Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft
File:                     AA420917C3851913FC93E34898A294B9CA2505F2.mft (raw, json)
Hash identifier:          gkgzuIzerV/hl1XOa/0zPwL2X3KrUfAEQZ8JFT4a9SQ=
Subject key identifier:   4D:30:FB:3C:05:81:94:93:70:95:5F:31:42:01:52:CA:45:D9:7A:4A
Authority key identifier: AA:42:09:17:C3:85:19:13:FC:93:E3:48:98:A2:94:B9:CA:25:05:F2
Certificate issuer:       /CN=AA420917C3851913FC93E34898A294B9CA2505F2
Certificate serial:       4AD1CA465BA99B35D98AA3BD2D256F2164ADC986
Authority info access:    rsync://dev.tw/rpki/August/14/AA420917C3851913FC93E34898A294B9CA2505F2.cer
Subject info access:      rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft
Manifest number:          51
Signing time:             Mon 25 Nov 2024 10:06:59 +0000
Manifest this update:     Mon 25 Nov 2024 10:01:59 +0000
Manifest next update:     Tue 26 Nov 2024 13:34:59 +0000
Files and hashes:         1: AA420917C3851913FC93E34898A294B9CA2505F2.crl (hash: ll35za6hM3HtEvx4sWlUO0F4MXNu2xBLSkUCnPMG7us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d1:ca:46:5b:a9:9b:35:d9:8a:a3:bd:2d:25:6f:21:64:ad:c9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA420917C3851913FC93E34898A294B9CA2505F2
        Validity
            Not Before: Nov 25 10:01:59 2024 GMT
            Not After : Nov 26 13:34:59 2024 GMT
        Subject: CN=4D30FB3C0581949370955F31420152CA45D97A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:87:f9:ec:e3:41:ab:c8:5e:81:58:28:39:
                    d1:cc:6a:f2:ff:31:3b:a6:27:12:32:53:64:18:58:
                    1c:0c:82:4f:49:88:c5:26:5e:88:08:14:44:1e:31:
                    2c:ca:47:f0:fd:7f:cd:dd:0a:cc:95:46:f2:67:e2:
                    72:ac:73:c1:df:66:99:28:d6:66:ae:84:13:fe:f0:
                    7f:d5:32:52:ea:67:9f:0e:14:f2:ae:da:3f:33:ae:
                    11:a0:53:83:d4:d6:bb:05:7f:3e:84:88:8b:59:a6:
                    39:42:60:78:c0:cf:35:02:3a:86:40:61:68:73:d3:
                    bd:39:55:99:81:b9:23:8f:a6:2c:f2:78:06:d0:f8:
                    0c:fe:20:71:2a:e1:6d:8c:4e:cb:af:5d:a6:c6:43:
                    2a:91:a5:ee:7f:01:06:eb:93:ff:c5:d4:4d:e5:07:
                    e7:f2:2e:3e:47:af:a3:2a:4f:71:d3:b5:05:ae:c4:
                    69:f6:e8:fe:f4:4d:9a:74:46:4f:13:23:1d:71:76:
                    c1:ae:d3:48:63:a8:b2:04:c9:51:ee:d4:60:d0:39:
                    c2:2d:37:f7:02:e2:eb:ab:c3:a1:6e:25:f2:39:c1:
                    2f:cd:da:55:b3:6d:33:05:35:5e:45:ae:8e:9f:12:
                    39:f9:ae:0e:34:46:e4:c3:12:ee:63:6d:48:cc:c8:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:30:FB:3C:05:81:94:93:70:95:5F:31:42:01:52:CA:45:D9:7A:4A
            X509v3 Authority Key Identifier:
                keyid:AA:42:09:17:C3:85:19:13:FC:93:E3:48:98:A2:94:B9:CA:25:05:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/14/AA420917C3851913FC93E34898A294B9CA2505F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:89:74:37:52:9b:b5:81:5e:35:71:14:13:c4:78:dc:37:
         db:b8:43:74:bb:7e:7e:d9:52:ed:05:f6:a7:44:0c:f5:20:b1:
         e1:1e:fb:9a:e3:51:23:c5:2c:14:6d:f3:d3:02:20:89:68:87:
         2f:ee:30:51:30:48:c7:69:89:86:56:0b:aa:d6:98:c0:73:b7:
         e7:ed:0f:3d:4b:c6:96:4c:b9:96:74:55:26:a9:fd:07:4f:9b:
         f5:e0:d5:4e:31:d3:29:fe:ba:3e:a2:62:8d:e0:a5:31:70:2d:
         5e:56:6d:fc:c7:3b:80:20:f1:a4:80:8e:77:96:63:1f:63:ca:
         f8:e7:f3:e0:29:3f:7f:f8:e4:fe:7d:cf:b0:59:42:a2:ba:84:
         b8:4d:be:76:f6:cf:7d:cf:38:c3:55:66:d1:bd:0a:6f:35:9d:
         33:ba:67:49:06:d1:ab:66:8e:47:a8:36:bb:aa:1d:7a:ec:69:
         b1:80:e9:cb:2d:8b:97:6e:5c:61:bc:55:cd:f4:13:1d:ae:3a:
         1e:7f:10:8a:c3:fc:5e:db:d5:06:3b:1a:6a:d7:e8:c3:a3:49:
         6a:3c:6f:9d:2d:73:46:a2:44:c9:19:eb:73:2d:16:1b:27:35:
         15:03:25:44:3a:10:f8:8d:b6:3e:04:21:fe:7d:09:10:63:0c:
         c0:8c:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----