Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
File:                     8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft (raw, json)
Hash identifier:          MGTL7ZJOIl030cjyVDJJWuSmKkJ5hAPm7xNFmiwK4y4=
Subject key identifier:   82:A7:EA:2D:39:84:7C:AA:F9:6D:A1:9D:BE:9D:BF:5A:38:DD:22:49
Authority key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
Certificate issuer:       /CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Certificate serial:       1387
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
Manifest number:          1376
Signing time:             Tue 11 Mar 2025 06:57:23 +0000
Manifest this update:     Tue 11 Mar 2025 06:57:23 +0000
Manifest next update:     Thu 13 Mar 2025 06:57:23 +0000
Files and hashes:         1: 8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl (hash: 5JaTKbQdJXtjz6/4Tkz0hzK8X9lrxIq5chEaSZI1hno=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4999 (0x1387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
        Validity
            Not Before: Mar 11 06:57:23 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=82A7EA2D39847CAAF96DA19DBE9DBF5A38DD2249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:ae:be:91:b9:b6:81:5a:40:6c:74:51:ba:
                    82:21:4f:c9:71:ec:2e:74:8a:00:b8:90:5d:5e:1f:
                    82:f3:89:ff:7e:db:63:8a:a9:42:68:34:70:00:28:
                    21:9f:2b:92:23:ca:1a:cc:65:87:6a:59:51:18:f2:
                    aa:2e:bf:90:f0:8f:61:83:31:a2:d6:12:bb:c2:9b:
                    2c:2e:1b:b8:e2:2b:d9:85:4d:b3:22:81:66:d2:03:
                    ee:2e:fe:91:df:6b:25:7a:c9:e7:c5:d4:27:ee:aa:
                    01:d6:f4:ce:53:34:5b:a6:a8:16:e7:a8:7a:0f:b9:
                    e0:a7:bf:8a:17:47:83:b6:30:f9:c6:d4:c9:02:ba:
                    0a:7d:55:73:dc:b9:92:c0:f0:95:25:dd:b1:53:0e:
                    30:38:ef:20:7e:b6:23:26:13:91:f3:55:01:9e:4f:
                    b0:23:d2:ff:72:6e:78:ff:77:2e:2f:d2:d5:82:ed:
                    e8:4c:3f:30:7c:a1:69:61:3e:12:e3:46:60:70:5f:
                    01:55:a7:12:ee:5b:ab:e3:c5:0c:43:20:4e:1a:42:
                    d5:57:9b:1a:79:1d:eb:dd:6d:7f:1d:20:59:41:0b:
                    b2:95:73:72:ea:ea:6d:be:09:bb:62:33:cd:62:55:
                    ef:90:4b:8f:c1:e6:c1:03:34:00:67:ff:7b:9c:b2:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A7:EA:2D:39:84:7C:AA:F9:6D:A1:9D:BE:9D:BF:5A:38:DD:22:49
            X509v3 Authority Key Identifier:
                keyid:F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:64:f6:ee:b7:7d:94:13:7d:da:14:12:26:1c:8b:5b:ef:46:
         33:ca:03:44:f7:d3:a7:09:2c:90:07:b4:ae:22:80:b9:f9:08:
         b2:04:e8:da:86:76:4b:8b:9f:bc:39:3f:54:d3:5a:9d:1e:a9:
         fe:f3:0b:2c:0e:f9:26:bc:76:a7:3b:81:b5:cf:4d:0d:36:67:
         58:02:cd:df:ac:14:f4:95:5b:54:13:bd:6c:29:97:ba:58:f9:
         9b:6d:f7:fb:64:44:16:0d:a3:c0:2e:18:82:26:43:a5:4e:af:
         f8:a8:dd:05:91:b9:2e:c8:43:34:d9:3d:56:7f:9c:6d:0c:4c:
         d6:6a:39:02:92:2b:ed:c4:c2:a4:61:04:85:eb:79:98:1a:29:
         0a:4a:d2:ca:13:5d:14:da:dd:3b:18:69:91:5d:6c:55:6b:42:
         18:c1:e6:08:3b:da:c6:a9:aa:5c:dc:a3:74:c1:4c:f4:e8:b3:
         e3:fa:e6:bb:b6:d4:f6:6c:a1:34:90:e8:7c:ee:ae:94:6d:08:
         ba:ae:68:e0:eb:a4:5f:79:98:95:8d:94:35:99:2c:69:a7:d9:
         2a:d1:b5:2c:9a:57:c8:fc:da:c1:65:7a:82:7b:8d:6d:e3:e4:
         94:af:c3:97:c0:d1:8a:6f:5a:76:b6:9f:a2:ca:13:24:96:8d:
         ba:28:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----