Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft
File:                     1PDdD0-4AQJdWG75mcXu4C18IFk.mft (raw, json)
Hash identifier:          qu8s6DmNWk2Qs9ebDHKDtzGq5SU02LAq9x6S3+l3HEk=
Subject key identifier:   36:66:64:52:32:0A:BA:DC:BA:A3:52:9D:6F:65:14:9C:19:94:8C:EB
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Certificate issuer:       /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial:       102E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft
Manifest number:          0FBA
Signing time:             Thu 17 Apr 2025 21:39:16 +0000
Manifest this update:     Thu 17 Apr 2025 21:39:16 +0000
Manifest next update:     Sat 19 Apr 2025 21:39:16 +0000
Files and hashes:         1: -6meSA_gYHH2GNus8etfLguxJGk.roa (hash: +0huFbIe0wVe/+59cUq7MutVavOjDW2LXLUzXLo8Bp8=)
                          2: 0fxMZr-xSDyNKJLdAzaUs77XPI4.roa (hash: BdU4v9HZmr4ueIZLLx7/NZkw0BJY9ylFy4145joG5Jc=)
                          3: 1PDdD0-4AQJdWG75mcXu4C18IFk.crl (hash: WM/LuYjukmjs65xLokczbPbPnEeNYXYi//zoZWFZGbg=)
                          4: Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa (hash: zMMaRyMSxfpE19/h+9HVfhEWN4zmgzH1mVw/R7zMJ6k=)
                          5: PhlE3e5xCgkmsLk8nVKhvc7xN9M.roa (hash: HKLsporc2jllNgpzy4+uuOzdDbmzNvvQlIPTMrEas2M=)
                          6: RZt8ik18y9atnUalzHkBomxnZos.roa (hash: cvi9K4iwLTSyWudTKK57hyiopJfPzAxtgw1EEddudDU=)
                          7: YPdc360PEFbWhqVvEyvpCKka3nA.roa (hash: 10K5Gw/UVEhmWYYssZijTApkxWDVY4Mqc0Kk1pUWEXU=)
                          8: eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa (hash: XihPeSndSy61JAi+Zwro9P2JuemF+3b89GbgcsvmWok=)
                          9: mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa (hash: Q3PKKLm+2lFbBPPWZDJx6s4Y08oGpPv83go4EVgOnM0=)
                          10: na900zgWs54EDVa1nBJKbOShrzI.roa (hash: 4WCjXfiXRT2W9l7U7IIGIQBxhUC8A1i9PUnnbX+kUz4=)
                          11: qZAnPuIsZ-wdbzdyou5tqpF40Zg.roa (hash: f2idFSznlDWbD+BndphmUxux6HJe+jn4cHvz2HPGs3g=)
                          12: s8CGOcAdc3AywWg5PdIJ3hNrQ64.roa (hash: QzsbOEzyGHyu+MaVCnE6ernqsIx6bRtycwY7gv3al5A=)
                          13: sz4M1ZiLPSJ6UI_Ya8frER0kXjw.roa (hash: drG0UFyFBp3trqOt1dwrpRu6xOJsYl6Csm+P43n1iHs=)
                          14: w4giOLeJgtwZBEclKCl9L2zpNqE.roa (hash: H4LPJK8YFwv9mpRc7i2sfXu142PvmyjG/+Tfg1lsVSw=)
                          15: z6GfaBOgWGWFbK9dKl0T1DdFjUg.roa (hash: xDcFnVzlYrK7jZYkbZb0iOoX57VyWnP7hfKUaiAkhP0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4142 (0x102e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
        Validity
            Not Before: Apr 17 21:39:16 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=36666452320ABADCBAA3529D6F65149C19948CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:3f:e0:8a:04:50:cd:e1:bd:8f:d1:d2:18:
                    a7:fa:59:dc:58:40:b0:51:8e:7c:c4:b9:db:b4:75:
                    20:9f:0b:49:4e:ba:d6:9c:77:37:78:c6:19:f8:50:
                    87:2d:2c:10:c3:b1:5e:29:b4:b5:b6:3d:c6:a1:f1:
                    e3:56:05:b7:ef:d3:b2:a3:dd:c0:db:27:86:74:dd:
                    5b:ad:28:4a:20:75:87:63:29:28:1a:42:ee:15:b0:
                    44:9c:11:e3:b6:43:6b:ec:56:c5:36:d5:5a:a8:56:
                    5b:64:e1:2f:b9:fe:13:75:ee:5a:5b:21:86:1c:21:
                    d4:65:cd:c4:43:ed:80:e4:88:1c:ce:1f:80:7c:29:
                    e3:fd:9b:a1:1a:f2:95:b9:8d:ba:31:c2:24:0e:da:
                    f2:4d:d3:51:15:cd:bc:c0:3a:89:0d:10:2f:32:86:
                    46:e1:1e:6f:30:96:90:f8:52:63:1e:8e:6b:b3:e0:
                    fd:61:d3:70:30:d6:5c:d7:99:57:eb:9f:34:bf:54:
                    02:af:ff:b5:ff:52:ff:d9:f7:d7:02:5b:31:b2:ea:
                    66:61:6c:fb:90:5e:55:4e:43:0b:dd:8c:d9:aa:77:
                    55:16:f5:7e:a8:8a:bf:6d:dd:52:db:77:e8:1a:1e:
                    75:31:2a:57:a9:da:6d:c7:4f:09:28:09:35:46:40:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:64:52:32:0A:BA:DC:BA:A3:52:9D:6F:65:14:9C:19:94:8C:EB
            X509v3 Authority Key Identifier:
                keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:39:7e:66:a1:0d:d9:31:18:05:ec:2f:a5:c8:92:e6:4c:
         a8:29:e9:7d:5d:13:91:48:cb:08:fd:7e:09:0e:23:f0:69:60:
         d8:d9:ff:46:2c:37:ff:c2:f7:f9:95:43:86:6c:d2:b4:13:33:
         e1:61:33:fa:d6:a6:16:2c:65:e9:9f:d2:2e:b4:91:49:59:e8:
         be:f5:a9:ba:35:32:e2:d4:66:35:64:d1:eb:bf:cf:b5:9f:98:
         d0:a9:08:f8:06:dd:31:54:e7:c9:17:04:fd:17:29:99:45:e5:
         6c:48:7e:3f:ee:b0:81:52:d5:76:4b:dd:6a:c1:50:3a:93:c4:
         03:03:3a:2d:d4:2f:13:bc:4b:b1:71:17:e3:0b:1f:ea:6f:22:
         4f:3c:e7:b0:5c:0d:20:59:93:6c:dc:dc:22:98:c1:40:a8:43:
         a2:ea:cf:8a:1e:63:40:7c:08:bb:7c:99:d0:9a:f1:25:33:c6:
         86:80:7f:53:73:c2:98:d9:9e:ef:64:2c:c7:29:ec:7a:b5:ed:
         68:db:0d:40:5a:4f:ab:0f:82:e0:ab:f8:15:7e:c9:e6:41:6f:
         e9:13:da:92:81:7a:cf:c3:eb:f4:01:ba:43:e8:96:4b:0f:ed:
         cf:64:d5:a3:27:f9:c7:7f:04:5c:52:74:5e:33:fd:48:96:88:
         fe:6d:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:27 2025 by rpki-client