Manifest

$ rpki-client -vvf rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
File:                     A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft (raw, json)
Hash identifier:          l99d3IoAqk0mNAmi1/dkC3YCl46zQV6zRkrXE87kZ64=
Subject key identifier:   C9:FB:EA:88:70:0D:81:07:82:0C:0E:0F:5E:36:92:CE:FE:D0:82:0B
Authority key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Certificate issuer:       /CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Certificate serial:       57D2AFC7A9359E8AA5C755BF45DB8598E9FEDB02
Authority info access:    rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject info access:      rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
Manifest number:          020E
Signing time:             Sun 05 May 2024 09:12:03 +0000
Manifest this update:     Sun 05 May 2024 09:07:03 +0000
Manifest next update:     Mon 06 May 2024 10:15:03 +0000
Files and hashes:         1: 326131323a646434373a643030303a3a2f34302d3438203d3e20323030353739.roa (hash: 2+FstKI96TqE7pUf6uo3GhnAUjflXzLpwsjYCxWfgy4=)
                          2: 326131323a646434373a383730303a3a2f34302d3438203d3e20323030353739.roa (hash: bA06CE3m+H4aHFX2WXenKHmw/SzpPD+u6iEecnkhEcQ=)
                          3: 326131323a646434373a643030303a3a2f34302d3438203d3e20323136343132.roa (hash: xXy4yriBwbACxG2/9b2YMJO0L/gJH73Wl2NrPTm9iuQ=)
                          4: 326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa (hash: MdG006U9XMVs0Es14dboXJTTa9RiLlXJi+CaxjNbadE=)
                          5: A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl (hash: dtQkngU7RCbP1bG0iXOJpWgNAnNX2ZGYlxzkU4RqBYA=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl
                          rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
                          rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d2:af:c7:a9:35:9e:8a:a5:c7:55:bf:45:db:85:98:e9:fe:db:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
        Validity
            Not Before: May  5 09:07:03 2024 GMT
            Not After : May  6 10:15:03 2024 GMT
        Subject: CN=C9FBEA88700D8107820C0E0F5E3692CEFED0820B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:b2:15:35:ab:3b:89:b6:1e:af:e1:7c:36:
                    58:98:91:ec:ec:7b:4d:ff:29:4a:30:0b:32:0a:18:
                    7e:7e:f8:07:ea:0e:55:bb:c7:13:21:6b:be:43:d1:
                    7c:4f:ce:4c:01:52:5b:72:f1:8e:7a:28:4e:85:58:
                    47:17:da:21:f4:a4:48:f9:2d:72:35:31:6a:96:1a:
                    b8:1f:12:be:b8:82:16:5f:0a:a2:52:85:98:3c:74:
                    41:98:cc:eb:90:bb:89:df:33:44:c1:8d:1a:8c:9e:
                    8f:46:1e:57:bc:7c:13:b3:dc:18:b1:0c:3e:e2:22:
                    48:68:44:13:01:bf:7b:a7:30:9d:a8:8a:23:c1:35:
                    77:02:66:5a:6d:c9:26:40:89:99:89:01:c8:f9:ac:
                    98:0a:67:4e:f9:9c:cd:e1:82:38:0a:00:b2:c3:59:
                    03:08:0b:5c:29:f2:35:0e:a5:98:fb:e3:d3:a0:b5:
                    de:ab:11:fb:ce:28:9b:2c:eb:a3:5f:2a:e1:7b:cc:
                    f7:4d:1e:02:39:01:23:b8:d0:1f:e3:14:02:94:10:
                    7f:ea:b3:f6:db:20:47:c2:fd:4d:9b:d2:ea:b0:8f:
                    9a:25:d4:03:b9:28:6d:58:29:f3:a6:35:68:f9:04:
                    6f:63:a2:b1:1f:13:61:b9:ed:7a:7e:61:82:40:13:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FB:EA:88:70:0D:81:07:82:0C:0E:0F:5E:36:92:CE:FE:D0:82:0B
            X509v3 Authority Key Identifier:
                keyid:A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:ff:d5:3a:d7:d6:77:0b:c5:c8:1c:a7:f1:a9:b4:80:f5:
         56:c4:38:1a:51:99:bb:4c:e8:aa:c0:58:ce:11:93:7d:92:08:
         2a:83:13:bc:00:6e:9c:d8:2c:5c:3d:11:76:e9:72:30:2c:29:
         44:89:a3:ef:91:75:d0:60:f4:ad:54:e8:2e:5f:b9:59:7b:28:
         6d:e6:6f:08:0d:e8:1f:5d:87:df:45:51:e7:54:2d:5d:b4:58:
         95:aa:62:08:8a:a2:d3:36:e3:90:2f:ad:dc:da:16:79:25:14:
         d2:7e:24:fd:81:b7:8b:54:b5:1d:3f:68:4f:41:a4:e8:24:85:
         32:40:5f:f3:ea:67:3e:42:f3:15:9e:2c:6a:61:24:56:ed:43:
         06:e0:39:09:a6:b9:8f:8c:e1:a7:a9:b7:0d:a1:13:96:ff:dc:
         aa:5c:fa:53:b8:84:c2:f0:80:b4:96:ef:70:a7:ed:7d:0c:af:
         9c:93:a8:1e:af:6b:47:35:8c:17:d1:6c:7a:66:ad:dc:09:22:
         67:94:07:c7:b5:d6:a6:ca:cd:ef:dd:ad:96:64:37:13:46:79:
         3b:50:dc:04:10:3a:d7:0f:9c:80:e8:5d:8e:9e:38:f3:a1:7d:
         f0:ab:14:a8:cc:9d:ca:db:67:30:ce:aa:ea:d0:a8:92:47:14:
         b0:ea:f2:11
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUV9Kvx6k1noqlx1W/RduFmOn+2wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEQkRERTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAz
Qzg2QTEzNjAeFw0yNDA1MDUwOTA3MDNaFw0yNDA1MDYxMDE1MDNaMDMxMTAvBgNV
BAMTKEM5RkJFQTg4NzAwRDgxMDc4MjBDMEUwRjVFMzY5MkNFRkVEMDgyMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZrIVNas7ibYer+F8NliYkezs
e03/KUowCzIKGH5++AfqDlW7xxMha75D0XxPzkwBUlty8Y56KE6FWEcX2iH0pEj5
LXI1MWqWGrgfEr64ghZfCqJShZg8dEGYzOuQu4nfM0TBjRqMno9GHle8fBOz3Bix
DD7iIkhoRBMBv3unMJ2oiiPBNXcCZlptySZAiZmJAcj5rJgKZ075nM3hgjgKALLD
WQMIC1wp8jUOpZj749Ogtd6rEfvOKJss66NfKuF7zPdNHgI5ASO40B/jFAKUEH/q
s/bbIEfC/U2b0uqwj5ol1AO5KG1YKfOmNWj5BG9jorEfE2G57Xp+YYJAE42TAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUyfvqiHANgQeCDA4PXjaSzv7QggswHwYDVR0j
BBgwFoAUp9vd5Fub7ZwXyyDyrinscDyGoTYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL1JpZmZpLzEvQTdEQkRE
RTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAzQzg2QTEzNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8x
L0E3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFFMjlFQzcwM0M4NkExMzYuY2VyMGUG
CCsGAQUFBwELBFkwVzBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
UmlmZmkvMS9BN0RCRERFNDVCOUJFRDlDMTdDQjIwRjJBRTI5RUM3MDNDODZBMTM2
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAXqX/1TrX1ncLxcgcp/GptID1VsQ4GlGZu0zoqsBYzhGTfZII
KoMTvABunNgsXD0RdulyMCwpRImj75F10GD0rVToLl+5WXsobeZvCA3oH12H30VR
51QtXbRYlapiCIqi0zbjkC+t3NoWeSUU0n4k/YG3i1S1HT9oT0Gk6CSFMkBf8+pn
PkLzFZ4samEkVu1DBuA5Caa5j4zhp6m3DaETlv/cqlz6U7iEwvCAtJbvcKftfQyv
nJOoHq9rRzWMF9Fsemat3AkiZ5QHx7XWpsrN792tlmQ3E0Z5O1DcBBA61w+cgOhd
jp4486F98KsUqMydyttnMM6q6tCokkcUsOryEQ==
-----END CERTIFICATE-----
Generated at Sun May 5 09:51:31 2024 by rpki-client on console-fra.rpki-client.org