Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft
File:                     52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft (raw, json)
Hash identifier:          BAqVUIkZlbA3bT2/D69RV2PZqtXZGkwPQ/cde47bvi8=
Subject key identifier:   FD:78:5E:E0:F3:35:AC:A9:53:2E:2E:54:20:5B:B8:0F:56:DA:52:C3
Authority key identifier: 52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28
Certificate issuer:       /CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228
Certificate serial:       0EC3E5956584D2FCE31EA883575F29CB85E3B3FB
Authority info access:    rsync://dev.tw/rpki/AS945/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft
Manifest number:          034A
Signing time:             Mon 25 Nov 2024 00:17:29 +0000
Manifest this update:     Mon 25 Nov 2024 00:12:29 +0000
Manifest next update:     Tue 26 Nov 2024 04:05:29 +0000
Files and hashes:         1: 52E8DFFC6F676D33CB89DE115CEEF286B5017228.crl (hash: ZZ0Fr3WVsVUvOeLfEfBQiiMl4kN0sn1ilc0TekdjMoA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c3:e5:95:65:84:d2:fc:e3:1e:a8:83:57:5f:29:cb:85:e3:b3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228
        Validity
            Not Before: Nov 25 00:12:29 2024 GMT
            Not After : Nov 26 04:05:29 2024 GMT
        Subject: CN=FD785EE0F335ACA9532E2E54205BB80F56DA52C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:ce:22:0c:c6:da:67:f7:6c:70:5b:cd:65:
                    6b:c3:34:8e:8e:3d:6a:f4:5e:01:d6:b7:87:e4:09:
                    45:f2:a8:50:e3:4c:96:a8:76:c8:c5:2c:dc:5e:74:
                    3d:95:86:1e:71:51:c8:6d:7d:36:3e:20:a6:58:6a:
                    a8:fc:a9:53:6e:c2:27:86:07:1d:51:41:0a:b8:84:
                    e0:e5:35:c9:ed:29:64:1c:c0:19:ff:e4:db:ee:a9:
                    3d:19:72:6d:cc:ab:19:b3:97:04:47:f7:af:a7:57:
                    e6:4a:69:38:1f:fc:39:d7:60:f2:5a:01:99:33:2f:
                    3c:71:23:cb:b6:ac:f4:b1:58:e8:75:9c:ba:d2:cd:
                    75:75:2c:81:8b:89:c8:6f:05:ac:67:84:17:30:ec:
                    d6:b3:60:5d:6b:d0:71:6f:78:eb:39:db:be:b0:70:
                    ac:54:77:1b:1b:d7:21:b9:ce:2c:39:d7:c5:ca:8f:
                    ac:fd:c7:86:57:ef:83:48:91:f2:a7:23:bb:8c:b6:
                    ca:17:df:04:d4:ba:b9:4d:e9:19:f4:f9:96:b3:11:
                    97:45:3b:60:a1:76:53:1b:84:4e:46:c9:5b:7f:a8:
                    7c:0f:e3:31:5c:56:84:6f:64:78:ef:33:8d:d7:a9:
                    e1:f6:da:e2:e4:84:bc:75:7b:f6:5a:8b:3a:7f:cf:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:78:5E:E0:F3:35:AC:A9:53:2E:2E:54:20:5B:B8:0F:56:DA:52:C3
            X509v3 Authority Key Identifier:
                keyid:52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/AS945/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:00:bc:29:cf:68:98:c6:69:10:21:ea:21:83:9e:15:b4:dc:
         5b:8d:ac:b5:32:fe:35:67:83:e4:e6:5d:3a:73:de:99:86:ad:
         20:48:e4:fe:9e:59:8d:e6:61:1e:c0:10:b3:25:e6:72:a4:69:
         42:c5:77:82:10:38:e2:42:eb:fe:a1:69:82:91:51:e6:6c:f8:
         38:ab:c5:1a:5f:3c:18:77:27:39:26:26:b1:45:95:42:28:a4:
         f0:e1:51:ad:d4:c1:cc:1f:c1:2c:7a:d6:c9:e0:55:cf:a7:16:
         9e:09:da:26:1d:1d:a5:3c:74:28:21:83:cf:33:a9:4b:15:a5:
         f7:e8:2a:31:7a:56:13:07:42:c0:8c:34:ec:a8:57:a1:d9:ec:
         a0:0d:cb:c8:cc:c4:e7:6d:b4:64:54:8f:a1:81:c1:73:fc:5e:
         20:c1:03:bb:2b:30:b0:e9:23:69:11:6a:d3:f9:a7:7b:a0:91:
         fb:d9:bf:09:a5:f8:ba:26:57:39:f7:f0:d5:c2:3f:30:4a:aa:
         27:34:1e:06:2d:3e:16:47:83:71:4b:01:42:c5:8a:53:73:ce:
         84:cd:ec:b1:33:82:b9:d1:25:d4:ff:1e:71:cb:ee:32:3a:1e:
         e8:06:1e:c7:23:f3:90:27:31:6b:2a:af:f7:1b:f5:82:f3:2d:
         08:b4:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----