Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
File:                     ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft (raw, json)
Hash identifier:          gmZKqOGCkeLqCYzj/wnITldZqXy1odxPod3oZ4HIF7E=
Subject key identifier:   A3:7C:8D:4A:77:F4:C2:B8:41:AD:4D:E1:88:48:97:5B:3C:30:55:FF
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Certificate issuer:       /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial:       041B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
Manifest number:          0403
Signing time:             Thu 17 Apr 2025 20:39:14 +0000
Manifest this update:     Thu 17 Apr 2025 20:39:14 +0000
Manifest next update:     Sat 19 Apr 2025 20:39:14 +0000
Files and hashes:         1: -W7fPtnMMTg-UGEEmsUoALhK_Og.roa (hash: 8QP0n45B22KgkQYCNabzPBdm1dQAG/XS6O0q/zCRbzw=)
                          2: PpTS4TwkiFAlqc2vkL2LTTvUC7s.roa (hash: jWm5p/u7FXYha94p6E2bsPlJZTPTmnoO8xNghV4smZ8=)
                          3: ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl (hash: /OhvSE0YO8DHuB+zR5SFKr8XMWL8wdo6mzifjvBKTUY=)
                          4: o6wcyO6LeBJZAtlnCUjvTnsiSmg.roa (hash: 9zH0vpne1bl4ijcw+KDiRLmPDDUkhjKWIILtRj2JGmM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
        Validity
            Not Before: Apr 17 20:39:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A37C8D4A77F4C2B841AD4DE18848975B3C3055FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:05:b3:f4:a0:db:7a:7b:a7:45:fa:a7:56:
                    13:f9:e2:2e:52:dd:9b:a1:11:65:8a:61:5a:ea:65:
                    1f:75:e6:ee:86:e2:73:a3:5c:b8:5a:c0:be:e4:27:
                    60:71:da:e1:9c:ea:65:84:26:e6:86:f1:19:9b:ee:
                    43:3d:a2:fd:c1:11:f1:99:d5:6a:a7:00:d2:55:f6:
                    5f:7e:ed:06:8b:6e:10:7b:dc:dd:98:fe:3b:03:cb:
                    62:68:ad:81:59:24:5e:8e:4c:f0:4b:01:5b:63:a5:
                    7b:06:1a:dd:67:39:aa:49:d2:74:be:b7:c0:8b:9e:
                    0b:6c:05:40:32:b1:08:bc:81:ce:d1:e4:65:77:d0:
                    3b:09:d4:6a:d5:79:8d:0a:71:2c:1b:8e:67:5c:f3:
                    1e:93:e8:30:d6:b9:3c:5f:6a:d8:9f:3a:25:0e:99:
                    36:22:fa:d6:c1:f2:b4:24:c4:67:50:e7:8e:44:88:
                    53:39:36:b6:5f:1f:7f:00:b3:cd:e7:72:d8:34:5f:
                    77:d6:43:94:46:23:93:49:79:7d:cd:d8:e4:f9:ca:
                    17:87:30:12:d5:41:77:8e:c5:12:a0:1f:6b:68:59:
                    45:a6:86:6b:f8:ee:47:d5:d9:4e:37:34:64:0a:38:
                    fc:b7:a5:df:72:9f:dd:14:40:f1:c5:8b:42:95:b3:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:8D:4A:77:F4:C2:B8:41:AD:4D:E1:88:48:97:5B:3C:30:55:FF
            X509v3 Authority Key Identifier:
                keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:6e:64:51:25:16:04:4b:73:6e:b5:55:ba:bd:02:34:90:
         4b:b9:03:37:8a:e3:08:ea:c1:fc:95:18:c3:a4:7b:8f:f6:76:
         eb:88:63:45:d4:ea:2d:03:10:f5:8d:be:d9:6b:68:fb:32:96:
         86:f0:51:1e:f7:6e:68:82:9c:58:d2:d7:96:4c:0d:76:e1:d7:
         4c:dc:03:08:2d:1c:c2:fb:b5:da:95:b2:c6:d6:3a:91:73:67:
         fa:de:02:d5:e8:e9:7e:7a:31:2b:7b:6f:3f:a6:5b:b0:be:db:
         7f:06:2d:7c:6f:97:dd:62:36:fe:88:f6:76:23:b0:30:16:2d:
         26:1d:99:3b:71:43:24:11:b6:fc:f3:75:70:cf:c8:30:d0:3e:
         ed:bf:c1:2c:85:13:8d:f2:b8:ed:f5:78:61:d7:db:00:f8:56:
         cd:98:02:60:04:ac:a9:bd:1e:d7:6b:b2:5d:8d:6f:71:07:a0:
         24:f8:18:2a:0a:11:dc:50:ac:05:7f:13:3f:97:aa:28:5c:f4:
         6e:9c:46:06:ff:c1:22:e4:2c:24:84:8c:ba:01:a6:1c:88:ed:
         86:3c:87:7a:7a:c7:2d:84:13:44:79:8a:fa:3f:24:a1:9d:e9:
         6b:30:38:47:90:9b:13:5a:81:ca:b7:8f:c9:3d:35:04:32:6e:
         3d:4b:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:38 2025 by rpki-client