Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.mft
File:                     JbrySpKi1ZFyp4qOBNHQHLY4K34.mft (raw, json)
Hash identifier:          +H5u6tytA7PtiRTUmffkuruI88x+S5C3CN0+RHhdnt4=
Subject key identifier:   1E:84:BB:11:C6:71:48:7C:67:DD:44:EF:64:2E:CE:5A:8A:C5:F2:81
Authority key identifier: 25:BA:F2:4A:92:A2:D5:91:72:A7:8A:8E:04:D1:D0:1C:B6:38:2B:7E
Certificate issuer:       /CN=25BAF24A92A2D59172A78A8E04D1D01CB6382B7E
Certificate serial:       11AC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JbrySpKi1ZFyp4qOBNHQHLY4K34.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.mft
Manifest number:          11AC
Signing time:             Thu 06 Jun 2024 10:05:29 +0000
Manifest this update:     Thu 06 Jun 2024 10:05:29 +0000
Manifest next update:     Sat 08 Jun 2024 10:05:29 +0000
Files and hashes:         1: JbrySpKi1ZFyp4qOBNHQHLY4K34.crl (hash: mSD68ygrY2QfrCE1z+esbVLjS5EuU8kdppexVkfwzbc=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JbrySpKi1ZFyp4qOBNHQHLY4K34.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 10:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4524 (0x11ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25BAF24A92A2D59172A78A8E04D1D01CB6382B7E
        Validity
            Not Before: Jun  6 10:05:29 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1E84BB11C671487C67DD44EF642ECE5A8AC5F281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:5a:75:3a:ba:18:da:35:79:1b:bc:ee:53:
                    50:88:35:2f:69:cf:a4:5d:75:6b:ab:71:7d:94:04:
                    bd:6c:5e:be:f8:0d:33:e4:49:df:b7:66:ca:93:53:
                    98:01:63:06:cf:b6:11:ce:6b:9d:b6:30:13:c1:22:
                    d6:bf:dc:b9:ea:92:56:11:e9:a8:3c:3a:18:f6:a8:
                    dc:cf:f4:cb:7b:fc:e6:99:3f:35:5e:86:b3:f1:b8:
                    d8:46:d6:ef:fa:38:04:5d:b2:94:ae:d3:fe:14:9d:
                    a7:9e:b4:ca:c8:10:2f:c4:bb:ac:0b:1a:db:52:a0:
                    0b:4f:0b:5d:45:6e:56:28:f1:e4:b8:e3:ac:8f:01:
                    b3:75:3f:b7:8c:be:96:7b:ed:01:fb:9f:b3:86:e3:
                    a3:1a:e9:04:71:9f:c6:66:31:27:51:a3:88:a3:83:
                    20:47:7e:1a:2d:8d:9e:b4:72:65:21:6c:e2:d3:6e:
                    a5:9a:1d:21:9f:49:06:ee:ca:12:84:08:7e:4d:3a:
                    25:68:6d:63:13:58:dd:99:f7:ee:59:6f:37:ae:57:
                    c4:2c:34:47:21:ed:93:26:1a:87:16:c2:09:08:a5:
                    fb:41:33:1e:ff:e9:e8:5e:42:ca:58:67:79:b1:3f:
                    09:e3:0a:b3:92:24:ec:c4:68:79:c6:2d:54:eb:a4:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:BB:11:C6:71:48:7C:67:DD:44:EF:64:2E:CE:5A:8A:C5:F2:81
            X509v3 Authority Key Identifier:
                keyid:25:BA:F2:4A:92:A2:D5:91:72:A7:8A:8E:04:D1:D0:1C:B6:38:2B:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JbrySpKi1ZFyp4qOBNHQHLY4K34.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COBBER/JbrySpKi1ZFyp4qOBNHQHLY4K34.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:85:60:78:33:51:c8:70:6d:4b:48:8e:64:8f:0c:69:52:ab:
         74:38:c1:03:65:b0:d3:69:8e:9b:a5:c2:1e:e2:89:7b:9a:24:
         8c:7a:c1:7f:ab:c3:24:b4:b3:d6:1a:fc:d6:da:9c:7e:37:f6:
         a2:01:ae:8b:42:2d:75:ae:d5:20:6c:02:6a:e9:c7:77:e6:79:
         0d:74:e9:9e:32:11:6c:f0:92:4e:cf:0f:44:e8:8d:69:1c:c2:
         5d:e5:ab:5f:4b:3a:7d:56:c1:bf:21:0e:86:2b:1e:fe:52:8e:
         52:0e:db:32:58:f3:c1:04:19:90:75:dc:fa:8f:f8:6a:c1:02:
         db:2d:64:59:18:95:79:66:fa:15:b3:e9:8a:ab:d9:68:13:a5:
         52:c7:69:ec:83:bb:11:c6:15:be:f8:cf:45:fe:9a:60:88:c3:
         df:cf:da:f9:eb:16:49:0c:4f:85:35:04:3f:c0:df:2a:d1:d2:
         9d:58:b9:0f:8e:7a:6c:63:44:bd:e2:8a:00:94:e5:04:8c:61:
         6c:ed:6f:29:75:ae:b7:4e:fe:e2:46:f7:33:fd:1b:bf:3f:a7:
         6f:da:8f:2e:93:67:25:df:2d:15:52:a1:13:e0:db:55:49:ec:
         ea:a4:14:2f:64:c1:f1:0d:9c:a0:dd:98:3e:b7:d1:24:ae:19:
         41:0c:7a:8a
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICEawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjVC
QUYyNEE5MkEyRDU5MTcyQTc4QThFMDREMUQwMUNCNjM4MkI3RTAeFw0yNDA2MDYx
MDA1MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFFODRCQjExQzY3MTQ4
N0M2N0RENDRFRjY0MkVDRTVBOEFDNUYyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCX2Fp1OroY2jV5G7zuU1CINS9pz6RddWurcX2UBL1sXr74DTPk
Sd+3ZsqTU5gBYwbPthHOa522MBPBIta/3LnqklYR6ag8Ohj2qNzP9Mt7/OaZPzVe
hrPxuNhG1u/6OARdspSu0/4UnaeetMrIEC/Eu6wLGttSoAtPC11FblYo8eS446yP
AbN1P7eMvpZ77QH7n7OG46Ma6QRxn8ZmMSdRo4ijgyBHfhotjZ60cmUhbOLTbqWa
HSGfSQbuyhKECH5NOiVobWMTWN2Z9+5ZbzeuV8QsNEch7ZMmGocWwgkIpftBMx7/
6eheQspYZ3mxPwnjCrOSJOzEaHnGLVTrpLvTAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUHoS7EcZxSHxn3UTvZC7OWorF8oEwHwYDVR0jBBgwFoAUJbrySpKi1ZFyp4qO
BNHQHLY4K34wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09CQkVS
L0picnlTcEtpMVpGeXA0cU9CTkhRSExZNEszNC5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSmJyeVNwS2kxWkZ5cDRxT0JOSFFITFk0SzM0LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09CQkVSL0picnlTcEtpMVpGeXA0cU9C
TkhRSExZNEszNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCH
hWB4M1HIcG1LSI5kjwxpUqt0OMEDZbDTaY6bpcIe4ol7miSMesF/q8MktLPWGvzW
2px+N/aiAa6LQi11rtUgbAJq6cd35nkNdOmeMhFs8JJOzw9E6I1pHMJd5atfSzp9
VsG/IQ6GKx7+Uo5SDtsyWPPBBBmQddz6j/hqwQLbLWRZGJV5ZvoVs+mKq9loE6VS
x2nsg7sRxhW++M9F/ppgiMPfz9r56xZJDE+FNQQ/wN8q0dKdWLkPjnpsY0S94ooA
lOUEjGFs7W8pda63Tv7iRvcz/Ru/P6dv2o8uk2cl3y0VUqET4NtVSezqpBQvZMHx
DZyg3Zg+t9EkrhlBDHqK
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:02:44 2024 by rpki-client on console-fra.rpki-client.org