Manifest

$ rpki-client -vvf dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
File:                     9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft (raw, json)
Hash identifier:          SEFBNZzGRouT+7zlVFvQvKW2Fv6F1sPi5JSmI35DjWE=
Subject key identifier:   54:91:E9:F1:C3:4D:DE:7A:50:E8:01:B7:22:EA:13:8A:20:B7:11:45
Authority key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Certificate issuer:       /CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Certificate serial:       4FF18C1584495291F598C8BB12C105481B32391B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Subject info access:      rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
Manifest number:          02DA
Signing time:             Wed 20 Nov 2024 10:13:02 +0000
Manifest this update:     Wed 20 Nov 2024 10:08:02 +0000
Manifest next update:     Thu 21 Nov 2024 11:17:02 +0000
Files and hashes:         1: 12962028A181E758B8990A6CA4F04A998A69311E.cer (hash: 3px0pecwZ3Dt83oKY3nkQ8TiEPTtUe742whbN11Hoz8=)
                          2: 9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl (hash: FydSv2YczxzUBH7jAFGMQgtJuSwvpFB8lkVSBm9HwSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f1:8c:15:84:49:52:91:f5:98:c8:bb:12:c1:05:48:1b:32:39:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
        Validity
            Not Before: Nov 20 10:08:02 2024 GMT
            Not After : Nov 21 11:17:02 2024 GMT
        Subject: CN=5491E9F1C34DDE7A50E801B722EA138A20B71145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:01:4a:c9:72:12:22:7f:bc:83:4c:2b:93:
                    98:1a:62:5b:5c:20:e1:4b:eb:dc:31:5b:99:96:d3:
                    23:e0:cd:5e:c3:11:b5:bf:3f:63:9c:1c:9f:92:a7:
                    92:4a:79:64:da:69:0c:81:07:a1:81:ba:f5:0a:81:
                    e9:8a:66:09:34:8d:75:c7:58:9c:b2:fe:c6:d3:05:
                    e4:cf:f5:29:07:d1:79:13:e5:ec:f9:ba:9d:b3:84:
                    ff:41:fd:b1:13:a4:3b:24:81:c8:4f:5c:de:3c:23:
                    ba:a3:8d:95:f2:0c:56:69:54:40:e9:5a:f3:d3:0c:
                    63:6d:d0:d4:c5:25:62:cb:c4:cb:be:67:96:cf:ef:
                    08:4f:3e:48:a1:3e:fc:c4:17:f6:1b:8c:9a:f7:41:
                    d4:9c:87:47:8f:97:3c:ea:6a:bf:4b:37:f4:ca:74:
                    18:85:0c:a1:0e:8b:fd:74:12:01:4a:b0:94:76:ef:
                    8d:38:6d:41:4f:13:23:0e:f0:4b:b0:71:43:89:56:
                    7f:03:31:53:c2:81:03:89:a8:ef:c5:05:a1:30:5d:
                    e9:1b:3e:58:50:3b:d6:da:50:40:3e:8e:46:d3:48:
                    c6:16:34:cf:cc:52:33:9e:29:37:86:f4:a9:95:9e:
                    00:3b:9b:5d:13:74:42:e5:03:69:f7:a9:e7:aa:2b:
                    f3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:91:E9:F1:C3:4D:DE:7A:50:E8:01:B7:22:EA:13:8A:20:B7:11:45
            X509v3 Authority Key Identifier:
                keyid:9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:02:97:48:10:a1:6f:ac:29:74:05:23:9e:9a:a0:80:06:2b:
         2d:cf:52:eb:db:41:57:06:f4:84:20:db:dd:58:d0:2b:29:9f:
         5b:8e:43:76:a2:2a:63:13:e9:24:2b:2e:2d:9a:11:9b:06:07:
         71:e8:02:a1:c1:7a:f6:d0:f4:67:8c:a9:4e:80:da:c6:70:89:
         2c:66:c2:23:93:7a:ad:ec:f7:59:61:c7:2d:77:b8:a0:87:1e:
         d7:08:22:f4:6b:ea:1e:d0:6b:e7:24:ab:45:ce:c6:74:4f:61:
         83:a6:8b:a5:cd:c9:5d:f9:9f:49:2b:b4:87:68:f5:c8:b2:a2:
         dd:fd:27:e8:e4:e4:0e:6c:fd:a4:28:a8:13:4e:7b:13:58:ea:
         f1:aa:ec:73:54:bb:49:ae:9c:6d:46:97:79:60:54:3c:74:20:
         c8:b5:aa:ef:7f:96:7e:25:59:ef:60:bd:14:4d:57:08:b9:36:
         dc:bb:89:12:cd:60:93:02:27:4c:3f:94:89:0a:55:9e:68:db:
         76:a0:4a:fe:36:8b:05:a7:44:5d:63:be:5f:00:41:2b:44:23:
         45:ce:e3:2b:4d:11:4b:6d:d0:52:4b:b0:e9:1d:c6:1f:0c:76:
         ee:69:81:ca:42:9c:b7:e2:12:3f:ac:2b:48:fc:35:cc:af:a7:
         ca:29:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:33 2024 by rpki-client on console.sobornost.net