Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
File:                     ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft (raw, json)
Hash identifier:          Ud+Ql+svmKppAqacoNjBQvwnTZnIEWDroYfZuR5lHk0=
Subject key identifier:   9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Certificate issuer:       /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial:       07EB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
Manifest number:          07E1
Signing time:             Fri 31 May 2024 20:42:39 +0000
Manifest this update:     Fri 31 May 2024 20:42:39 +0000
Manifest next update:     Sun 02 Jun 2024 20:42:39 +0000
Files and hashes:         1: H5eKrRly-KFdfhSxy_HdCOl-WUg.roa (hash: ac4P7PsFkNtdrjHqmIajx24mdfdyknhvm826LNOxMX0=)
                          2: ShoyenozzpOU8qJ-Wcoe-VA-NyE.roa (hash: lTvr58tKeZWcGymZjCW4pTEvUbt90c90aiaV/cvOFhQ=)
                          3: ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl (hash: G/eqLeFbH/3RVLmcccWkwqEupZBwTTUK4DKJF3mt5jE=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 20:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
        Validity
            Not Before: May 31 20:42:39 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9E0948674DB51888C393AF9B532AFDB9C59BFD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:6e:f0:47:be:1b:cf:5e:b9:5d:65:92:4f:
                    b2:27:2d:a0:b3:21:e5:91:f2:f4:6b:cc:d5:9a:e4:
                    21:4f:37:ca:ac:5e:f6:27:39:12:11:23:a5:34:8d:
                    a3:e0:d7:29:71:07:d6:11:45:e9:e6:9b:3f:4c:c7:
                    3d:76:43:d8:49:e8:33:67:75:1d:9a:98:a6:eb:84:
                    1e:5f:60:47:25:ed:a2:0a:07:51:eb:c7:83:45:dc:
                    ca:f8:c0:b0:da:b0:88:65:04:60:d7:32:43:4a:18:
                    61:f5:65:ac:27:6a:64:b7:dc:aa:ce:ef:f5:9d:35:
                    8a:ff:0b:b4:9a:61:b6:7b:f0:bf:3c:c2:25:71:75:
                    c2:df:3d:fd:b5:56:46:a2:e0:92:fe:70:ad:4c:d6:
                    2a:9f:ce:bc:bb:e9:ed:f3:06:03:42:9f:33:23:f9:
                    21:35:34:19:af:4a:e0:45:22:f0:95:6d:5e:09:c7:
                    22:51:00:91:da:d4:36:ac:0b:00:17:ef:a0:39:e1:
                    69:49:06:d1:07:76:ac:7a:e5:3a:d9:3d:82:8e:56:
                    c5:12:ba:aa:28:36:e0:ba:81:4c:b2:b4:4e:b7:2c:
                    47:d8:0d:9b:a6:f7:03:c0:4a:a9:87:4b:22:08:6c:
                    e2:c2:0c:d0:c8:a7:26:32:a2:3e:6f:f2:ef:4b:31:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
            X509v3 Authority Key Identifier:
                keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:eb:f5:c8:5d:c5:68:78:ce:06:2d:43:5b:b7:d0:ac:e3:
         88:cb:6c:22:dd:8a:41:84:0b:f7:69:38:28:6a:07:9d:74:a2:
         4f:3a:a8:bf:7f:01:1a:42:40:f9:02:db:c4:84:fe:0b:13:5d:
         9d:2d:45:ad:a1:1a:ed:a6:93:b5:c0:b1:b4:d4:9d:46:bf:d0:
         a8:76:ee:fd:ce:26:5d:53:9d:2d:12:e2:61:52:26:c3:3f:e6:
         f1:84:f1:a0:59:d8:50:9e:8d:d2:aa:70:c6:d6:d8:6d:d6:f6:
         fe:5a:f2:3c:b1:ae:31:b8:80:5f:3e:a3:27:4c:01:69:c1:b1:
         74:45:59:a9:9f:fa:2c:04:24:ff:b8:cf:b1:09:2f:23:94:95:
         e0:b9:f1:8a:c3:64:3a:ac:c7:96:fd:7d:e0:4f:90:cc:48:1f:
         5b:6c:64:c9:d0:d9:7b:1b:92:9f:cb:c1:55:86:54:95:37:28:
         2e:4d:4f:12:f1:a1:3a:d5:48:6a:d6:f4:ea:16:37:87:4c:3f:
         30:27:60:c1:0e:63:db:6d:1e:0f:3e:c7:dc:be:75:7d:ff:95:
         1b:1c:b2:b2:a0:37:08:3b:9f:a6:52:94:0d:24:cb:80:7b:a1:
         bf:91:7e:0d:07:3a:09:ec:90:8e:93:74:80:f0:54:22:77:41:
         c9:a2:ae:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:03:58 2024 by rpki-client on console-ams.rpki-client.org