Manifest

$ rpki-client -vvf rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
File:                     AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft (raw, json)
Hash identifier:          EtcHagdvJusEzEcOaShzKQdT5MRx7wPMMyTK08T62DE=
Subject key identifier:   96:68:A1:4E:E0:1D:D2:3F:4A:AE:CF:42:57:2D:E9:F8:4E:1A:31:8F
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       3C6A2396ABFCA7508420587AE3192A6CF3A3F93B
Authority info access:    rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
Manifest number:          0409
Signing time:             Thu 25 Apr 2024 19:27:07 +0000
Manifest this update:     Thu 25 Apr 2024 19:22:07 +0000
Manifest next update:     Fri 26 Apr 2024 21:35:07 +0000
Files and hashes:         1: 326131333a633030373a383730303a3a2f34302d3438203d3e20323032313531.roa (hash: 5c73SlMSGkuFkrVUYCtis5enmrQ8Sft8aZQZ5Tz48OI=)
                          2: 326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa (hash: F2KMKRYTZW8VQv0CDWFKJD8wFn8BDVibVW458yP8ses=)
                          3: 326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa (hash: JoOaNzjZj+e8meSBgJZ8rKVK4wITbGgwU7ifJn7qaaM=)
                          4: 326131333a633030373a383031373a3a2f34382d3438203d3e20313939313736.roa (hash: EaFzF8lrKBdIrcgaHhP+juxLgCk3lK8vlOLMSlgYO4g=)
                          5: AS51818.asa (hash: 6col/9GeyzBgYSqnc0Job2AIvTTY9JCtvOZbRbMXdPU=)
                          6: 326131333a633030373a383130303a3a2f34302d3438203d3e20323135323332.roa (hash: HBFjL9ODEqfwz8m4S8DWBXJ170pYaKsJEvNzhfx6LGE=)
                          7: 326131333a633030373a383430303a3a2f34302d3438203d3e20323135383535.roa (hash: k3DAICRNG4L8ICdD530CheDJJDMW9A/RYUSZEppXTIA=)
                          8: 326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa (hash: BhsDjAG5BT+s2/eUolZwh735fA5SJ/uMeze1CAQtmsU=)
                          9: AS59486.asa (hash: ZYa5D0KYXncTK/3ORJE+N2xlum72jDy11uyZTbNrbhc=)
                          10: 326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa (hash: ISzPUFI1xjPaDo/BMrkwegvcxx3VywINY6SubcJHFUM=)
                          11: 326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa (hash: K6YuOaJOJV88mh6PpGWst8TLus+pbLLL5FnZ4MDL7+4=)
                          12: 326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa (hash: mrQqyvWG+EkvY6JMQ1yluX3o0it9LH1g2xX/aUwi8Rc=)
                          13: AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl (hash: QOypvVxVQXLYdWUqcbAnC3NYJ5vNQlFPqf0ChBx2z9E=)
                          14: 326131333a633030373a383630303a3a2f34302d3438203d3e20323039303235.roa (hash: eg78u0RxfITGDXXTAWC5NoCjIwIAt0/QY+NFdWApTHU=)
                          15: 326131333a633030373a393030303a3a2f34302d3438203d3e20323135323632.roa (hash: v0+u+j1yCAVsdVPWNArr9gMstXicayDRBrny8v2Fvzk=)
                          16: B05B9A671551176C23DA01A5FA4056943F58AA56.cer (hash: OvYUnmEkZbVFl02cBrLwVZkdTTzl85CDFMXefJtvWFw=)
                          17: 326131333a633030373a383230303a3a2f34302d3438203d3e20313939303434.roa (hash: XhzQnP/gk58quV8ZrzVnctcxqMGmWdqzIgJcU6mCosI=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
                          rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
                          rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6a:23:96:ab:fc:a7:50:84:20:58:7a:e3:19:2a:6c:f3:a3:f9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 25 19:22:07 2024 GMT
            Not After : Apr 26 21:35:07 2024 GMT
        Subject: CN=9668A14EE01DD23F4AAECF42572DE9F84E1A318F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:1a:b1:68:8b:8d:1e:4a:05:b6:da:ce:65:
                    6b:8f:56:60:ec:47:89:03:3e:56:20:85:de:27:a0:
                    ce:0c:7d:56:32:d2:20:71:76:98:5a:01:55:45:02:
                    de:df:ae:48:2e:4c:43:1d:1e:80:97:76:6e:92:e8:
                    7a:6c:4a:3a:99:5f:10:a7:7e:70:d7:12:4d:ef:65:
                    ed:d0:70:93:cf:70:5f:43:ab:4d:8c:83:20:8d:f6:
                    58:a7:0a:74:51:85:64:f5:6a:40:71:cb:12:25:50:
                    3d:28:92:60:a8:1e:34:cb:4b:a4:b1:73:a8:28:76:
                    3d:3f:6e:92:4a:e2:bc:37:96:62:53:61:cd:24:4b:
                    8e:a8:2f:54:e2:70:c5:14:54:b0:78:81:fe:75:7c:
                    ed:97:07:17:88:98:a2:76:33:7d:b6:60:9a:7e:b8:
                    b9:55:c8:67:b1:04:37:79:c5:b4:f0:45:bd:f6:15:
                    1b:14:e8:1f:06:60:ab:79:5d:55:e8:e4:a7:cb:71:
                    31:25:e7:28:99:f8:51:4c:ed:de:ec:00:e4:0c:ef:
                    29:67:c3:0c:42:02:45:6d:c5:58:92:9c:b9:7d:80:
                    ca:9d:52:3d:d1:a4:18:6d:c6:96:c3:0b:81:c5:26:
                    8b:37:03:3e:b4:52:e2:7b:40:5e:f9:ab:86:b5:5d:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:68:A1:4E:E0:1D:D2:3F:4A:AE:CF:42:57:2D:E9:F8:4E:1A:31:8F
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:b2:72:0c:56:cf:95:80:cf:07:7a:a4:c1:43:eb:16:ab:
         e8:30:40:d7:e2:70:71:18:ad:3c:b4:20:5f:43:96:18:27:f2:
         5b:e4:06:ab:5f:1a:8c:9a:6a:8a:4f:de:ce:e4:e4:5b:7a:47:
         0b:15:54:c2:0d:4a:3e:5d:61:59:2d:51:e2:5f:32:cd:08:0e:
         6e:9b:90:cf:ec:36:50:d7:9c:a1:d1:f9:05:32:90:fa:ed:7f:
         38:36:20:63:0e:60:f2:21:d7:3f:db:07:cd:46:e9:06:00:de:
         9c:a5:da:83:d4:f8:d1:f5:b7:bb:6d:cc:3a:51:3b:a3:16:dc:
         39:0e:23:98:e4:5d:a7:60:58:6d:32:91:53:c7:b9:7f:75:b4:
         bb:5a:4b:4f:3c:8c:c0:45:70:17:4c:7a:9a:19:aa:a9:76:45:
         7f:cb:12:36:c6:7f:17:eb:1b:23:30:b7:53:30:cd:56:3e:45:
         78:90:14:ab:da:ad:75:04:a0:25:e9:86:49:aa:74:aa:5c:86:
         ff:5c:4a:45:b5:42:35:ad:59:10:e4:d3:e4:de:41:fc:35:2f:
         20:80:cd:30:9a:f2:52:51:bd:4e:b5:d6:a8:8e:d1:b8:ba:57:
         5c:9e:2f:d3:f3:be:50:cb:93:28:d3:b1:08:cc:ab:11:62:40:
         1a:3d:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:07 2024 by rpki-client on console-fra.rpki-client.org