Manifest

$ rpki-client -vvf rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
File:                     3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft (raw, json)
Hash identifier:          RKiHt+7Z2xzPsadVNNPfnkjYqTXVYxe17qfFfPh4KrU=
Subject key identifier:   2C:74:14:CB:D5:C8:3A:EE:49:F7:CB:04:BF:90:45:16:5D:FE:C4:C2
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       2A7C9A3A68CE8BEBD0646C7B53EEA1FEFA0E6868
Authority info access:    rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
Manifest number:          043A
Signing time:             Wed 19 Jun 2024 16:37:37 +0000
Manifest this update:     Wed 19 Jun 2024 16:32:37 +0000
Manifest next update:     Thu 20 Jun 2024 19:03:37 +0000
Files and hashes:         1: 3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl (hash: yyY/O2gIKG9ipX5pPc6avgnXcYPgPSNZNQD68ncZ5Pk=)
                          2: 326130353a646663363a393330303a3a2f34302d3438203d3e203436313338.roa (hash: NAOYouY7XB0m1r9qIdGiwXKIqbq1ZOH3XUQ0a3Q/e90=)
                          3: 326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa (hash: ZfDGhnPbGXzKmB2OHeNeI4gY+FrcVZSfB51+uq5Fduk=)
                          4: 326130353a646663363a393230303a3a2f34302d3438203d3e20313937353337.roa (hash: BGprAzwlQPzlyMJ1QLEO9GogWKFszI/XjcMru4ypx/I=)
                          5: 326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa (hash: e8mf/Ef37MFcYzYWSKLMf3x4aM/H4HiVkTLIRSKPsdg=)
                          6: 326130353a646663363a393030303a3a2f34302d3438203d3e203438323331.roa (hash: Z9Z1NxMReuczPSccTVRJcOnrHZQT0wS0S6W23+nelho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:9a:3a:68:ce:8b:eb:d0:64:6c:7b:53:ee:a1:fe:fa:0e:68:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Jun 19 16:32:37 2024 GMT
            Not After : Jun 20 19:03:37 2024 GMT
        Subject: CN=2C7414CBD5C83AEE49F7CB04BF9045165DFEC4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:1c:5f:eb:70:42:7b:db:4a:fb:7e:36:e3:
                    e4:67:c5:23:dc:8b:01:ff:61:e4:d7:73:14:e5:aa:
                    aa:14:0a:5d:cd:94:ca:ef:e0:34:45:f1:2a:50:89:
                    ae:30:a0:4f:25:78:44:e0:50:b4:c4:0c:d4:f3:f5:
                    2e:60:86:6b:a8:e3:24:ba:e9:e4:f3:3b:95:a1:84:
                    0e:fa:63:84:10:68:ce:26:ee:2e:12:d3:52:2f:80:
                    44:b8:2a:ee:0e:fb:fd:33:da:5f:d3:82:6d:78:27:
                    88:0d:d9:a0:94:c7:00:23:85:f4:43:4e:0a:8e:ce:
                    77:c2:c1:24:e9:92:ef:e4:d6:d9:fa:c2:05:ee:12:
                    58:e5:d7:82:8f:eb:f4:4c:dd:8c:22:7b:b8:32:8f:
                    a7:7f:44:fb:e9:c7:93:59:09:c4:4b:f6:44:2d:20:
                    db:a7:03:43:98:b8:49:58:fd:d6:db:52:0a:bb:81:
                    64:f1:9e:e2:c9:30:1f:9b:b5:db:8e:95:0b:c6:52:
                    26:09:6e:3a:32:ac:49:1a:6d:b7:62:e7:b9:00:5f:
                    38:4e:da:df:f7:c1:11:d8:8c:57:b0:ad:ed:88:0c:
                    7a:c3:3a:47:f5:d2:09:ec:d3:8e:3f:f2:3d:c7:30:
                    6d:80:0e:88:57:88:16:12:aa:d2:b2:88:b1:29:f0:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:74:14:CB:D5:C8:3A:EE:49:F7:CB:04:BF:90:45:16:5D:FE:C4:C2
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:a4:9f:a8:a9:d9:97:04:76:13:9d:bb:3d:17:9f:64:d5:
         d7:49:a6:a6:37:ef:4e:33:a6:76:67:3a:48:77:0f:94:b7:f3:
         3c:d4:f5:07:b0:85:82:d1:47:26:a8:5f:6a:60:56:ee:9f:c3:
         41:c4:e5:32:68:35:06:32:16:66:a4:0f:d2:90:3b:ee:c0:ac:
         ea:81:b0:7f:49:91:f1:df:e1:eb:dc:f4:db:9d:cb:09:50:06:
         cd:58:c5:41:08:ba:e5:e2:57:97:ce:48:9a:e9:26:37:29:07:
         4e:0c:ec:25:37:6a:5d:f4:fa:56:f4:98:7a:df:af:36:99:d0:
         61:64:c5:a6:32:3e:95:99:20:ee:1d:3d:3d:ef:eb:07:70:d2:
         f0:71:46:5e:29:ea:c1:3a:ea:a0:67:43:04:28:34:b5:08:0a:
         bc:82:4e:22:09:06:6d:ca:82:77:82:06:d2:9b:a6:d0:d7:86:
         d0:48:ea:e8:e9:b4:f1:88:1a:91:5c:7d:b3:31:d9:38:07:8f:
         07:4c:d8:78:6a:e7:ec:c6:10:4d:d8:47:af:0d:02:26:4e:ce:
         86:9b:50:75:92:09:1d:e7:bd:b3:f9:6c:99:cc:d0:d4:d9:2f:
         50:fa:c3:9b:13:a4:37:93:5c:87:c0:4f:6f:08:e7:d5:20:38:
         a5:96:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----