Manifest

$ rpki-client -vvf rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.mft
File:                     8489863A432D851EFEA043950365EE23436FCF95.mft (raw, json)
Hash identifier:          dLQ2zNjF3n6h48eYxSjAq6por34CJ3JTXvOj7POE/qk=
Subject key identifier:   52:E8:B6:3E:D4:50:7B:5F:95:D5:42:C0:B6:F9:FD:BB:AB:5B:9A:F7
Authority key identifier: 84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
Certificate issuer:       /CN=8489863A432D851EFEA043950365EE23436FCF95
Certificate serial:       3F1266C4585821A02C1C02D2F42CC9260FF943A0
Authority info access:    rsync://dev.tw/rpki/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject info access:      rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.mft
Manifest number:          045F
Signing time:             Thu 20 Jun 2024 04:16:50 +0000
Manifest this update:     Thu 20 Jun 2024 04:11:50 +0000
Manifest next update:     Fri 21 Jun 2024 04:41:50 +0000
Files and hashes:         1: 32332e3134392e3234382e302f32342d3234203d3e20323032373336.roa (hash: d5QJdzDyOwXAMWI+gIVB/VJEz4f2CujRP1hc97360vI=)
                          2: 8489863A432D851EFEA043950365EE23436FCF95.crl (hash: lFYf2bcAjuHd8To+JJc7qG80dm1y8bVH8PtsIb1SKYc=)
                          3: 323630323a666139303a3a2f33362d3336203d3e20393435.roa (hash: 5LJQ4xoRsXzHn52p3rNOKlXAHCvv5DnGmvYxuObS/1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:12:66:c4:58:58:21:a0:2c:1c:02:d2:f4:2c:c9:26:0f:f9:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8489863A432D851EFEA043950365EE23436FCF95
        Validity
            Not Before: Jun 20 04:11:50 2024 GMT
            Not After : Jun 21 04:41:50 2024 GMT
        Subject: CN=52E8B63ED4507B5F95D542C0B6F9FDBBAB5B9AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:e7:d0:4e:cc:ca:f2:c1:af:a9:e5:18:f5:
                    60:ee:90:f3:bb:54:7a:5a:f5:b5:d8:88:3a:be:1b:
                    60:b5:2b:3f:a6:d1:2b:28:cf:a3:dd:2f:5a:0c:02:
                    82:34:02:16:d4:06:bc:b0:bd:5d:c5:00:0b:52:35:
                    9c:b8:dc:77:c9:1c:36:be:e2:0a:71:ad:19:11:bf:
                    9b:78:a6:96:55:62:a5:93:3e:6b:75:53:bd:9c:21:
                    d8:5a:3f:19:e1:fd:d0:66:8b:18:71:16:4f:b3:3b:
                    98:ee:dc:43:49:6d:64:06:20:bb:11:05:4f:5c:44:
                    54:15:2b:ee:b5:f8:8b:16:51:20:60:d8:e9:d3:59:
                    27:09:df:cd:56:01:31:b0:c2:c7:1a:64:6b:2a:4d:
                    01:cf:35:bd:6d:1b:bc:60:62:0d:95:ef:ce:ad:17:
                    2c:c8:81:fb:64:cb:77:ec:46:68:53:d7:f9:2a:31:
                    61:ac:a0:55:6a:b5:34:52:de:a1:62:4a:f9:42:67:
                    7b:f3:79:fa:b3:1e:ea:d2:76:9b:2c:02:7c:e1:1f:
                    5e:62:54:05:71:2a:b1:bd:da:b0:a5:7e:85:1d:39:
                    2b:43:93:15:ab:58:70:c8:1b:1e:db:2f:c6:18:32:
                    56:37:2b:78:e5:b0:95:6c:6d:d8:3a:8a:33:36:41:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E8:B6:3E:D4:50:7B:5F:95:D5:42:C0:B6:F9:FD:BB:AB:5B:9A:F7
            X509v3 Authority Key Identifier:
                keyid:84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:1a:d3:af:9a:34:e0:50:90:14:e0:7f:47:81:9c:b5:68:
         b0:7f:57:3e:5d:90:c4:39:d8:99:6b:6c:7e:9a:55:3e:3e:1a:
         f2:dd:85:0f:e7:49:40:ce:41:f0:02:fb:bd:df:66:7e:fb:dc:
         9a:ae:cd:74:ad:7b:7d:0b:80:d7:d6:8b:84:4e:fc:ab:d0:53:
         f6:e3:bd:e0:54:81:67:45:6c:5d:01:06:8e:c1:6f:ad:a1:f8:
         a1:83:41:e4:f4:3d:14:da:6d:e0:57:3d:20:41:2a:3a:7b:a7:
         92:0f:5f:0c:51:0f:f8:be:5a:8e:a3:68:a0:e5:56:fa:47:00:
         00:8d:ae:a5:e5:c3:53:fa:82:02:0c:32:c0:76:1c:8c:a9:24:
         ac:a8:e5:37:22:4a:46:1a:d2:2e:fc:b9:16:22:d1:1c:af:86:
         97:98:9c:69:b9:21:f6:16:21:f2:fd:e4:87:49:c1:01:f5:03:
         d2:8d:93:69:0c:ab:dc:0a:5e:57:22:2a:5e:f3:6e:2d:97:aa:
         e3:9e:cc:32:7c:e4:9a:ce:27:cf:55:fc:37:a2:ed:0a:78:80:
         1c:67:e5:69:c5:44:9f:eb:77:e2:0c:52:bd:65:23:be:14:e5:
         a0:e2:a3:1c:44:e5:f5:7e:23:28:e8:78:53:15:38:36:4b:f5:
         a7:c3:13:6b
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUPxJmxFhYIaAsHALS9CzJJg/5Q6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ4OTg2M0E0MzJEODUxRUZFQTA0Mzk1MDM2NUVFMjM0
MzZGQ0Y5NTAeFw0yNDA2MjAwNDExNTBaFw0yNDA2MjEwNDQxNTBaMDMxMTAvBgNV
BAMTKDUyRThCNjNFRDQ1MDdCNUY5NUQ1NDJDMEI2RjlGREJCQUI1QjlBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZufQTszK8sGvqeUY9WDukPO7
VHpa9bXYiDq+G2C1Kz+m0Ssoz6PdL1oMAoI0AhbUBrywvV3FAAtSNZy43HfJHDa+
4gpxrRkRv5t4ppZVYqWTPmt1U72cIdhaPxnh/dBmixhxFk+zO5ju3ENJbWQGILsR
BU9cRFQVK+61+IsWUSBg2OnTWScJ381WATGwwscaZGsqTQHPNb1tG7xgYg2V786t
FyzIgftky3fsRmhT1/kqMWGsoFVqtTRS3qFiSvlCZ3vzefqzHurSdpssAnzhH15i
VAVxKrG92rClfoUdOStDkxWrWHDIGx7bL8YYMlY3K3jlsJVsbdg6ijM2QRudAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUUui2PtRQe1+V1ULAtvn9u6tbmvcwHwYDVR0j
BBgwFoAUhImGOkMthR7+oEOVA2XuI0Nvz5UwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzcvODQ4OTg2
M0E0MzJEODUxRUZFQTA0Mzk1MDM2NUVFMjM0MzZGQ0Y5NS5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC84
Lzg0ODk4NjNBNDMyRDg1MUVGRUEwNDM5NTAzNjVFRTIzNDM2RkNGOTUuY2VyMGUG
CCsGAQUFBwELBFkwVzBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvNy84NDg5ODYzQTQzMkQ4NTFFRkVBMDQzOTUwMzY1RUUyMzQzNkZDRjk1
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAhm0a06+aNOBQkBTgf0eBnLVosH9XPl2QxDnYmWtsfppVPj4a
8t2FD+dJQM5B8AL7vd9mfvvcmq7NdK17fQuA19aLhE78q9BT9uO94FSBZ0VsXQEG
jsFvraH4oYNB5PQ9FNpt4Fc9IEEqOnunkg9fDFEP+L5ajqNooOVW+kcAAI2upeXD
U/qCAgwywHYcjKkkrKjlNyJKRhrSLvy5FiLRHK+Gl5icabkh9hYh8v3kh0nBAfUD
0o2TaQyr3ApeVyIqXvNuLZeq457MMnzkms4nz1X8N6LtCniAHGflacVEn+t34gxS
vWUjvhTloOKjHETl9X4jKOh4UxU4Nkv1p8MTaw==
-----END CERTIFICATE-----