Manifest

$ rpki-client -vvf rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
File:                     9788ACA0CB104D300847BED012FAF8E3269E8A01.mft (raw, json)
Hash identifier:          iuIkPqy8a4xO5E3JmpwJ8geQA5I+6XujHssuenaxN3I=
Subject key identifier:   65:15:47:AF:82:9A:E2:91:99:57:69:5C:93:E2:8F:96:29:76:35:CD
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Certificate issuer:       /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial:       3EB30F525B7A6104AFDE19C6603E13C5ECB0B476
Authority info access:    rsync://dev.tw/rpki/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access:      rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
Manifest number:          0329
Signing time:             Thu 21 Nov 2024 23:51:06 +0000
Manifest this update:     Thu 21 Nov 2024 23:46:06 +0000
Manifest next update:     Sat 23 Nov 2024 01:51:06 +0000
Files and hashes:         1: 326131323a646434373a646630303a3a2f34342d3434203d3e20323030383739.roa (hash: KVYDkwczvGxWcScRYpzQNd8/2VSEf+YA9t655/zRTds=)
                          2: 326131323a646434373a336530313a3a2f34382d3438203d3e20313939363736.roa (hash: Mx4gEtDkz+Jj82Ih+Qzf8gLip+YL0eQ+19sspWT8P/w=)
                          3: 9788ACA0CB104D300847BED012FAF8E3269E8A01.crl (hash: XpICSg/ERhQ0Jr7/5ZtNFUhT+BtqDPFrll0sMNwCW5U=)
                          4: 326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa (hash: 51wmQTZN48X8QVofV/YfXyz647AWpZf7JmeSjSRWzUo=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl
                          rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
                          rsync://dev.tw/rpki/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
                          rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
                          rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
                          rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b3:0f:52:5b:7a:61:04:af:de:19:c6:60:3e:13:c5:ec:b0:b4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
        Validity
            Not Before: Nov 21 23:46:06 2024 GMT
            Not After : Nov 23 01:51:06 2024 GMT
        Subject: CN=651547AF829AE2919957695C93E28F96297635CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:5d:54:95:51:18:4e:34:d1:2c:f7:50:f6:
                    8e:1d:05:8b:a3:69:cb:06:be:f1:15:67:b9:5c:b0:
                    b6:f2:c3:2c:13:ca:aa:26:c0:ec:4b:1d:93:4b:b9:
                    d3:32:76:1e:be:b3:f7:8d:a9:2a:70:31:f8:c3:a8:
                    9f:31:d1:23:24:f9:b8:59:ce:33:77:4a:3a:f9:62:
                    0e:e2:f4:82:30:af:c5:1a:39:bc:16:33:59:ea:12:
                    90:15:6e:e0:5b:d5:d2:03:3c:2b:5e:8a:01:ca:4d:
                    3e:8e:f6:d5:32:7c:1d:3b:22:f6:76:30:ad:f4:00:
                    b4:ae:1f:d2:f6:a6:67:4f:37:36:c7:c2:18:bc:68:
                    29:9a:a9:14:c8:fd:f2:5f:05:8d:2c:a1:58:61:3d:
                    e2:fa:71:9b:c9:f3:f1:ae:d2:39:c3:14:40:af:f7:
                    8e:04:a7:6c:be:fa:94:6a:cf:ca:67:e9:0d:3a:64:
                    8f:6b:3d:ad:50:6d:31:f5:e2:0e:82:0f:cc:65:3d:
                    06:a1:bb:c8:2a:bd:33:2f:f3:2a:9b:a1:68:b3:7c:
                    ad:1c:12:c5:5b:1e:88:e6:73:82:92:84:c5:86:50:
                    a6:bb:c4:dd:1d:cb:68:fb:a3:e8:6a:9d:2f:4e:5b:
                    1c:9c:07:1b:ff:cb:4b:29:de:9f:e8:fb:19:98:d3:
                    3d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:15:47:AF:82:9A:E2:91:99:57:69:5C:93:E2:8F:96:29:76:35:CD
            X509v3 Authority Key Identifier:
                keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:22:f8:f9:a2:01:fd:08:73:98:3d:a2:ab:65:4f:5f:a9:ce:
         74:38:90:3f:8b:34:05:2b:2c:33:40:b4:ed:91:69:f3:12:9b:
         9a:7b:4c:fd:27:e9:ae:9a:e9:b8:18:55:9f:6d:a0:71:8f:a5:
         cc:02:99:23:01:22:40:72:6b:a0:34:30:94:58:a4:ee:67:62:
         c7:9f:9d:9c:c9:bb:a8:6e:8a:d3:9e:36:d7:55:e7:52:6e:fd:
         5e:d3:11:b3:a5:5c:2b:4c:30:02:be:ca:db:a9:dd:f9:00:4b:
         2c:ea:05:7b:ac:4a:fd:fe:5a:ad:41:96:54:10:2f:5b:2c:28:
         36:e7:f6:e3:c0:78:33:be:7e:67:bf:38:4b:b4:7e:c4:ad:71:
         a1:1e:dd:f5:36:ac:fb:db:3a:ea:b1:21:8f:33:0a:8e:6c:fd:
         88:bb:a0:fb:ae:5d:6e:03:38:6a:1d:df:97:b4:fc:b7:d6:a1:
         22:fc:c7:3b:c4:51:65:68:0c:46:a7:c9:88:35:d2:ae:8a:fc:
         95:6b:b3:39:39:7d:7f:aa:d3:79:40:e1:bb:8e:32:9c:b3:c7:
         ef:f0:24:6b:d4:06:cf:d4:41:95:7e:0d:68:69:60:f6:8a:22:
         0d:39:da:4c:52:d7:6f:60:5c:56:5c:a2:d4:d0:7e:e9:cb:40:
         1f:f2:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:03:05 2024 by rpki-client on console-ams.rpki-client.org