Manifest

$ rpki-client -vvf dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
File:                     1A8C29884038907EDD0174FADC751F16456E1C56.mft (raw, json)
Hash identifier:          cDE0BAkfz3gGEJGSQ+K5Q72IJafJVswUEzUCNiywqDk=
Subject key identifier:   6B:EC:BF:14:4A:02:2A:40:14:23:F8:53:DC:93:19:E9:C2:F3:79:CB
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       5812CEFB0904786C0682F8B050C412DDE198907F
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
Manifest number:          98
Signing time:             Mon 25 Nov 2024 20:27:18 +0000
Manifest this update:     Mon 25 Nov 2024 20:22:18 +0000
Manifest next update:     Tue 26 Nov 2024 20:35:18 +0000
Files and hashes:         1: 1A8C29884038907EDD0174FADC751F16456E1C56.crl (hash: 5gYvoLk96Xx57kHdcmaThhNCUkDxr6PY3pm0xSvlxYE=)
                          2: 3136352e3134302e3134322e302f32342d3234203d3e20393435.roa (hash: 4Gh2Onjbwc9hX7bUt/WfMegvH+lsPYnS2AiGsYeQRpw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:12:ce:fb:09:04:78:6c:06:82:f8:b0:50:c4:12:dd:e1:98:90:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Nov 25 20:22:18 2024 GMT
            Not After : Nov 26 20:35:18 2024 GMT
        Subject: CN=6BECBF144A022A401423F853DC9319E9C2F379CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:2c:c8:94:4c:8b:c6:20:14:bc:b4:ea:2a:
                    ab:97:bb:5c:5d:10:f9:06:fb:7d:b9:a1:97:8b:5f:
                    70:76:c4:a6:30:70:cf:cc:7b:63:b4:79:e8:cc:c7:
                    09:7d:d3:42:9a:ab:0c:fc:6f:4b:6d:f4:96:df:f2:
                    7b:24:87:84:10:b2:1d:a5:f7:de:fc:5a:13:c7:ea:
                    f5:64:c1:d8:44:8e:1d:13:c5:f9:79:82:11:25:53:
                    6c:19:fb:38:db:e9:b3:bd:2e:16:9f:fb:93:65:1a:
                    68:2c:2f:2a:dc:34:23:88:ac:f3:7a:c5:53:56:78:
                    c0:a7:97:49:67:1e:25:f6:e3:49:78:5e:da:6c:95:
                    b2:8c:92:49:c8:1a:62:cb:80:4e:0d:18:8f:bf:03:
                    cc:cc:d7:68:56:cf:eb:0c:ee:a2:a5:6f:56:e9:1e:
                    78:fc:cb:57:30:4c:44:8b:df:26:69:91:6e:46:ef:
                    c5:cc:e3:cb:88:ae:5e:67:ac:a1:ce:59:95:62:3d:
                    5c:f2:42:73:44:34:a5:25:48:b0:5b:33:8c:b0:5d:
                    94:f5:72:59:3f:a3:9e:a5:e5:0a:56:20:d8:6d:27:
                    e1:09:98:58:ef:23:37:b7:72:a3:02:cd:6f:6f:7e:
                    25:12:ac:48:85:6d:54:17:05:c5:3f:5b:24:3f:47:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:BF:14:4A:02:2A:40:14:23:F8:53:DC:93:19:E9:C2:F3:79:CB
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:95:da:c6:59:c9:bd:dd:57:48:e7:2f:e3:93:03:ad:01:
         75:55:c6:73:b3:78:6a:41:da:f3:db:c7:6b:4d:78:30:48:0c:
         cf:67:58:d4:37:9d:3c:9b:09:23:fb:6d:20:cf:47:4e:04:19:
         bd:77:17:01:75:44:bc:a9:a5:f4:42:5f:dc:bc:bb:66:76:82:
         ff:c8:18:60:f6:b0:3e:d1:0c:60:51:37:1e:58:4a:69:e1:5e:
         87:eb:2f:8d:b9:ec:df:6a:4e:47:67:4f:30:e8:62:95:5c:74:
         1b:da:c9:02:08:09:b9:96:ef:e9:56:5c:40:99:76:84:e1:4c:
         89:fa:e9:fc:7f:56:f5:0a:36:45:8c:d7:dc:7b:10:3f:89:55:
         9a:99:55:2e:4b:d8:2e:0f:e7:dd:ac:52:8f:f4:45:2c:44:79:
         fa:fe:c0:e0:b4:01:99:38:4a:b5:1c:74:72:9a:9f:f8:98:53:
         6c:49:1c:3a:85:7b:1d:2d:3d:46:f6:cf:87:2a:b1:63:58:b7:
         78:a5:ab:81:47:9e:ab:71:a8:c3:f7:e4:5e:44:b3:9a:1d:04:
         7e:10:cb:78:cd:66:b9:b1:ba:eb:3a:ef:22:4a:2c:d7:5d:f7:
         3a:cf:b0:2a:04:2d:02:b5:bf:2c:05:72:b0:90:63:c7:e7:1d:
         d8:67:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:44:15 2025 by rpki-client