Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
File:                     Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft (raw, json)
Hash identifier:          x70ISYE6gFzd6TtqwkQDHVsMasBhEu8gkmcMsS0nOVw=
Subject key identifier:   76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       097F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
Manifest number:          0964
Signing time:             Fri 14 Jun 2024 03:35:16 +0000
Manifest this update:     Fri 14 Jun 2024 03:35:16 +0000
Manifest next update:     Sun 16 Jun 2024 03:35:16 +0000
Files and hashes:         1: 1GrjY_SVKrwBmc5AS6Xa-7i2N5g.roa (hash: IqRIsa9zwgem7JWx5xtIeKCiXKSuwXH7pa3hl7WYKZQ=)
                          2: 3pRvj3GebysOIHVYFGmH8flyiIA.roa (hash: 9IqL1nKCqPA7Z/Lwqyvh32eNASz+4u+beYJfEB7toQ0=)
                          3: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl (hash: Su4bEzIeZlwFbFXImaskidxwf2JyC1vDLTxArAhYVh0=)
                          4: XInZT1vi8KI79tft1eSI4KLTPd4.roa (hash: +VrNkbHj3zT5eHK3nLu9D7VMvn5bcNo4H2yKj41zmaE=)
                          5: zmOuG3h-67ivAsCMMgwFMwnSWLo.roa (hash: LVZiL/rSgwnjUANhPoGHi2SlTqx4MLzjPLFqLojJ7Ag=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 03:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Jun 14 03:35:16 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=76E7A08E8E67F4BA25AFA80D692B380CB1C7019A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:bb:0e:03:91:e0:51:5e:54:04:35:13:d6:
                    1c:90:13:e7:54:b0:c3:f3:41:11:e9:65:59:cd:3a:
                    a2:d9:ca:61:07:10:e9:c2:6c:45:b0:08:f8:12:3a:
                    b9:39:3e:aa:80:96:99:58:92:b2:aa:84:f0:9a:8b:
                    23:cb:98:0c:6e:a2:bd:67:e5:7f:d9:51:d8:8a:e7:
                    dd:56:ed:71:47:88:4f:fa:88:ae:ca:3b:e8:88:35:
                    b9:85:8c:c6:26:be:f7:5d:eb:39:1c:d4:a0:1e:2a:
                    d8:e2:8b:df:81:b3:cc:be:16:d3:5d:a5:c7:9a:0e:
                    4c:44:d6:8a:ad:2b:ad:42:6b:ce:8f:44:74:7a:94:
                    e1:b5:53:ee:69:53:73:c6:21:26:a8:da:00:51:51:
                    f6:f4:35:4c:0d:9f:cc:d5:f1:24:5c:19:c2:99:76:
                    e6:1e:06:80:f8:f6:1c:5a:8d:93:0b:eb:52:68:d4:
                    c1:d4:e5:b3:d1:d1:ca:e0:8c:a8:1f:fb:9f:6e:fc:
                    7c:40:1d:e9:60:1f:0e:fd:ee:2f:ea:d9:54:ac:a3:
                    a5:cd:27:c9:c5:84:8b:53:7f:c1:17:7e:2c:e6:1e:
                    92:3b:f7:0b:39:35:7b:c1:41:91:16:10:0d:ed:de:
                    06:81:40:15:32:cf:bc:37:85:16:2c:de:09:5c:7d:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f4:5b:92:95:67:77:5f:a8:cf:5d:4b:2a:b7:7a:9e:76:3a:
         75:25:73:c6:d0:c7:00:0d:d9:f7:0f:e7:30:73:83:e7:9d:ae:
         93:9e:db:e1:c6:a9:7f:d8:7f:6c:bf:d2:71:1e:35:ea:3a:03:
         03:9b:99:b9:a7:08:69:9b:5d:31:88:9d:d7:6b:e9:2d:2e:c9:
         10:78:1c:4b:14:06:ff:7d:fc:ea:62:3d:87:2b:ba:93:80:e7:
         31:5b:8b:47:83:0e:99:02:8b:ed:ad:04:9b:33:04:a7:98:18:
         cf:c7:75:99:87:a8:2f:05:25:28:54:82:8a:d2:bd:b3:4b:a8:
         4b:59:8b:10:9c:bd:99:6f:92:35:f5:00:ab:c2:e5:c5:9f:ec:
         d9:b5:b8:70:e9:2c:98:c4:18:1d:a7:4b:85:75:84:a2:74:b0:
         25:fc:88:8f:91:a7:6c:cd:aa:34:f2:90:2d:c7:46:2a:35:09:
         e2:ba:fd:55:a6:33:40:e6:68:84:4f:93:96:be:bc:1e:37:33:
         76:94:e6:93:49:ff:0e:18:11:85:0d:1a:ef:bd:8b:bb:01:37:
         b2:bc:a9:81:59:d9:20:ef:a0:da:7a:d7:35:6c:0a:c0:52:cf:
         d5:08:ad:20:6c:cb:1e:24:19:5c:64:c2:9f:f1:11:2b:0e:35:
         1f:05:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 05:39:02 2024 by rpki-client on console-ams.rpki-client.org