Manifest

$ rpki-client -vvf rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
File:                     3FF5D408DA7870E6667792E8F8613A14C6562654.mft (raw, json)
Hash identifier:          92HD3uuV33AIyZYE4Jj77trpiLC5CxCce2eGRwCk7+8=
Subject key identifier:   E0:67:DD:65:19:A6:FA:26:DC:A9:DC:4F:98:13:7B:E6:34:5B:BC:29
Authority key identifier: 3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54
Certificate issuer:       /CN=3FF5D408DA7870E6667792E8F8613A14C6562654
Certificate serial:       57F522F375A29C259B30073AC7C20B8A27A64B40
Authority info access:    rsync://dev.tw/rpki/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer
Subject info access:      rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
Manifest number:          03EC
Signing time:             Wed 17 Apr 2024 08:40:11 +0000
Manifest this update:     Wed 17 Apr 2024 08:35:11 +0000
Manifest next update:     Thu 18 Apr 2024 11:49:11 +0000
Files and hashes:         1: AS49867.asa (hash: Uyn2PMUOiTUlufM+tur76Zocs+n0EbKQOfOAPIdt6wc=)
                          2: 3FF5D408DA7870E6667792E8F8613A14C6562654.crl (hash: n31A1P4C+9PcOPW8Wj20rO9UHzFaZxMIYxAs9pU/C8Q=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.crl
                          rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
                          rsync://dev.tw/rpki/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer
                          rsync://dev.tw/rpki/August/10/1D7108A12E3339EA0B0237F0AC544AEAEB6BDAD3.crl
                          rsync://dev.tw/rpki/August/10/1D7108A12E3339EA0B0237F0AC544AEAEB6BDAD3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HXEIoS4zOeoLAjfwrFRK6utr2tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Apr 2024 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f5:22:f3:75:a2:9c:25:9b:30:07:3a:c7:c2:0b:8a:27:a6:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF5D408DA7870E6667792E8F8613A14C6562654
        Validity
            Not Before: Apr 17 08:35:11 2024 GMT
            Not After : Apr 18 11:49:11 2024 GMT
        Subject: CN=E067DD6519A6FA26DCA9DC4F98137BE6345BBC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:54:26:05:8c:89:59:ce:96:03:44:2b:be:62:
                    1c:be:e7:e9:60:e9:62:2b:ea:c0:9f:be:49:01:5e:
                    b1:f2:92:a4:99:a3:d1:e2:60:ac:92:35:12:c7:7a:
                    71:a8:f8:b5:6f:d7:b2:df:10:b4:85:08:ac:c5:19:
                    8d:2d:b5:3a:6d:fc:c0:db:dc:7c:96:e9:d0:75:4d:
                    ae:6b:b0:2e:4f:98:2c:70:f9:05:90:1c:84:07:c9:
                    0c:f8:36:7d:36:67:18:ed:90:1f:98:16:07:3e:02:
                    91:24:68:50:d9:ea:a3:0c:6c:1e:28:bc:cc:ee:4d:
                    3e:e3:37:f9:f0:4d:14:8b:1e:58:10:0c:06:4d:56:
                    ee:14:52:3c:f6:83:f6:b0:f9:bb:a3:f3:c6:ef:f4:
                    58:9e:e5:20:cc:d5:2e:18:61:c0:69:45:ed:e5:8d:
                    93:83:78:9f:ff:6c:ef:71:b1:46:c1:e3:58:2d:ac:
                    41:bd:6a:3b:61:13:6e:92:f0:de:44:40:e9:60:fd:
                    46:7d:e1:87:12:42:67:a6:1e:c2:31:78:8a:08:e3:
                    42:f2:82:af:64:5f:59:ca:23:af:87:09:58:96:d0:
                    84:d8:4b:ae:cc:aa:64:24:e7:9e:6f:e4:bf:03:57:
                    2c:ee:f0:7a:13:f2:cf:38:cb:70:41:2d:db:81:dc:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:67:DD:65:19:A6:FA:26:DC:A9:DC:4F:98:13:7B:E6:34:5B:BC:29
            X509v3 Authority Key Identifier:
                keyid:3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6c:1e:8c:16:44:e7:95:47:a6:8d:47:24:39:5f:f9:c1:df:
         54:d4:2e:b8:8e:8b:48:be:80:c5:ba:92:45:75:2d:20:c5:b3:
         b4:98:d6:b9:92:d7:d4:32:ef:91:32:b9:53:16:16:f5:82:83:
         4e:00:a7:0e:18:44:bf:1c:2f:2b:ed:10:f4:12:66:30:e9:f5:
         63:70:bc:5b:0f:40:b8:bb:7f:b9:c0:ce:48:0b:2e:f5:5d:31:
         75:3f:99:16:79:9d:52:e8:c0:df:b8:d7:9f:52:33:6a:a4:28:
         f1:ac:78:cc:9d:b4:8d:46:34:7d:fb:05:fb:84:41:89:12:1f:
         17:53:52:90:44:78:c3:8f:e9:d9:fa:1d:26:7b:74:42:97:5d:
         d4:d7:ec:b9:7e:76:61:dd:8e:6b:ca:0d:84:87:43:39:01:6a:
         d0:4a:aa:70:a0:7e:b3:54:61:fc:ca:b9:8c:d8:d7:52:db:03:
         d9:02:de:0d:fc:84:e6:e8:5d:de:0d:90:b7:f1:e1:72:fe:90:
         89:37:2a:d9:4f:b8:35:7e:ab:c4:35:99:d0:a0:40:22:9b:01:
         2a:62:30:ba:81:7d:c2:d5:96:65:cf:c7:9a:cf:cd:21:6b:07:
         59:9a:ca:c3:86:5b:2d:fd:8b:22:1a:2e:04:ef:23:95:06:8a:
         75:7d:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----