Manifest

$ rpki-client -vvf dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
File:                     1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft (raw, json)
Hash identifier:          63UXgBGEh9qcUcB5WNFzzHrCIpd8w8xgm7EcC3iPYu8=
Subject key identifier:   24:D3:B3:31:D8:59:07:E5:14:F1:BE:88:59:E5:F3:26:5D:92:61:A7
Authority key identifier: 1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2
Certificate issuer:       /CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
Certificate serial:       1350342F5193FB301AB41F0954ED92E71FD7212E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
Subject info access:      rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
Manifest number:          01E3
Signing time:             Wed 03 Jul 2024 14:38:29 +0000
Manifest this update:     Wed 03 Jul 2024 14:33:29 +0000
Manifest next update:     Thu 04 Jul 2024 16:29:29 +0000
Files and hashes:         1: C4711895871FD73411F37BE5011FCFB70FB91744.cer (hash: Nc6ojKgH9ECG0q2mlVEb8POdImLS5wZETE7L2hzsnno=)
                          2: 1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl (hash: ThEFb9rEhMmOB/NCr1JOTFYeCrRk+wxv/1KbDccDlY8=)

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl
                          rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jul 2024 16:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:50:34:2f:51:93:fb:30:1a:b4:1f:09:54:ed:92:e7:1f:d7:21:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
        Validity
            Not Before: Jul  3 14:33:29 2024 GMT
            Not After : Jul  4 16:29:29 2024 GMT
        Subject: CN=24D3B331D85907E514F1BE8859E5F3265D9261A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:c8:3b:d0:59:6b:3d:5c:7e:0b:1b:30:63:
                    e3:56:0b:d3:eb:7d:b0:11:98:dc:d3:d8:30:1f:d6:
                    92:06:1e:bc:f5:79:e3:54:48:73:f5:86:1a:9c:0a:
                    84:ef:aa:1c:2d:6d:02:9f:a0:bf:e3:8f:29:8a:28:
                    b0:11:20:69:27:57:33:a9:fc:29:17:72:c0:71:f0:
                    2e:be:ce:09:d3:65:24:d1:41:53:81:cc:fa:c5:8c:
                    65:57:c5:8d:68:5b:c5:2d:80:ff:69:af:52:c0:12:
                    b1:78:af:b8:06:82:75:c4:cc:83:04:bb:56:41:2a:
                    b6:47:2e:5e:ed:37:1a:0a:16:50:f7:6e:76:d5:1d:
                    e7:f0:67:4c:bd:4d:b6:a7:e9:cb:64:d2:59:cc:89:
                    43:92:7f:bb:98:0f:1f:8e:d6:32:e0:e3:d4:6f:c5:
                    99:a3:99:8f:3f:05:fa:fd:63:ca:8c:5e:7b:2b:13:
                    d5:ed:75:bb:49:3d:8d:96:7f:8d:45:26:59:c7:9b:
                    d0:51:b0:c2:7e:df:9c:7d:3d:17:f1:5d:c6:c2:b2:
                    a4:36:2c:cb:17:d9:0c:99:73:7f:ed:38:f1:8c:64:
                    2c:60:a6:fa:19:0f:e2:59:66:06:dc:8f:e6:55:13:
                    33:09:b6:ce:c7:f6:0b:c8:73:82:38:ed:09:4a:b8:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D3:B3:31:D8:59:07:E5:14:F1:BE:88:59:E5:F3:26:5D:92:61:A7
            X509v3 Authority Key Identifier:
                keyid:1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:f3:92:c4:dc:2b:8f:ac:a2:2e:9a:18:1a:4a:66:18:e2:
         d8:c1:bf:a6:1a:d3:73:ff:21:5b:9c:e8:cd:1b:4f:61:0e:a9:
         09:7b:e2:c0:4c:f4:fa:9d:02:ba:77:c6:c2:37:85:b1:b7:ca:
         ab:43:2b:6d:36:68:60:f4:4f:c7:b9:fd:ab:99:48:1a:20:84:
         99:f6:c1:f4:6e:69:9e:92:6b:75:0d:4e:3f:04:41:99:f0:9d:
         28:1b:b5:2c:0c:ef:ed:d3:b7:cc:19:64:ca:a2:88:e3:b6:22:
         25:a6:bc:81:86:b1:12:b3:f3:bd:bf:da:f9:87:84:dd:08:0a:
         9f:d9:4a:78:78:d8:6c:80:09:9a:3f:19:4b:66:85:c4:2e:4d:
         5c:21:c1:f7:70:ea:6d:70:4c:d8:82:e8:b5:aa:0f:87:d2:48:
         f3:a8:45:1f:53:ed:3d:06:c1:60:d8:54:6e:2f:a4:b1:b5:05:
         01:8a:8d:4c:bf:f0:31:7e:e8:2d:15:fb:1c:60:9f:11:02:0b:
         22:3c:d6:1c:ea:c3:0a:87:4e:26:44:ee:e2:84:fa:85:41:66:
         b2:85:81:45:d1:3e:bd:ee:7b:50:65:d9:f6:e8:3d:46:95:6c:
         ab:21:3c:fb:40:23:d8:77:01:20:05:2a:0e:6c:9b:1e:f4:70:
         09:fa:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 03:09:27 2024 by rpki-client on console.sobornost.net