Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
File:                     1A8C29884038907EDD0174FADC751F16456E1C56.mft (raw, json)
Hash identifier:          Rjpm717TpAOu8Ugz+UCb4Owo0X3EDMoNU/CmKsPPCps=
Subject key identifier:   49:10:A1:36:23:C4:52:A4:50:61:0B:50:33:27:A6:3C:97:16:C1:86
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       0B8B081489A8457E4DE79277AEBDABECC50FBA44
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
Manifest number:          2F
Signing time:             Fri 01 Nov 2024 07:16:10 +0000
Manifest this update:     Fri 01 Nov 2024 07:11:10 +0000
Manifest next update:     Sat 02 Nov 2024 10:06:10 +0000
Files and hashes:         1: 52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer (hash: UUr3nP4hnSEjSNPf0LpAd5jIPivw4aKa+lNUg2pGMlM=)
                          2: 323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (hash: E8bBcjoq3ooleg2bY+Xsc+MrgeuC9/HobMu4necY1/Y=)
                          3: 1A8C29884038907EDD0174FADC751F16456E1C56.crl (hash: TNZPwNN6BPJw4vJgKXEs8GfJpZsYAlBUhhwNsL8E2VU=)
                          4: 323030313a3530333a666634343a3a2f34382d3438203d3e20343031313131.roa (hash: GHcyL8GHsymj0WTPK+EU93ru5FIs7N3Wk0Gi/m34yTU=)
                          5: 323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa (hash: jkOz+freQt5DQIgD9ck63dgA9q8zxXWUPk3gKSpSeGA=)
                          6: 323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa (hash: xlIDgBHwUiq987v+OiWBg2FDGoeV6vDit5Ty0gP15sc=)
                          7: 3136352e3134302e3134322e302f32342d3234203d3e20393435.roa (hash: 4Gh2Onjbwc9hX7bUt/WfMegvH+lsPYnS2AiGsYeQRpw=)
                          8: 32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa (hash: Izi9S6BMgRvZACqQTWUDPmBKNInYvbaQaeVON4pVnuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8b:08:14:89:a8:45:7e:4d:e7:92:77:ae:bd:ab:ec:c5:0f:ba:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Nov  1 07:11:10 2024 GMT
            Not After : Nov  2 10:06:10 2024 GMT
        Subject: CN=4910A13623C452A450610B503327A63C9716C186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:d5:23:e7:c4:c2:0b:e8:9d:96:59:44:6c:
                    d2:4f:f1:9f:ee:b9:24:3b:2f:0e:f7:ff:0a:ee:0e:
                    40:66:25:46:41:5c:07:bc:76:d4:75:0f:c5:13:93:
                    8e:77:98:2d:44:1a:f8:aa:ad:68:57:9b:cc:05:6b:
                    c9:1b:6f:d6:a7:6a:f0:72:60:67:eb:1b:ec:9a:bc:
                    a6:5f:14:eb:13:c0:8f:5a:d6:c6:e8:6c:ee:8e:68:
                    51:11:1b:c1:d1:88:71:16:56:9c:81:73:9d:30:a8:
                    4f:8c:97:50:d5:ae:43:67:c5:4f:06:bd:59:e0:9a:
                    5f:e6:b0:c2:04:fe:af:3a:dd:7a:f6:11:f6:48:fc:
                    51:74:c8:36:49:4a:66:6b:9a:d6:58:18:72:9f:7a:
                    a8:a7:d0:75:7d:2e:40:64:bc:9c:5c:bf:bd:77:6a:
                    53:82:f9:26:be:24:08:bf:a5:c4:e1:96:6f:2c:2e:
                    d3:d9:aa:f1:7e:b5:e7:f0:7f:d9:16:41:ba:20:cf:
                    c1:cf:7e:55:d8:99:ab:f6:5c:76:fd:f4:7e:c4:47:
                    b1:54:de:95:b6:58:97:41:28:01:c0:ee:7c:13:0e:
                    e8:40:72:25:47:16:ba:86:ba:2f:24:15:f6:b5:a1:
                    d7:f7:2c:d1:31:09:9b:b8:52:67:45:dd:e8:40:8d:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:A1:36:23:C4:52:A4:50:61:0B:50:33:27:A6:3C:97:16:C1:86
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:17:e1:05:d4:62:54:39:74:e1:54:5c:09:b9:e8:0a:25:
         21:ec:2f:f4:69:7c:b2:cd:dc:e5:de:c0:3c:bb:3f:21:cd:95:
         28:e6:de:53:9f:d7:77:e7:cf:0d:b1:34:9f:ef:3c:3b:70:2b:
         17:8e:fe:95:43:a6:72:6f:63:20:51:30:36:23:c3:9a:63:24:
         9d:1d:1e:22:e5:7f:9d:21:ec:32:f4:34:97:3c:5f:2a:16:40:
         58:db:5e:c7:5b:b0:2a:4d:54:54:b9:e0:1a:b0:d1:e2:2d:b0:
         fa:2f:d4:ac:32:e8:2e:d2:da:99:39:de:2d:83:d4:47:30:c9:
         f4:42:98:ae:60:b7:d5:ae:3d:d7:60:b3:eb:e3:85:0b:bc:41:
         b6:13:24:63:22:00:6c:f7:33:b0:a2:ca:cd:3e:54:88:0b:3f:
         e1:d7:5d:db:c3:dc:9b:b4:44:7d:16:ba:3e:45:1d:83:63:c9:
         b6:7d:1a:8c:2d:3c:ea:86:8c:2e:7a:c5:48:ce:66:77:84:9e:
         71:64:82:6f:bf:ce:2d:d9:52:06:f1:c2:32:8b:24:09:75:16:
         87:70:5a:e1:5c:b9:da:d2:49:77:cb:e5:45:3d:fa:f1:cb:37:
         84:0b:a7:31:ce:d8:84:44:65:f8:6c:72:05:d3:cd:3a:d3:68:
         43:4b:2d:28
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUC4sIFImoRX5N55J3rr2r7MUPukQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE4QzI5ODg0MDM4OTA3RUREMDE3NEZBREM3NTFGMTY0
NTZFMUM1NjAeFw0yNDExMDEwNzExMTBaFw0yNDExMDIxMDA2MTBaMDMxMTAvBgNV
BAMTKDQ5MTBBMTM2MjNDNDUyQTQ1MDYxMEI1MDMzMjdBNjNDOTcxNkMxODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrJtUj58TCC+idlllEbNJP8Z/u
uSQ7Lw73/wruDkBmJUZBXAe8dtR1D8UTk453mC1EGviqrWhXm8wFa8kbb9anavBy
YGfrG+yavKZfFOsTwI9a1sbobO6OaFERG8HRiHEWVpyBc50wqE+Ml1DVrkNnxU8G
vVngml/msMIE/q863Xr2EfZI/FF0yDZJSmZrmtZYGHKfeqin0HV9LkBkvJxcv713
alOC+Sa+JAi/pcThlm8sLtPZqvF+tefwf9kWQbogz8HPflXYmav2XHb99H7ER7FU
3pW2WJdBKAHA7nwTDuhAciVHFrqGui8kFfa1odf3LNExCZu4UmdF3ehAjUAlAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUSRChNiPEUqRQYQtQMyemPJcWwYYwHwYDVR0j
BBgwFoAUGowpiEA4kH7dAXT63HUfFkVuHFYwDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vZGV2LnR3L3Jwa2kvQVM5NDUvMi8xQThDMjk4
ODQwMzg5MDdFREQwMTc0RkFEQzc1MUYxNjQ1NkUxQzU2LmNybDBlBggrBgEFBQcB
AQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0Lzcv
MUE4QzI5ODg0MDM4OTA3RUREMDE3NEZBREM3NTFGMTY0NTZFMUM1Ni5jZXIwZAYI
KwYBBQUHAQsEWDBWMFQGCCsGAQUFBzALhkhyc3luYzovL2Rldi50dy9ycGtpL0FT
OTQ1LzIvMUE4QzI5ODg0MDM4OTA3RUREMDE3NEZBREM3NTFGMTY0NTZFMUM1Ni5t
ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN
AQELBQADggEBAHgMF+EF1GJUOXThVFwJuegKJSHsL/RpfLLN3OXewDy7PyHNlSjm
3lOf13fnzw2xNJ/vPDtwKxeO/pVDpnJvYyBRMDYjw5pjJJ0dHiLlf50h7DL0NJc8
XyoWQFjbXsdbsCpNVFS54Bqw0eItsPov1Kwy6C7S2pk53i2D1EcwyfRCmK5gt9Wu
Pddgs+vjhQu8QbYTJGMiAGz3M7Ciys0+VIgLP+HXXdvD3Ju0RH0Wuj5FHYNjybZ9
GowtPOqGjC56xUjOZneEnnFkgm+/zi3ZUgbxwjKLJAl1FodwWuFcudrSSXfL5UU9
+vHLN4QLpzHO2IREZfhscgXTzTrTaENLLSg=
-----END CERTIFICATE-----