Manifest

$ rpki-client -vvf rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft
File:                     F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft (raw, json)
Hash identifier:          nD13jfoyXDYaansJR9g0AIs/cdGq33mKqsfbxGaFTNs=
Subject key identifier:   9A:49:EB:C5:52:1E:8D:6F:61:C4:18:C7:9D:62:BE:11:77:E0:0F:30
Authority key identifier: F4:B0:05:E4:85:2A:12:46:02:E9:F6:D0:51:2C:95:FD:5B:D8:3C:1E
Certificate issuer:       /CN=F4B005E4852A124602E9F6D0512C95FD5BD83C1E
Certificate serial:       2A4424918A9DDE8105EAEA495EB9106C0FB33D15
Authority info access:    rsync://dev.tw/rpki/August/14/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer
Subject info access:      rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft
Manifest number:          0430
Signing time:             Wed 12 Jun 2024 12:14:10 +0000
Manifest this update:     Wed 12 Jun 2024 12:09:10 +0000
Manifest next update:     Thu 13 Jun 2024 15:02:10 +0000
Files and hashes:         1: F4B005E4852A124602E9F6D0512C95FD5BD83C1E.crl (hash: ErJ66SNjXapOLZ9XO6TmAn9aT+hGuLkWqEeGrSreBUI=)
                          2: AS7719.asa (hash: c7QRDL49avzPhzvZYER7ZyzbMiEhmyx2U+E8j0YGPqQ=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.crl
                          rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft
                          rsync://dev.tw/rpki/August/14/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer
                          rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.crl
                          rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:44:24:91:8a:9d:de:81:05:ea:ea:49:5e:b9:10:6c:0f:b3:3d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4B005E4852A124602E9F6D0512C95FD5BD83C1E
        Validity
            Not Before: Jun 12 12:09:10 2024 GMT
            Not After : Jun 13 15:02:10 2024 GMT
        Subject: CN=9A49EBC5521E8D6F61C418C79D62BE1177E00F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:1f:86:e3:7f:d4:1b:3d:6b:76:6a:ba:1e:
                    43:77:3e:4b:65:7f:a8:e3:82:33:8d:2f:eb:6d:c8:
                    84:cc:ab:cb:8d:f4:0f:ae:c4:38:bb:f1:8d:c1:e0:
                    38:9f:42:fb:68:89:22:2a:16:09:25:62:b2:d6:10:
                    0a:18:bb:44:b3:29:68:1b:3b:96:bc:ba:18:bf:c4:
                    38:77:4b:83:e0:51:8d:de:38:00:ac:df:2f:e5:4c:
                    8f:6c:3f:e7:ce:4d:9b:de:27:23:3b:a9:fd:2f:6d:
                    89:d7:95:70:76:63:2a:8a:54:42:d4:18:4d:d4:be:
                    cf:2b:0b:b6:9c:2b:a3:49:c0:d7:30:0a:43:22:2c:
                    a1:fe:f8:27:6d:21:ca:02:d8:45:6d:27:b4:1b:d6:
                    a4:1b:9a:e6:48:02:a4:90:67:40:38:d0:da:29:28:
                    05:79:82:de:30:0e:ed:81:80:eb:da:7f:62:3d:09:
                    6d:59:18:4a:42:4d:e4:26:ea:46:ac:d1:35:e6:b6:
                    d1:33:5e:19:26:7d:2c:92:33:ff:56:50:30:3f:af:
                    c1:0c:83:4c:5a:b7:69:69:60:4f:22:53:2d:76:17:
                    ed:e8:ca:7f:6b:3c:44:92:bf:70:f6:7c:e9:a7:7b:
                    f8:a8:48:b8:f1:aa:14:7e:b8:a0:67:97:21:20:07:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:49:EB:C5:52:1E:8D:6F:61:C4:18:C7:9D:62:BE:11:77:E0:0F:30
            X509v3 Authority Key Identifier:
                keyid:F4:B0:05:E4:85:2A:12:46:02:E9:F6:D0:51:2C:95:FD:5B:D8:3C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/14/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:b7:69:86:94:a2:c2:eb:3d:f6:a8:c1:c5:3c:e1:6a:16:
         da:de:02:62:fc:be:cf:17:01:6f:a7:5a:df:01:a0:0e:48:30:
         31:f3:f0:15:e9:74:4d:4a:92:c8:6b:83:6a:0a:7c:aa:ed:95:
         d4:1f:7d:fa:ee:fa:9d:b3:73:b4:b9:38:fa:48:09:e3:69:3d:
         89:32:bf:f8:14:0d:e2:0e:19:0c:19:9a:05:69:ec:10:d1:01:
         bb:c5:c6:98:0e:33:d0:28:08:c0:74:24:a3:9b:26:f5:6e:1c:
         8d:80:f1:92:b3:6f:ec:b8:37:5d:d8:44:8f:31:1e:1a:07:e1:
         93:06:e3:b8:51:d0:13:8e:2e:53:e8:bf:7e:f8:c1:47:3d:4f:
         f8:c6:14:a2:b9:77:44:ff:2f:4d:41:34:af:89:13:01:27:d1:
         f4:a4:9b:30:66:6b:7c:f5:24:00:c4:7c:47:ae:36:0d:c8:ca:
         36:9a:dd:0c:a3:3f:0e:87:c2:11:f1:84:da:66:43:e9:ef:12:
         24:95:15:25:ac:f6:80:64:96:cb:1c:78:60:7e:b9:ae:20:da:
         79:c0:e5:6b:27:96:26:88:41:c6:3f:24:f4:ac:f4:d1:cb:0d:
         35:08:35:8d:7d:a6:63:64:2b:40:fe:19:81:da:8d:48:fc:66:
         4e:2f:b2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 03:46:31 2024 by rpki-client on console.sobornost.net