Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.mft
File: JbrySpKi1ZFyp4qOBNHQHLY4K34.mft (raw, json)
Hash identifier: ts+x9fYruSfOyi9vw5Kmm4OvSw/7d+sUbcjtqdK7BlI=
Subject key identifier: 1E:84:BB:11:C6:71:48:7C:67:DD:44:EF:64:2E:CE:5A:8A:C5:F2:81
Authority key identifier: 25:BA:F2:4A:92:A2:D5:91:72:A7:8A:8E:04:D1:D0:1C:B6:38:2B:7E
Certificate issuer: /CN=25BAF24A92A2D59172A78A8E04D1D01CB6382B7E
Certificate serial: 1238
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JbrySpKi1ZFyp4qOBNHQHLY4K34.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.mft
Manifest number: 1238
Signing time: Thu 02 Jan 2025 04:01:42 +0000
Manifest this update: Thu 02 Jan 2025 04:01:42 +0000
Manifest next update: Sat 04 Jan 2025 04:01:42 +0000
Files and hashes: 1: JbrySpKi1ZFyp4qOBNHQHLY4K34.crl (hash: Gvw2/F4VvEN3GxISNericjCpH7fjq8AvfKB2iv9Hzsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4664 (0x1238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25BAF24A92A2D59172A78A8E04D1D01CB6382B7E
Validity
Not Before: Jan 2 04:01:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1E84BB11C671487C67DD44EF642ECE5A8AC5F281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:5a:75:3a:ba:18:da:35:79:1b:bc:ee:53:
50:88:35:2f:69:cf:a4:5d:75:6b:ab:71:7d:94:04:
bd:6c:5e:be:f8:0d:33:e4:49:df:b7:66:ca:93:53:
98:01:63:06:cf:b6:11:ce:6b:9d:b6:30:13:c1:22:
d6:bf:dc:b9:ea:92:56:11:e9:a8:3c:3a:18:f6:a8:
dc:cf:f4:cb:7b:fc:e6:99:3f:35:5e:86:b3:f1:b8:
d8:46:d6:ef:fa:38:04:5d:b2:94:ae:d3:fe:14:9d:
a7:9e:b4:ca:c8:10:2f:c4:bb:ac:0b:1a:db:52:a0:
0b:4f:0b:5d:45:6e:56:28:f1:e4:b8:e3:ac:8f:01:
b3:75:3f:b7:8c:be:96:7b:ed:01:fb:9f:b3:86:e3:
a3:1a:e9:04:71:9f:c6:66:31:27:51:a3:88:a3:83:
20:47:7e:1a:2d:8d:9e:b4:72:65:21:6c:e2:d3:6e:
a5:9a:1d:21:9f:49:06:ee:ca:12:84:08:7e:4d:3a:
25:68:6d:63:13:58:dd:99:f7:ee:59:6f:37:ae:57:
c4:2c:34:47:21:ed:93:26:1a:87:16:c2:09:08:a5:
fb:41:33:1e:ff:e9:e8:5e:42:ca:58:67:79:b1:3f:
09:e3:0a:b3:92:24:ec:c4:68:79:c6:2d:54:eb:a4:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:84:BB:11:C6:71:48:7C:67:DD:44:EF:64:2E:CE:5A:8A:C5:F2:81
X509v3 Authority Key Identifier:
keyid:25:BA:F2:4A:92:A2:D5:91:72:A7:8A:8E:04:D1:D0:1C:B6:38:2B:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JbrySpKi1ZFyp4qOBNHQHLY4K34.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:81:d6:ce:49:4f:86:74:01:e2:13:64:a4:fe:6b:54:bd:4e:
66:1a:07:ba:c3:85:d5:34:43:be:41:be:c2:5c:90:97:de:ed:
52:c9:7a:13:95:95:3b:fa:38:8a:59:14:67:17:1b:6f:39:bf:
52:a0:1e:48:af:84:84:49:85:9f:99:75:ff:23:f3:3e:94:79:
a2:b0:8e:28:02:b0:ee:99:ea:56:dd:86:69:c8:c0:02:70:41:
6e:40:6d:17:c0:39:e4:68:ba:46:97:98:39:3d:7b:98:7f:f4:
a8:0f:41:93:ca:15:fa:12:3c:f3:e7:b6:da:e7:4a:d2:96:2e:
23:9d:ff:47:d9:1b:74:10:c8:1f:fb:e8:2e:b7:92:9d:4e:ed:
a6:f5:57:19:45:a3:62:ae:3e:64:a0:f4:da:e4:a4:1b:c1:f3:
ba:8d:ca:a8:66:47:04:5f:bd:c2:51:07:48:fd:3f:b2:41:46:
a7:bd:85:61:52:77:4e:81:c9:1d:81:83:dc:0a:7e:e1:95:85:
bf:04:3a:e8:77:5d:e5:51:9d:04:64:8d:d2:a2:c6:8b:50:d8:
f8:03:26:f5:95:8c:d8:19:e5:ad:29:06:38:b1:a9:14:88:f4:
56:11:06:76:59:68:84:dd:de:cb:30:70:c2:87:36:91:23:89:
4f:a1:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:08 2025 by rpki-client