Manifest

$ rpki-client -vvf rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
File:                     3FF5D408DA7870E6667792E8F8613A14C6562654.mft (raw, json)
Hash identifier:          hA8ILlzc5uImI00dUwMxovzOpph51IaLppHi4A30fPo=
Subject key identifier:   C4:AD:73:0C:CB:D5:7F:A2:69:EE:9F:D0:C1:98:27:E5:45:C8:27:0E
Authority key identifier: 3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54
Certificate issuer:       /CN=3FF5D408DA7870E6667792E8F8613A14C6562654
Certificate serial:       5EFBE4FFB2B6CD7268E0B1BE0F3F2D534ECAA4C4
Authority info access:    rsync://dev.tw/rpki/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer
Subject info access:      rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
Manifest number:          0456
Signing time:             Wed 19 Jun 2024 14:27:26 +0000
Manifest this update:     Wed 19 Jun 2024 14:22:26 +0000
Manifest next update:     Thu 20 Jun 2024 15:25:26 +0000
Files and hashes:         1: 3FF5D408DA7870E6667792E8F8613A14C6562654.crl (hash: 5Z9Fs4SMjzM77STtyKslfArH1s8kgkOrOuMNSGK7RuY=)
                          2: AS49867.asa (hash: Uyn2PMUOiTUlufM+tur76Zocs+n0EbKQOfOAPIdt6wc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fb:e4:ff:b2:b6:cd:72:68:e0:b1:be:0f:3f:2d:53:4e:ca:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF5D408DA7870E6667792E8F8613A14C6562654
        Validity
            Not Before: Jun 19 14:22:26 2024 GMT
            Not After : Jun 20 15:25:26 2024 GMT
        Subject: CN=C4AD730CCBD57FA269EE9FD0C19827E545C8270E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:00:4d:ae:a6:4d:ba:4f:0c:ff:da:0f:37:
                    f7:7e:0d:dc:1b:67:bd:ff:c4:72:b8:ef:a5:7e:df:
                    d7:4c:36:c1:64:f9:cb:6f:50:48:d0:aa:79:e5:31:
                    f6:c3:c3:80:03:a8:63:9d:be:7e:91:b7:1a:ba:f8:
                    18:f0:ce:08:b0:ef:ed:c8:b6:65:dc:0d:40:46:f0:
                    42:c3:36:ba:81:0c:37:97:a6:11:9f:d0:4c:73:c6:
                    4c:b8:22:c0:4b:28:e6:e8:e9:d0:d4:38:9c:ea:c9:
                    ea:69:5c:17:3f:53:9a:31:33:73:3e:fb:17:24:e4:
                    87:a0:75:5a:92:b7:d6:44:d8:7e:39:01:36:e2:a8:
                    5a:cb:c7:36:d2:22:6e:2c:8c:07:b5:49:2c:28:97:
                    1e:9f:0d:44:b2:5d:cb:d3:4e:be:30:fb:dc:1b:6f:
                    18:e5:b5:87:ab:e3:ca:ab:19:42:61:92:5e:0f:d6:
                    16:05:07:9a:98:70:5a:71:c1:bd:2e:72:5d:7a:43:
                    bf:0d:21:17:94:8b:96:f2:f2:cc:66:e5:46:31:7f:
                    f2:8f:12:b8:d9:c2:58:ce:eb:86:6a:4b:60:66:68:
                    82:b1:dd:3a:3d:33:9b:4e:db:13:97:60:75:f2:4f:
                    e1:49:76:b6:19:24:56:15:de:3d:56:ee:c8:7b:be:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AD:73:0C:CB:D5:7F:A2:69:EE:9F:D0:C1:98:27:E5:45:C8:27:0E
            X509v3 Authority Key Identifier:
                keyid:3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0a:8c:15:e3:34:6d:41:1a:95:a9:50:21:64:b6:26:c6:6f:
         fe:6b:80:c2:ea:b3:48:5a:3b:4d:48:50:6c:7c:05:ce:15:b1:
         dd:f5:ea:17:42:a2:9f:14:ae:09:be:dd:f6:19:b0:00:7a:9e:
         cc:c5:d5:89:e1:c3:58:2c:10:fb:20:c2:7e:05:a1:52:49:d4:
         10:23:76:dc:af:d5:7f:94:3c:b5:68:5c:03:5f:2b:a0:ac:96:
         35:d8:bc:50:e0:ce:56:f7:0f:22:33:e6:cf:36:af:74:53:99:
         95:f5:01:19:fd:8e:c6:f3:6e:94:e3:94:c8:f0:42:ee:2b:20:
         50:91:7c:dd:12:ce:13:b0:7a:b2:d5:20:27:76:4c:cd:ff:86:
         12:6f:c4:8f:ef:08:3f:3d:c4:7c:66:8f:e9:ed:41:cc:50:5c:
         a1:5d:39:11:0a:8d:0d:e3:17:dd:4d:b2:52:c9:df:40:ab:f6:
         b6:6c:95:22:77:52:7f:e2:f5:44:39:4d:e1:b1:a1:7a:21:24:
         9f:18:27:51:c8:e6:d5:dc:61:e9:d8:da:5d:90:e3:33:b5:41:
         65:3e:5c:1b:8c:ed:c4:fc:e0:76:33:61:cb:fa:c9:3f:63:80:
         9f:0c:4c:b9:d9:9e:c5:7e:0f:28:ae:fc:f7:96:80:73:cf:8d:
         0e:6e:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----