Manifest

$ rpki-client -vvf rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.mft
File:                     B518B581E73CE1F6CD4FD84ADD509383346F7AC1.mft (raw, json)
Hash identifier:          lQT3g6eVlvWe3/aR00vyEk5sDwwzhUndjN9lKzOD09Q=
Subject key identifier:   AA:B3:B5:D1:F4:E5:CF:F8:B1:8C:C7:39:81:C9:54:D6:C5:98:2A:37
Authority key identifier: B5:18:B5:81:E7:3C:E1:F6:CD:4F:D8:4A:DD:50:93:83:34:6F:7A:C1
Certificate issuer:       /CN=B518B581E73CE1F6CD4FD84ADD509383346F7AC1
Certificate serial:       2E329E83F0A32272AAFB4734AAF27BC215F86838
Authority info access:    rsync://dev.tw/rpki/August/3/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.cer
Subject info access:      rsync://rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.mft
Manifest number:          03F4
Signing time:             Sat 20 Apr 2024 13:20:41 +0000
Manifest this update:     Sat 20 Apr 2024 13:15:41 +0000
Manifest next update:     Sun 21 Apr 2024 13:39:41 +0000
Files and hashes:         1: B518B581E73CE1F6CD4FD84ADD509383346F7AC1.crl (hash: yTO+WSk+XFrEDXt1yC4tCuWmEW3SBCk73Q69qT68R8A=)
                          2: AS57481.asa (hash: VzBq8CoT6jD0CGhLDKHG3kJR5aicdW5j5lHr38CCmfM=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.crl
                          rsync://rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.mft
                          rsync://dev.tw/rpki/August/3/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.cer
                          rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl
                          rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 03:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:32:9e:83:f0:a3:22:72:aa:fb:47:34:aa:f2:7b:c2:15:f8:68:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B518B581E73CE1F6CD4FD84ADD509383346F7AC1
        Validity
            Not Before: Apr 20 13:15:41 2024 GMT
            Not After : Apr 21 13:39:41 2024 GMT
        Subject: CN=AAB3B5D1F4E5CFF8B18CC73981C954D6C5982A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:24:7e:84:61:77:7b:42:44:15:d9:d4:eb:bc:
                    c7:70:42:f8:ad:d2:7c:e2:c1:0a:2d:b8:1d:df:95:
                    79:15:79:e3:0d:b6:f7:4e:ac:3e:66:0d:2e:68:02:
                    ef:fe:d6:f7:f3:c5:f0:0d:b2:f9:f7:87:76:6e:0f:
                    7b:31:f4:bf:6e:24:09:bb:a1:d8:a9:c6:39:62:dd:
                    45:26:9b:ea:69:2f:20:1e:d0:af:cc:60:e7:1f:1a:
                    f1:23:0f:90:16:a5:fe:95:94:e5:38:c9:ea:32:53:
                    3f:bf:bd:bd:91:63:2a:bd:29:43:6c:a5:a0:04:4e:
                    b4:01:c7:c6:b4:ea:47:4a:f6:fa:09:6a:de:19:20:
                    95:ec:3b:66:c3:f5:a3:44:f0:21:53:db:b0:f8:83:
                    7f:d0:e0:57:19:59:98:7d:dd:44:12:21:17:0d:1d:
                    15:32:67:b3:e4:ef:16:ed:c1:27:3b:b8:fe:9c:6d:
                    2b:8e:c6:48:0f:2a:3b:d6:98:d0:47:d8:83:2f:b7:
                    e1:fa:bf:9a:e1:13:d3:6a:1c:7b:79:e7:0e:f7:68:
                    79:f6:66:6d:d3:ff:a5:0f:c0:f0:1f:e7:29:bd:13:
                    d9:77:cb:1a:c7:7c:95:15:6e:9d:c0:7e:f0:cc:e1:
                    40:b4:86:df:6a:83:07:da:6d:ef:7a:6b:9c:c6:5b:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B3:B5:D1:F4:E5:CF:F8:B1:8C:C7:39:81:C9:54:D6:C5:98:2A:37
            X509v3 Authority Key Identifier:
                keyid:B5:18:B5:81:E7:3C:E1:F6:CD:4F:D8:4A:DD:50:93:83:34:6F:7A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/3/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:71:3a:bf:68:ef:d7:42:d0:f5:9e:b4:f4:4b:d3:d9:ae:06:
         cc:97:44:59:4c:80:e1:4b:26:ac:81:b8:e4:c6:97:73:2d:dd:
         e7:82:b7:9a:1e:d2:06:63:7e:f4:56:9b:1f:88:8e:be:c5:66:
         7b:5f:e4:c2:07:c1:17:a2:c9:64:42:95:12:95:21:d2:60:5e:
         ab:a6:4c:43:13:68:08:92:17:5c:77:88:7c:71:01:69:df:15:
         a3:1d:e8:f7:bd:ec:97:58:fe:3c:31:71:a3:5a:a7:19:55:5a:
         ae:a8:8f:2d:64:f6:36:24:4a:96:4a:40:a9:47:aa:6a:27:0a:
         42:aa:94:c7:b1:d9:15:46:b6:31:ac:bf:50:1b:87:05:3b:b0:
         7d:d8:6c:e3:26:7b:9e:26:14:07:57:8f:71:d1:b8:7e:af:1a:
         19:b1:04:bd:dc:25:e1:3a:10:f5:aa:ae:33:80:27:ce:56:af:
         0e:83:6c:68:f6:5e:21:77:ea:e3:0f:53:b4:c5:02:e9:86:84:
         63:05:39:7a:a6:c5:d8:cc:78:7c:09:80:05:73:b4:b8:5e:cc:
         d5:61:1d:3b:52:5e:ea:20:a1:95:34:19:43:7a:ed:9f:40:6b:
         e0:92:a1:89:94:5d:e2:60:0a:4e:b0:b1:99:0f:c7:83:e6:ed:
         58:a6:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 13:45:13 2024 by rpki-client on console-fra.rpki-client.org