Manifest
$ rpki-client -vvf dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
File: 9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft (raw, json)
Hash identifier: BB/ql4R9E/25ZZmRo8Otxsaae1QTCXBxNHOgxM5ueQc=
Subject key identifier: C7:F8:FA:0A:DC:57:F2:94:45:B6:7A:8A:9D:9F:A7:80:0F:3B:D4:8E
Authority key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Certificate issuer: /CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Certificate serial: 68910CDAF77231879A031A5B116A135DED65BC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Subject info access: rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
Manifest number: AF
Signing time: Sun 07 Jan 2024 04:45:35 +0000
Manifest this update: Sun 07 Jan 2024 04:40:35 +0000
Manifest next update: Mon 08 Jan 2024 07:39:35 +0000
Files and hashes: 1: 3139342e3131362e3232372e302f32342d3234203d3e20393435.roa (hash: ByGC669kSSLUKCIz9aUzEiPXJ9Keu9dFvopvf2dPqdc=)
2: 326131323a646434303a3a2f32392d3438203d3e20393435.roa (hash: 9nCmzIPrc5eg9srqb6+v/A6MguU+yUqUMBj/yxbVHvg=)
3: 326131323a646434373a3230303a3a2f34302d3438203d3e20313531333338.roa (hash: Lt/+IPwKT9jA7szXCA5NlKYGyKG4azER4FwYn8Cxn1A=)
4: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (hash: g/dY4aO3OBlAenhmFGDJaf5GHpGCpph+2qZAfkLioT4=)
5: 9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl (hash: vj3YpWlOUfB2eQ3u03Wge2zkzCSus/k78m7oXeGeVQM=)
6: 6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer (hash: FsaYMO4xNQtYM/EZpbXHN6z9k8+gTqvkI9OJf8JaPcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:91:0c:da:f7:72:31:87:9a:03:1a:5b:11:6a:13:5d:ed:65:bc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Validity
Not Before: Jan 7 04:40:35 2024 GMT
Not After : Jan 8 07:39:35 2024 GMT
Subject: CN=C7F8FA0ADC57F29445B67A8A9D9FA7800F3BD48E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:bb:00:c8:1c:6a:95:6c:fe:3f:65:ed:19:
77:83:f6:a1:51:50:7d:d2:da:29:d8:fa:30:be:af:
a3:a8:1f:91:62:9d:fb:1e:3a:2c:f9:fd:6c:85:9f:
07:6b:22:5d:69:d2:4e:1c:5c:36:9c:92:07:08:67:
50:23:55:dc:63:79:49:69:ea:97:b6:6a:03:2d:45:
b8:18:2b:46:3c:31:4b:aa:4f:12:e3:c5:24:e6:8f:
a3:b6:12:2a:57:89:41:9a:4b:d0:fa:c0:69:73:37:
13:60:f3:41:7c:36:0d:dc:25:48:f3:2e:1d:69:e4:
a4:e5:2d:9a:d3:ab:2d:6e:c7:d0:c7:0e:43:d5:de:
58:97:48:04:02:52:33:d3:2c:9b:cd:aa:fc:ec:d6:
38:5f:0a:37:e2:f5:f1:12:d8:ed:eb:50:52:c0:cb:
a0:5e:14:c1:57:2a:0c:3c:47:3b:0b:e3:55:0e:80:
9d:e5:c9:2a:07:d2:b2:aa:d2:8d:c9:60:45:9d:a7:
b9:3e:81:ae:57:0f:d7:2a:21:23:ad:3f:c3:e0:71:
e3:99:21:58:cc:06:3c:06:c6:5b:7e:54:34:50:49:
15:64:78:9d:d6:e3:22:5c:e0:01:24:c1:52:aa:a1:
86:e1:e7:be:5c:6b:0f:7a:bb:bf:cb:d2:b7:97:15:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:FA:0A:DC:57:F2:94:45:B6:7A:8A:9D:9F:A7:80:0F:3B:D4:8E
X509v3 Authority Key Identifier:
keyid:9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1b:5b:1e:65:95:e0:ec:3e:99:f9:b2:c2:82:26:79:ad:44:
74:d5:8f:6c:a5:70:ec:7b:1d:3a:91:75:d2:99:53:40:cb:06:
84:3f:28:84:ba:6e:43:e0:f3:73:3d:99:13:34:fe:e2:02:a6:
74:23:e0:36:5e:19:2d:de:29:31:eb:03:0a:26:2f:54:c5:b6:
d2:32:f5:82:b0:6d:d7:34:4e:db:b3:54:6d:ce:3d:8d:16:24:
49:b1:7b:4c:06:90:a2:3f:70:b8:be:88:ce:12:ab:98:83:dc:
70:57:27:e1:ef:d1:a8:1b:53:e5:30:9a:ac:7d:af:43:4d:ed:
22:03:3b:07:63:78:e3:d8:96:e6:66:f9:93:e0:f0:17:e2:49:
2c:0f:40:c8:86:14:1a:e6:f6:1a:7d:7a:eb:46:e4:13:bc:46:
96:17:f0:a0:87:c1:28:81:de:f7:49:02:aa:5c:49:15:f9:ff:
d6:66:b5:84:a2:68:ed:73:0f:be:88:c6:16:91:ae:7c:41:d1:
06:59:c8:52:01:10:03:29:01:0a:f2:c9:b9:4d:13:a4:3b:56:
f8:b4:30:8b:79:52:0a:c0:e6:a2:eb:35:0a:91:29:97:4f:b0:
7f:4f:e1:a6:35:21:46:bd:9a:b9:21:be:f1:c9:79:2b:f1:7c:
01:d6:89:30
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUaJEM2vdyMYeaAxpbEWoTXe1lvEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWQ2MjBiNDVjOTA5ODUwNmFjNGJmMTE4NGJlZTZjZGJl
OWQ3MWM0YzAeFw0yNDAxMDcwNDQwMzVaFw0yNDAxMDgwNzM5MzVaMDMxMTAvBgNV
BAMTKEM3RjhGQTBBREM1N0YyOTQ0NUI2N0E4QTlEOUZBNzgwMEYzQkQ0OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWPLsAyBxqlWz+P2XtGXeD9qFR
UH3S2inY+jC+r6OoH5FinfseOiz5/WyFnwdrIl1p0k4cXDackgcIZ1AjVdxjeUlp
6pe2agMtRbgYK0Y8MUuqTxLjxSTmj6O2EipXiUGaS9D6wGlzNxNg80F8Ng3cJUjz
Lh1p5KTlLZrTqy1ux9DHDkPV3liXSAQCUjPTLJvNqvzs1jhfCjfi9fES2O3rUFLA
y6BeFMFXKgw8RzsL41UOgJ3lySoH0rKq0o3JYEWdp7k+ga5XD9cqISOtP8PgceOZ
IVjMBjwGxlt+VDRQSRVkeJ3W4yJc4AEkwVKqoYbh575caw96u7/L0reXFTb7AgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUx/j6CtxX8pRFtnqKnZ+ngA871I4wHwYDVR0j
BBgwFoAUnWILRckJhQasS/EYS+5s2+nXHEwwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvOUQ2MjBC
NDVDOTA5ODUwNkFDNEJGMTE4NEJFRTZDREJFOUQ3MUM0Qy5jcmwwZAYIKwYBBQUH
AQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL25XSUxSY2tKaFFhc1NfRVlTLTVzMi1uWEhFdy5jZXIwZQYI
KwYBBQUHAQsEWTBXMFUGCCsGAQUFBzALhklyc3luYzovL2Rldi50dy9ycGtpL0F1
Z3VzdC81LzlENjIwQjQ1QzkwOTg1MDZBQzRCRjExODRCRUU2Q0RCRTlENzFDNEMu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQB5G1seZZXg7D6Z+bLCgiZ5rUR01Y9spXDsex06kXXSmVNAywaE
PyiEum5D4PNzPZkTNP7iAqZ0I+A2Xhkt3ikx6wMKJi9UxbbSMvWCsG3XNE7bs1Rt
zj2NFiRJsXtMBpCiP3C4vojOEquYg9xwVyfh79GoG1PlMJqsfa9DTe0iAzsHY3jj
2JbmZvmT4PAX4kksD0DIhhQa5vYafXrrRuQTvEaWF/Cgh8Eogd73SQKqXEkV+f/W
ZrWEomjtcw++iMYWka58QdEGWchSARADKQEK8sm5TROkO1b4tDCLeVIKwOai6zUK
kSmXT7B/T+GmNSFGvZq5Ib7xyXkr8XwB1okw
-----END CERTIFICATE-----
Generated at Tue May 27 19:59:39 2025 by rpki-client