:52:c9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A208C7877CBF7D9680C15023B778994D27CBFBB
        Validity
            Not Before: Apr 25 19:22:06 2024 GMT
            Not After : Apr 26 20:54:06 2024 GMT
        Subject: CN=9A60AD5AD3CA57997DA37E734B56F0488A02AF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:f5:e7:89:4a:16:00:f3:a5:0c:bf:23:29:
                    08:ce:c9:ba:7f:99:52:29:91:3c:f5:2d:ef:21:4d:
                    b6:39:ff:5c:a2:ad:79:68:7f:be:35:b7:c8:b5:9c:
                    3a:1e:4b:4a:f9:66:6c:a3:01:7d:43:d5:19:ac:21:
                    b3:aa:48:9c:8c:43:ca:38:c1:47:db:47:f9:10:21:
                    c9:4d:ef:a3:f4:f5:69:b7:91:7f:0d:af:6f:a5:6b:
                    36:02:43:7f:4b:95:3e:0f:42:82:0c:11:24:88:6a:
                    89:c7:35:83:68:d2:ae:39:b0:7c:ab:8a:43:b6:68:
                    ca:23:6f:2b:f5:b0:c7:6d:57:50:b8:a8:b5:f5:f9:
                    ac:d4:40:de:75:db:56:3d:9f:9f:1c:38:32:ef:2b:
                    e7:12:33:a3:2e:6b:ee:bf:d5:7b:b5:38:ac:4f:e5:
                    61:f7:91:74:d6:c3:29:29:51:7e:bf:60:54:f1:0e:
                    1e:ea:22:b7:3e:74:a5:77:c2:3c:f6:ff:c6:a8:46:
                    7a:fd:3c:9a:89:d1:ba:0f:8a:68:7c:c0:2b:77:26:
                    74:4e:65:3b:18:fd:83:04:48:dd:50:3c:1b:1d:cc:
                    97:13:a4:3d:a2:fe:c1:23:43:40:1a:0d:78:39:13:
                    a4:30:4e:3d:d3:e1:22:c8:13:bc:2a:0e:eb:6c:9b:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:AD:5A:D3:CA:57:99:7D:A3:7E:73:4B:56:F0:48:8A:02:AF:03
            X509v3 Authority Key Identifier:
                keyid:4A:20:8C:78:77:CB:F7:D9:68:0C:15:02:3B:77:89:94:D2:7C:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/2/4A208C7877CBF7D9680C15023B778994D27CBFBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:fd:88:56:a1:c4:d8:59:e8:63:1d:91:e9:35:25:db:79:
         eb:eb:00:36:31:7c:96:65:54:3b:8f:0e:59:34:e4:61:de:54:
         0a:03:bc:d6:c7:d3:64:ad:22:5b:df:47:91:05:90:5e:25:bc:
         75:d8:c8:a9:e1:23:e6:58:a1:2e:bb:81:8f:a7:aa:4b:43:9a:
         b2:a6:5a:7c:0f:0a:0d:4a:7b:e1:b2:b1:d4:4e:52:b9:18:8f:
         a5:11:c5:52:49:fa:e3:99:26:e0:44:96:27:d3:16:90:27:e3:
         64:b8:38:ba:d8:0c:a8:2b:ca:d3:d7:b5:0e:b2:ae:61:da:bd:
         e1:82:1c:8f:25:ea:3c:94:c4:1c:52:5e:97:5d:01:11:ae:4d:
         0c:2b:89:8f:b0:7b:5a:d4:42:cc:54:83:20:7f:d5:73:e5:fc:
         98:e1:a0:e1:f5:b1:ce:51:8a:28:36:58:af:ce:fe:3a:63:a9:
         71:1c:c4:ff:32:6d:bc:4c:7a:89:42:b8:e9:d4:ad:d3:86:df:
         72:96:3c:ae:d5:4c:b9:ee:82:4f:83:3a:d7:d5:f9:f2:09:03:
         59:c7:76:a8:75:6b:76:4c:0f:04:ac:ae:25:97:46:25:80:02:
         f8:01:83:4a:0e:76:f8:d8:f0:d5:ce:0d:49:12:e2:09:76:29:
         d2:32:55:79
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUR5k4WBIXYh6qWkMvzD3qYPlSyXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEyMDhDNzg3N0NCRjdEOTY4MEMxNTAyM0I3Nzg5OTRE
MjdDQkZCQjAeFw0yNDA0MjUxOTIyMDZaFw0yNDA0MjYyMDU0MDZaMDMxMTAvBgNV
BAMTKDlBNjBBRDVBRDNDQTU3OTk3REEzN0U3MzRCNTZGMDQ4OEEwMkFGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYPXniUoWAPOlDL8jKQjOybp/
mVIpkTz1Le8hTbY5/1yirXlof741t8i1nDoeS0r5ZmyjAX1D1RmsIbOqSJyMQ8o4
wUfbR/kQIclN76P09Wm3kX8Nr2+lazYCQ39LlT4PQoIMESSIaonHNYNo0q45sHyr
ikO2aMojbyv1sMdtV1C4qLX1+azUQN5121Y9n58cODLvK+cSM6Mua+6/1Xu1OKxP
5WH3kXTWwykpUX6/YFTxDh7qIrc+dKV3wjz2/8aoRnr9PJqJ0boPimh8wCt3JnRO
ZTsY/YMESN1QPBsdzJcTpD2i/sEjQ0AaDXg5E6QwTj3T4SLIE7wqDutsm5JRAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUmmCtWtPKV5l9o35zS1bwSIoCrwMwHwYDVR0j
BBgwFoAUSiCMeHfL99loDBUCO3eJlNJ8v7swDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzAvNEEyMDhD
Nzg3N0NCRjdEOTY4MEMxNTAyM0I3Nzg5OTREMjdDQkZCQi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC8y
LzRBMjA4Qzc4NzdDQkY3RDk2ODBDMTUwMjNCNzc4OTk0RDI3Q0JGQkIuY2VyMGUG
CCsGAQUFBwELBFkwVzBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMC80QTIwOEM3ODc3Q0JGN0Q5NjgwQzE1MDIzQjc3ODk5NEQyN0NCRkJC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEATDT9iFahxNhZ6GMdkek1Jdt56+sANjF8lmVUO48OWTTkYd5U
CgO81sfTZK0iW99HkQWQXiW8ddjIqeEj5lihLruBj6eqS0OasqZafA8KDUp74bKx
1E5SuRiPpRHFUkn645km4ESWJ9MWkCfjZLg4utgMqCvK09e1DrKuYdq94YIcjyXq
PJTEHFJel10BEa5NDCuJj7B7WtRCzFSDIH/Vc+X8mOGg4fWxzlGKKDZYr87+OmOp
cRzE/zJtvEx6iUK46dSt04bfcpY8rtVMue6CT4M619X58gkDWcd2qHVrdkwPBKyu
JZdGJYAC+AGDSg52+Njw1c4NSRLiCXYp0jJVeQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:07 2024 by rpki-client on console-fra.rpki-client.org