Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
File:                     JX23uZGZdWlzZrcBT4z-KO82TnM.mft (raw, json)
Hash identifier:          Cei0JV/sGtejpywg3yXj2wCTpyLk8uVuqX+V7rFbLYs=
Subject key identifier:   A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       065B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
Manifest number:          05FF
Signing time:             Sun 26 May 2024 10:18:15 +0000
Manifest this update:     Sun 26 May 2024 10:18:15 +0000
Manifest next update:     Tue 28 May 2024 10:18:15 +0000
Files and hashes:         1: -TnV1iA7z5J59_AMsTLkrfjjAtU.roa (hash: VL8HiVMGqoAXsgFWG/Psef73BTnm6DpUhyYSNKpmds4=)
                          2: 15SY4_EQr9Pxw9VeCgnJGd-CS6c.roa (hash: f6qBkG9/oHuG6ZV8AcznjFJCgvGdAF6ifPhoipgNxDs=)
                          3: 2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa (hash: oJY6kNlNyb9TGbyfdgm6/JZK5/v4sKJIKoMARNbq3XE=)
                          4: 7uXpzfJflemFWgFDf_H8HDs3h4I.roa (hash: D9rhJcNUhOTUvqiaD9C+MK4XcpJigKas3saEwB+n8K4=)
                          5: 935ovYW6JYoDaeGQ3ZAYSBnoITs.roa (hash: YuDXiikEZbpa+2t2CJLyXr3l5Szr/tVbxtGUoMJfbgk=)
                          6: AI8DCJYrygDHvSuYWNDQm7Pac2c.roa (hash: dEXdtk3/DvxmW34Wr7TNW1IWtpuLx01dPC3wwZoYar4=)
                          7: BGnqfEjx6hBN0MKelC23m4luZVU.roa (hash: x6e3Ot3wUhA115YZgK9VloHIsdZjRNGcI15I5WkUlYk=)
                          8: FObQ5kmonelVBXupsV3vJJSF9dI.roa (hash: A0ybs+OlwV74Hqbt6CKFPcC77uWMpGEVuUcFK7v9LiQ=)
                          9: HY0TDNVtmOCr1NTIXLxswx-lcjw.roa (hash: d0HB10glckJKPKUMFOXknbsiG+aeCKJ3Djp0MdvEi0w=)
                          10: JX23uZGZdWlzZrcBT4z-KO82TnM.crl (hash: S1M6rL+3dXP7kUOrFOzT+DrOZReKzxd1vKG6iREsqb8=)
                          11: JtJXq7KfSfAzVivBaogtfzHhFOw.roa (hash: 4poF+K4SMH0pwdr5X2bARL/8kH5ZH6GJxnieotExgZQ=)
                          12: LOmiPkoEY3ESLJFkcuMSNt-SOWM.roa (hash: AgAj7qR/jxj25YjzMo1bix9Qb7ZTgBPiN/0qMReIOQk=)
                          13: OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa (hash: Y5O/kRkyDkNoZVGa2YFBu59ETabQeCL6RNbw1+kLBbg=)
                          14: Pta2IDo67GEz0WL2Xr8WxyGXiLo.roa (hash: hEy966rwvWNng5F0BB4APMPtpH6JVqpjwrEglJmBf1M=)
                          15: UA8BtC016ABZu8kbCsHf_-Rjsxs.roa (hash: Edb2t+wSi55cVWBD5fig+z/BsjM516YnVNmAqmahsRo=)
                          16: Vjw92keQNTj9qFADoRU-GelkVQU.roa (hash: cz7WE0IHeN+RMh8Tf7l5mXlJGs4VMwE35XcRBltZwEk=)
                          17: YUxygLnf3DbXvOqijfsmqsBv9TE.roa (hash: 32FwMqKzmI/VPpa1a6G/B47muw/EbIgixGD5mR6wQSQ=)
                          18: ZQsHbK53NiIc00xTfP9uUIMaXak.roa (hash: TdmJmSXgh1/ptU9azGGH9IKivDoiNQTECMCS2bGu5r0=)
                          19: _BKkiOtrPcYDgXsPH1_5JQ226OM.roa (hash: fXvq4SDjz2g03t7EGUR93SJ7kLimxzXkkFNYexBXnzs=)
                          20: dAxn3n4L-m77arOaIgshyPOH8F0.roa (hash: IU58FWAJ5FocumsnnJgO5ZUG6mMlMqiCK/NavrUV6Mk=)
                          21: dp1TzxHJJwfpZIif95e-vCDJk3E.roa (hash: z++fsUAeVNBmEGJ2Ok2NuCrYsVBQvBub3Lx9hnTRaPI=)
                          22: gbGsX62bB2j2eD1OpTlQ4jWt-7w.roa (hash: bqRMXWNacQduCv/eOVr0AKxjA8/neR0bJc4YVxvpOUI=)
                          23: iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa (hash: gcK7vHMcWl1akgykNS4OEN8/D7a9aEmD+Dq/WrnLjl0=)
                          24: ksRACS3hH_wG168ibtuGCAh8A0Y.roa (hash: Tk9oLzFbVDsHTjMWmw2gAepK7SXlzX6i++kTdbqvRDo=)
                          25: lzuCs6TKsS_EbjraDzg7I_Li3vM.roa (hash: yu31k4BWNziN4uwA5b1kfwTeF03clQVPfGAAXPFkE5I=)
                          26: m1GBigR8FgQ_-9XOXJKQjezXwrw.roa (hash: Qx3+ztYHGXb6xwxLl95iVdPv9n18su3lQxCJq6BOlTQ=)
                          27: rkEe_KWlcwB5uUZqlz9ukZj8GPA.roa (hash: F7O6KGfnSgDTXWIMHMshefEwLAEZr95oDl1A6zMHSnI=)
                          28: sJDQKW1oRlZd2p9TRmyuoKxCYeU.roa (hash: Ks0Ptd40z+7RW5VRjAHIosEHsLZv5CZo0TaW4tBnTyg=)
                          29: sweixy4Vr0-xBSCVvUVugk1HnCo.roa (hash: zDb/n9uFWQivQ5DLk426CpWlc4J41FUwqpdZfyPSu/Q=)
                          30: uVWDutr4BhpVCNeAmYZPFfQ7Rl8.roa (hash: +IODSutbSz2xKnXJGhLdenogl4HirX/T1cW8X6UPTrU=)
                          31: ud92Mym_pO_Rp4Ms_uLzSN-qYgw.roa (hash: dV8EimINUaOUf5sq1t4mXcMwE+9abbGa22gOhtPU0z4=)
                          32: ueaG-GePLpyOmDYDoAsY3ZQ2C74.roa (hash: huNj0H4s23rONhMSo+TW566PfxF0LqMbKHJFoLJ2IMQ=)
                          33: vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa (hash: pvHj/Lj5ZFca/VFiXVFMqw2MWgl2q0SpLAq47lHE+gI=)
                          34: yeThpwhYz9dK_ZnKc-djJ3gMQYQ.roa (hash: zAaosOVkVW6xHousWCGLeWUkg52tR7o+TBw/R6RgClQ=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 10:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: May 26 10:18:15 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A67BB601330E55E0318C079016EDDD96F671B476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:ef:4c:a4:e8:ff:a9:11:bb:d1:ba:46:bf:
                    22:5d:54:4e:fe:f5:0e:75:88:c5:c2:8a:ba:53:ca:
                    7a:73:1b:b3:23:f2:39:96:e2:ee:e8:c0:9e:57:52:
                    3c:3c:4d:60:f9:e8:e6:2d:e1:49:41:56:6a:6d:38:
                    76:59:5c:12:e2:93:37:31:e9:5b:b9:aa:9f:fd:80:
                    e4:45:44:3a:1a:70:73:a5:48:66:6a:c7:9e:94:a1:
                    5f:99:e9:ca:16:10:8d:5d:27:7c:ad:82:5f:9d:75:
                    70:c2:37:02:05:f2:86:1e:3a:74:26:76:e3:f2:c2:
                    ba:1c:ea:fe:51:c0:b2:8b:ae:c2:58:bb:14:6c:ac:
                    f8:61:95:6d:05:0b:21:15:61:48:bc:45:77:ab:b8:
                    1d:7f:67:69:df:39:0c:b5:87:1c:5d:58:8a:db:b5:
                    bb:8c:a6:27:4f:07:b6:00:aa:9a:1d:9a:c0:98:8e:
                    0d:f9:20:36:21:43:87:ea:c4:fb:cd:b8:9a:9d:14:
                    1e:bf:5b:4d:56:b2:f7:73:0d:62:e8:8d:78:c3:11:
                    66:b8:a3:ae:93:45:9e:0a:db:62:e6:e3:ec:bf:d6:
                    9e:e2:5e:48:7f:5a:09:c1:01:28:92:eb:65:9b:8c:
                    62:ea:19:09:15:d8:30:82:ec:0d:1b:39:9f:ee:06:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:ef:62:f6:45:3a:cb:da:36:c0:b4:c3:7f:27:62:fb:64:
         3a:c1:f8:28:b1:b2:dd:cd:38:d7:82:a8:66:d8:e6:aa:1b:16:
         c1:e1:b2:0f:37:ad:a4:21:88:17:85:ac:95:88:03:90:0f:63:
         1b:e4:66:75:64:2c:71:88:0c:36:91:bf:29:79:9a:24:b9:93:
         c4:a5:ec:0c:68:d3:a6:8d:7f:5c:01:4a:ab:65:0f:3b:90:a4:
         67:d8:40:b8:eb:4f:70:e4:8a:53:51:af:73:96:1f:25:9f:10:
         0a:2c:e9:d1:b7:51:5a:5b:51:fc:f3:8b:07:e0:e1:d7:63:0a:
         57:6c:07:44:ff:29:20:dd:13:53:89:58:f0:c5:b8:fa:b0:64:
         50:4a:e2:3a:82:a4:a9:ce:a6:e0:b5:46:76:50:8f:1e:81:54:
         2d:41:7d:11:10:05:09:57:dd:fe:48:53:49:6e:06:50:48:4d:
         86:a1:48:1e:4c:67:f4:f5:be:84:0b:ed:f2:79:f1:92:e5:ed:
         b3:02:b2:78:fd:ed:bd:b3:8e:a5:94:b7:97:57:f6:28:ce:87:
         ea:04:5a:e2:78:11:64:4a:62:e5:9c:02:28:46:6f:1b:e4:1a:
         ff:32:03:a7:31:d2:9f:e1:ed:5b:40:ef:20:fa:de:23:36:6a:
         0f:22:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 22:08:16 2024 by rpki-client on console-fra.rpki-client.org