$ rpki-client -vvf rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft File: 40C513034911811188EE6887BB01091E1FE7EE0D.mft (raw, json) Hash identifier: a2/GxZg3P6d2v5iNYU6mr1kE8JTLPc8NNdh3P1Dt8Gk= Subject key identifier: 2E:83:AD:6D:7F:41:BE:15:FB:51:32:7F:E3:E4:28:35:4F:B7:0F:45 Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D Certificate serial: 3EB49DE033D0889FC2F00EF3DE2F254D47A8F04A Authority info access: rsync://dev.tw/rpki/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer Subject info access: rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft Manifest number: 0315 Signing time: Thu 21 Nov 2024 14:35:59 +0000 Manifest this update: Thu 21 Nov 2024 14:30:59 +0000 Manifest next update: Fri 22 Nov 2024 18:28:59 +0000 Files and hashes: 1: 326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa (hash: 0dHaJ4qfvE2oLUQaYskr8kN9r8soA38zu6v8jF1r9PM=) 2: 326131323a646434363a316666643a3a2f34382d3438203d3e20323135393334.roa (hash: Td8iC5CEwqqV1dohjoI/kG2vMcyAPsVvz4hRqWeM2qI=) 3: 40C513034911811188EE6887BB01091E1FE7EE0D.crl (hash: q78m51XkDeA8225Vg1u/0FwsIIwB4c2b6YvABv3Mr3E=) 4: 326131323a646434363a316666653a3a2f34382d3438203d3e20323135393933.roa (hash: CtpVlNeXSdrA8570M5mQF2LnqGXlSXt5c7AsP5l6pYY=) 5: 326131323a646434363a316666653a3a2f34382d3438203d3e20313432303436.roa (hash: YTkC1TUWpWMW5EXn8uuASIaErr9AagQnuwtK2LkXJw0=) 6: 326131323a646434363a316666663a3a2f34382d3438203d3e20323136313233.roa (hash: Z5zxT/NrxMnMkyEa5Bzu7aQMMFulEi4CY5wYm56L0Bk=) 7: 326131323a646434363a316666653a3a2f34382d3438203d3e20313939323033.roa (hash: yOf1+ZpGQsm++ET35zkoK8noSVDhIj/i53G++jOrHMs=) 8: 326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa (hash: pt5SRwa4PkVcvU2eoTtkDqYnKLiWoThHLn5lNyt/eR0=) 9: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (hash: hvb5Ot3aTm8WlXBs7WxHbXF1fqT02PIxZw93lY05zS4=) Validation: OK Signature path: rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft rsync://dev.tw/rpki/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 03:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b4:9d:e0:33:d0:88:9f:c2:f0:0e:f3:de:2f:25:4d:47:a8:f0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D Validity Not Before: Nov 21 14:30:59 2024 GMT Not After : Nov 22 18:28:59 2024 GMT Subject: CN=2E83AD6D7F41BE15FB51327FE3E428354FB70F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:32:73:dd:9a:ab:9d:5b:41:be:9e:4c:3a: c5:33:1a:21:8e:46:d6:72:d7:45:2c:d1:0e:2d:25: f7:c2:2b:d4:c2:99:12:60:e2:e5:9e:26:84:a5:fb: 95:0d:87:f3:3f:04:79:5f:a0:f5:2c:e7:61:0d:46: b8:93:2f:30:4f:7b:a1:a5:4f:22:cb:63:fa:55:89: 72:60:d3:e5:7f:74:c4:e3:e1:da:94:f5:ce:ce:bc: e4:37:96:bb:11:12:60:14:68:62:c9:70:71:d6:94: ae:80:a6:43:86:46:87:70:53:26:79:67:f5:fe:6f: 46:bf:46:43:07:e5:3c:2d:26:bd:bf:1a:95:e7:ee: 71:d0:c9:2b:f2:02:00:94:68:d3:5e:86:c7:c9:29: fd:9e:31:93:d7:21:89:b7:2d:7e:94:6a:0b:f6:b1: 4e:a5:98:83:b5:67:80:14:05:11:4b:ec:1d:12:7c: 24:2d:11:d3:03:63:cd:8b:ca:9c:75:fc:b0:6d:44: 4c:3c:e5:c1:ab:b9:7f:fd:0e:9f:13:3a:9c:dd:c4: 22:45:b6:8d:91:b3:3b:6b:50:be:e6:1a:ef:9d:de: bb:53:81:6c:f9:37:a1:33:3f:38:74:e7:5b:40:e2: c7:83:48:e4:ff:c0:fb:17:15:fb:6c:c1:ee:b3:d3: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:83:AD:6D:7F:41:BE:15:FB:51:32:7F:E3:E4:28:35:4F:B7:0F:45 X509v3 Authority Key Identifier: keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e4:39:b8:5e:73:7c:d4:bf:b1:fe:66:4f:0e:58:4e:e4:21: 73:87:f5:1e:33:3b:97:ea:d4:d5:cf:be:c8:e7:86:d3:20:15: 5c:f0:ff:fd:f1:39:b9:92:ce:58:a2:65:30:b0:46:81:80:57: f5:80:dd:c7:f5:68:08:f7:68:28:27:21:67:62:e4:c3:9f:3d: 73:93:07:e1:0e:8d:be:3b:b6:9e:a4:1b:a1:8a:96:0a:c6:c3: 54:2a:6a:23:82:85:c7:7b:28:1d:6b:9b:3b:67:f4:67:2a:2d: eb:3a:67:47:45:7a:a7:75:0b:48:66:d7:8f:73:7c:f4:81:7a: 3d:5c:22:c1:aa:09:fd:26:bd:fa:93:01:4c:c3:20:4e:11:5e: f2:b1:d6:a2:a0:ae:49:56:ae:93:48:2c:57:9c:cc:c4:f0:2c: 04:44:b3:ed:47:76:51:52:30:37:87:c4:cc:16:f4:03:6a:c5: 02:f5:3d:25:f7:58:47:fa:d1:83:e5:b2:62:e5:bc:03:d3:6f: 08:f3:bc:c9:a7:e9:3f:0f:49:dd:0d:7b:1b:2a:85:3e:31:7a: b9:1b:6c:62:e5:a1:29:c7:aa:9b:35:7b:d6:ea:d3:0a:49:a1: 40:d9:64:13:e6:b3:7d:3f:a9:9f:a8:0f:07:e1:38:d8:87:bb: c3:37:60:05 -----BEGIN CERTIFICATE----- MIIEyTCCA7GgAwIBAgIUPrSd4DPQiJ/C8A7z3i8lTUeo8EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDNTEzMDM0OTExODExMTg4RUU2ODg3QkIwMTA5MUUx RkU3RUUwRDAeFw0yNDExMjExNDMwNTlaFw0yNDExMjIxODI4NTlaMDMxMTAvBgNV BAMTKDJFODNBRDZEN0Y0MUJFMTVGQjUxMzI3RkUzRTQyODM1NEZCNzBGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rDJz3ZqrnVtBvp5MOsUzGiGO RtZy10Us0Q4tJffCK9TCmRJg4uWeJoSl+5UNh/M/BHlfoPUs52ENRriTLzBPe6Gl TyLLY/pViXJg0+V/dMTj4dqU9c7OvOQ3lrsREmAUaGLJcHHWlK6ApkOGRodwUyZ5 Z/X+b0a/RkMH5TwtJr2/GpXn7nHQySvyAgCUaNNehsfJKf2eMZPXIYm3LX6Uagv2 sU6lmIO1Z4AUBRFL7B0SfCQtEdMDY82Lypx1/LBtREw85cGruX/9Dp8TOpzdxCJF to2RsztrUL7mGu+d3rtTgWz5N6EzPzh051tA4seDSOT/wPsXFftswe6z031PAgMB AAGjggHTMIIBzzAdBgNVHQ4EFgQULoOtbX9BvhX7UTJ/4+QoNU+3D0UwHwYDVR0j BBgwFoAUQMUTA0kRgRGI7miHuwEJHh/n7g0wDgYDVR0PAQH/BAQDAgeAMFsGA1Ud HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL1NpbXBsZS8xLzQwQzUx MzAzNDkxMTgxMTE4OEVFNjg4N0JCMDEwOTFFMUZFN0VFMEQuY3JsMGQGCCsGAQUF BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9kZXYudHcvcnBraS9BUzk0NS8x LzQwQzUxMzAzNDkxMTgxMTE4OEVFNjg4N0JCMDEwOTFFMUZFN0VFMEQuY2VyMGYG CCsGAQUFBwELBFowWDBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8v U2ltcGxlLzEvNDBDNTEzMDM0OTExODExMTg4RUU2ODg3QkIwMTA5MUUxRkU3RUUw RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBADXkObhec3zUv7H+Zk8OWE7kIXOH9R4zO5fq1NXPvsjnhtMg FVzw//3xObmSzliiZTCwRoGAV/WA3cf1aAj3aCgnIWdi5MOfPXOTB+EOjb47tp6k G6GKlgrGw1QqaiOChcd7KB1rmztn9GcqLes6Z0dFeqd1C0hm149zfPSBej1cIsGq Cf0mvfqTAUzDIE4RXvKx1qKgrklWrpNILFeczMTwLAREs+1HdlFSMDeHxMwW9ANq xQL1PSX3WEf60YPlsmLlvAPTbwjzvMmn6T8PSd0NexsqhT4xerkbbGLloSnHqps1 e9bq0wpJoUDZZBPms30/qZ+oDwfhONiHu8M3YAU= -----END CERTIFICATE-----Generated at Thu Nov 21 16:34:20 2024 by rpki-client on console-ams.rpki-client.org