Manifest

$ rpki-client -vvf rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
File:                     3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft (raw, json)
Hash identifier:          jEQFW6InzrI+vJK5Z50JiWRnvcabPOR/zUlwvYyXtJA=
Subject key identifier:   38:67:47:C7:52:C3:1A:6E:FE:54:38:01:56:B6:81:EB:13:06:C1:72
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       28FA843DFF6D4AD3EEA7E71A5EA2CEE88B4855FA
Authority info access:    rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
Manifest number:          0336
Signing time:             Sat 06 Jan 2024 08:44:44 +0000
Manifest this update:     Sat 06 Jan 2024 08:39:44 +0000
Manifest next update:     Sun 07 Jan 2024 10:30:44 +0000
Files and hashes:         1: 326130353a646663363a393230303a3a2f34302d3438203d3e20313937353337.roa (hash: BGprAzwlQPzlyMJ1QLEO9GogWKFszI/XjcMru4ypx/I=)
                          2: 326130353a646663363a393030303a3a2f34302d3438203d3e203438323331.roa (hash: Z9Z1NxMReuczPSccTVRJcOnrHZQT0wS0S6W23+nelho=)
                          3: 3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl (hash: EbYddm1fMr24pU1RsLEZY3wpfuH8T08ssoXog887xiQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fa:84:3d:ff:6d:4a:d3:ee:a7:e7:1a:5e:a2:ce:e8:8b:48:55:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Jan  6 08:39:44 2024 GMT
            Not After : Jan  7 10:30:44 2024 GMT
        Subject: CN=386747C752C31A6EFE54380156B681EB1306C172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:f6:56:c2:35:ec:c1:f5:cf:85:c0:18:74:
                    d3:7f:73:e0:ca:e6:05:4c:38:0b:79:6b:50:80:8a:
                    5b:33:18:46:3c:c0:01:13:ba:04:ca:75:5d:4b:81:
                    b3:33:87:76:da:11:b0:5d:46:b0:ae:05:3c:70:20:
                    6a:1d:d6:cd:2b:df:38:96:4f:5e:4d:ac:17:06:63:
                    a1:e1:f0:b5:99:1c:ab:dd:f9:cc:41:59:3d:e4:2f:
                    d7:f9:69:0e:af:44:8e:9b:7d:b1:b0:d0:ed:e6:ad:
                    e9:2f:d2:32:75:d0:54:fd:33:ac:d5:ba:82:55:73:
                    4a:c3:78:43:bd:07:d8:a7:29:85:26:ac:9c:30:52:
                    61:e9:3a:e0:2d:19:09:6c:04:56:11:31:bd:ee:bd:
                    2b:a5:e4:f7:ad:fb:f3:2a:a9:c5:22:eb:33:26:b9:
                    0e:32:82:1c:02:b5:ab:3e:49:68:5b:11:98:0a:ed:
                    16:c6:6e:26:fc:99:a6:a9:a2:c3:98:35:0e:71:ba:
                    ae:79:2a:6e:cf:2b:90:d2:c3:b9:e0:3e:ee:96:06:
                    a6:a3:96:1e:92:5d:a1:4f:a8:29:fb:db:87:1e:2f:
                    5d:24:7d:c2:77:04:0a:16:74:6f:56:5e:0c:5d:2f:
                    5b:9f:ca:3d:1d:e8:19:ad:45:1a:82:a3:8f:d5:d0:
                    7d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:47:C7:52:C3:1A:6E:FE:54:38:01:56:B6:81:EB:13:06:C1:72
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:90:c6:e9:b1:70:89:fd:49:ea:da:5f:11:d3:7a:0b:db:75:
         99:5d:e8:7f:20:ea:09:69:b7:85:e6:a8:5d:e1:d9:c3:d4:8f:
         95:4e:aa:e2:5c:a4:03:2a:b9:1b:83:84:c1:f7:3a:1b:37:93:
         e4:79:42:0e:a5:aa:6a:e2:53:5c:31:62:bd:e7:19:4b:c8:76:
         be:4f:e2:9c:99:72:a6:47:a9:37:7b:b9:30:de:ba:81:79:31:
         a9:38:34:10:8d:51:8d:e3:cb:a9:7c:f8:12:11:50:cd:f7:73:
         8a:ac:4b:76:78:86:e2:b9:48:df:3d:d3:68:39:47:7b:46:65:
         2d:78:37:fa:ed:36:0a:8d:83:81:10:c2:a4:de:d9:69:09:0f:
         27:fe:70:28:12:aa:91:6a:ca:4c:68:d9:c2:b0:1a:9e:fd:7f:
         78:3c:eb:4e:0e:05:59:64:50:fc:18:f7:fd:f6:d6:ff:d2:ea:
         b1:b8:cf:c8:4a:03:3d:51:0d:4c:13:2b:15:cb:ba:12:64:bc:
         6b:b6:1f:ec:da:d1:04:54:57:2d:25:b7:d5:79:b6:2b:d4:d4:
         8d:8b:9a:d1:82:17:79:23:8d:94:3e:b4:33:4a:c6:2d:95:68:
         77:3f:18:8f:3c:5a:42:f1:9d:45:8b:e3:31:6e:fc:97:95:2e:
         4c:a4:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:17 2025 by rpki-client