Manifest

$ rpki-client -vvf rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.mft
File:                     D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.mft (raw, json)
Hash identifier:          9s9y1UyIehOcBEj1oIHG6rk4QbZfoUfCODPSomtcBnw=
Subject key identifier:   55:FC:EF:99:7B:44:31:E6:1E:35:6D:DA:22:66:75:5A:6A:31:DD:AC
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       34E3C01ED34202605C8F1818F1B35D07A7673F1A
Authority info access:    rsync://dev.tw/rpki/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.mft
Manifest number:          0408
Signing time:             Thu 25 Apr 2024 19:27:09 +0000
Manifest this update:     Thu 25 Apr 2024 19:22:09 +0000
Manifest next update:     Fri 26 Apr 2024 20:02:09 +0000
Files and hashes:         1: D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl (hash: p0Gpd49YvU2JBOCsh/kHYmWWImzMldEgPGP8T4Sd5jE=)
                          2: AS62853.asa (hash: wgU3OWNZFeE/Bz2Ia9LBW7VK6rC0yKLNqqee1ahd4yU=)
                          3: ROUTER-000003B1-510F485D29A29DB7B515F9C478F8ED3CB7AA7D23.cer (hash: I5Yfjo0iEjhfNAuoCKr0lrWltdtN/7vu0COtlx2kEac=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
                          rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.mft
                          rsync://dev.tw/rpki/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e3:c0:1e:d3:42:02:60:5c:8f:18:18:f1:b3:5d:07:a7:67:3f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Apr 25 19:22:09 2024 GMT
            Not After : Apr 26 20:02:09 2024 GMT
        Subject: CN=55FCEF997B4431E61E356DDA2266755A6A31DDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:be:b3:ff:51:31:0f:b1:69:f2:74:00:1c:
                    29:18:b3:14:fa:a4:51:49:b5:70:10:c5:ba:7d:cb:
                    e1:84:a8:e8:5f:3b:07:2c:21:d1:e7:9e:f3:dd:1e:
                    4e:88:dd:64:bd:af:05:f1:22:9c:43:ff:9a:df:86:
                    49:d8:7f:c1:de:63:b7:b7:d7:aa:09:8e:68:bd:9e:
                    49:86:1a:17:21:f4:c6:ec:50:a5:ba:f9:bc:45:c4:
                    fa:7a:d7:0b:4e:81:8d:96:c4:25:7b:33:44:2b:a5:
                    8e:1a:fb:74:3c:7b:f7:7d:61:51:81:76:4a:ba:ec:
                    6e:86:ce:2b:ec:72:4c:d0:cc:9b:ca:da:5c:cc:51:
                    c1:0b:95:5c:e3:64:5c:b6:2a:be:3f:fd:d2:4b:5c:
                    5f:5c:88:d9:44:82:ec:cb:d6:bb:a2:2a:eb:a5:d8:
                    0f:1c:d1:09:10:18:86:b0:89:74:ba:a3:2b:38:65:
                    d6:31:2a:5f:c8:98:2e:21:af:42:e3:31:aa:bc:79:
                    a8:95:c5:64:cb:a3:45:b6:3c:fe:41:98:2e:4d:14:
                    f3:ca:1f:db:39:11:d6:4d:9c:e2:ab:12:50:0f:4f:
                    a1:76:ac:45:4c:83:ad:c3:83:e3:42:46:01:87:90:
                    24:40:e0:ca:d6:f8:26:a5:50:66:c0:b1:7b:19:eb:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:EF:99:7B:44:31:E6:1E:35:6D:DA:22:66:75:5A:6A:31:DD:AC
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:35:71:b7:33:84:65:03:49:fb:3c:cc:f1:38:fa:6c:8e:
         07:da:cc:92:c7:d5:6c:fc:3d:5f:84:dd:20:1f:4e:a3:ec:da:
         06:6f:1a:f4:83:71:9f:e0:ed:b9:e3:ad:b6:dd:58:e9:33:16:
         ff:95:df:d8:60:50:00:cd:00:84:20:18:30:94:c5:f4:77:63:
         50:3a:48:14:8a:9e:c7:46:38:0d:5e:6b:73:2a:e5:1b:93:16:
         21:e4:c8:dc:d2:75:36:75:20:b9:2e:04:49:96:f2:04:6e:6f:
         1c:2f:66:7a:96:01:11:29:c9:70:5c:bb:39:c4:23:da:c5:fb:
         46:59:d6:f6:22:84:66:02:bf:9f:b9:7c:fe:29:dc:52:76:93:
         2a:1a:f9:ae:8e:3c:cc:2a:fe:54:45:28:1f:fd:e8:d2:5a:3e:
         9b:fd:d0:18:d1:e3:3f:5d:c4:ba:0d:4e:35:aa:6a:bb:49:49:
         fb:9b:ef:09:45:ff:97:97:72:b7:3f:ac:0c:3d:c3:ae:9d:55:
         1f:b8:41:4d:f4:d3:3c:9d:38:04:52:87:c0:66:75:24:8d:4c:
         e9:e7:2c:10:06:5e:a1:8e:34:48:3c:26:e8:0e:46:b9:0f:a0:
         95:06:61:0e:ef:ee:13:37:35:f7:c7:24:af:ec:c2:18:bb:ab:
         c5:09:5a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:07 2024 by rpki-client on console-fra.rpki-client.org