Manifest

$ rpki-client -vvf rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
File:                     3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft (raw, json)
Hash identifier:          UwKxk6zzN9G83gAEs0PrMqV/q29dmjlZlKpzZsuPX+c=
Subject key identifier:   6A:31:28:8E:02:E8:85:5F:0E:C3:78:63:06:88:EF:E9:58:BD:5E:2D
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       1710842ED4B14FED6846F6D36FA0215D528B1A81
Authority info access:    rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
Manifest number:          0429
Signing time:             Mon 10 Jun 2024 17:51:00 +0000
Manifest this update:     Mon 10 Jun 2024 17:46:00 +0000
Manifest next update:     Tue 11 Jun 2024 21:00:00 +0000
Files and hashes:         1: 326130353a646663363a393230303a3a2f34302d3438203d3e20313937353337.roa (hash: BGprAzwlQPzlyMJ1QLEO9GogWKFszI/XjcMru4ypx/I=)
                          2: 3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl (hash: UT/kcS5v3PepVB9zxHzeeZSFgiSOgNfrJTDyhfHOzpA=)
                          3: 326130353a646663363a393030303a3a2f34302d3438203d3e203438323331.roa (hash: Z9Z1NxMReuczPSccTVRJcOnrHZQT0wS0S6W23+nelho=)
                          4: 326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa (hash: e8mf/Ef37MFcYzYWSKLMf3x4aM/H4HiVkTLIRSKPsdg=)
                          5: 326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa (hash: ZfDGhnPbGXzKmB2OHeNeI4gY+FrcVZSfB51+uq5Fduk=)
                          6: 326130353a646663363a393330303a3a2f34302d3438203d3e203436313338.roa (hash: NAOYouY7XB0m1r9qIdGiwXKIqbq1ZOH3XUQ0a3Q/e90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:10:84:2e:d4:b1:4f:ed:68:46:f6:d3:6f:a0:21:5d:52:8b:1a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Jun 10 17:46:00 2024 GMT
            Not After : Jun 11 21:00:00 2024 GMT
        Subject: CN=6A31288E02E8855F0EC378630688EFE958BD5E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:83:14:b8:20:3e:5e:86:96:f8:38:20:56:
                    54:97:1b:20:c8:50:a3:97:2c:3f:4e:dc:8d:1f:d1:
                    8e:57:ba:0a:5a:91:c5:9a:0d:4e:57:90:1d:ca:d9:
                    cc:f3:31:c5:9c:13:36:fd:e0:79:38:a9:54:07:29:
                    ac:cc:4b:f8:51:9d:5d:7d:13:3e:84:1e:c2:72:aa:
                    55:56:f0:31:e5:f7:9f:a5:51:ca:fc:79:80:5b:22:
                    24:da:02:4b:f5:a0:13:17:e4:2c:7a:5a:ef:3a:f3:
                    82:31:32:4a:ee:44:89:b3:e2:1c:54:18:b2:39:98:
                    98:99:d8:72:e9:d7:13:bd:1d:5d:20:d8:c9:dc:0a:
                    24:27:0b:3d:06:c8:24:2b:eb:05:19:cc:eb:6c:16:
                    5b:93:f4:64:67:f4:f2:b4:6a:49:ad:65:0d:7b:3e:
                    d0:75:fb:58:6e:b4:b6:98:9d:8f:fb:17:5c:7d:b0:
                    19:01:da:8d:a3:72:e4:b9:36:2d:39:91:cb:de:e3:
                    f9:89:47:bd:cb:2d:f7:89:3e:6a:95:88:1b:5a:09:
                    08:53:98:3a:dc:4d:1f:be:40:97:9f:70:b4:87:14:
                    23:7e:94:c9:0c:a4:e8:95:d7:cc:2f:dc:bf:e7:1f:
                    77:c5:d0:17:d3:7f:e9:82:a5:53:17:0a:1a:88:ea:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:28:8E:02:E8:85:5F:0E:C3:78:63:06:88:EF:E9:58:BD:5E:2D
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:74:c0:00:fb:4e:c9:40:6e:d3:0c:57:89:3d:99:f3:1b:8f:
         3a:26:e5:07:c8:f8:e3:b5:79:8e:6a:98:b2:94:59:2c:77:49:
         dd:1f:f6:34:94:fa:13:1f:48:1c:b0:b8:ff:eb:31:55:07:8b:
         df:03:a0:25:b0:12:8e:56:c6:9b:05:79:82:b2:c4:99:3e:cd:
         14:2a:5e:23:72:01:80:e2:db:77:5c:64:8e:65:5c:5b:e2:b4:
         ec:4e:08:be:f7:fa:78:2e:55:ca:2e:09:ff:67:63:77:50:d2:
         43:11:e2:95:86:a9:c5:16:d4:27:9b:f7:e2:7a:9d:92:1e:55:
         6d:65:53:6c:cb:5a:18:9d:01:ec:82:67:11:ed:f8:43:56:20:
         f6:8e:c6:1e:f5:c6:09:01:bb:fb:bc:e5:e8:c8:4c:12:80:40:
         bc:ff:0f:06:96:64:31:4c:03:0a:cf:36:4f:38:68:d4:2b:a1:
         75:63:aa:d2:c2:0d:0e:02:b7:d8:66:a4:c4:67:a3:a7:96:aa:
         40:bf:df:bc:5e:72:6f:c3:37:bc:82:29:30:40:a0:5e:c7:30:
         a5:57:43:ea:04:88:b6:6d:fc:05:d9:90:98:be:ce:49:c6:c4:
         ce:07:98:ab:2d:2f:90:6a:93:b9:ed:74:16:5e:1a:67:02:e8:
         fd:47:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 03:51:01 2024 by rpki-client on console.sobornost.net