Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
File:                     g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft (raw, json)
Hash identifier:          cHjPutLdXEpU++UQryhnKkP6p1P6C+FuCME2Xw828G8=
Subject key identifier:   99:49:C4:9D:C8:64:5C:E6:00:E8:EA:0C:24:48:76:20:0B:49:A9:EA
Authority key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
Certificate issuer:       /CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Certificate serial:       CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
Manifest number:          C9
Signing time:             Thu 06 Jun 2024 09:54:41 +0000
Manifest this update:     Thu 06 Jun 2024 09:54:41 +0000
Manifest next update:     Sat 08 Jun 2024 09:54:41 +0000
Files and hashes:         1: GtXcyR395XF5WfELYNEAeazNkHo.roa (hash: 0RUgMNwJhir+FEAmjIh/PG/ag6hg/hpt5Db8DkX2iM0=)
                          2: MrM6MRCz-EnogqS5wOgpSEz2_QA.roa (hash: NGQzn52y45eFrC/v4iztvxlJYRXhnUOg37905p6TCmE=)
                          3: g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl (hash: JY638A1Gp5Mga3j16RtNXh/N2iuBPjp/EXIW6LM6r9c=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 09:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
        Validity
            Not Before: Jun  6 09:54:41 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9949C49DC8645CE600E8EA0C244876200B49A9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:2c:7a:82:9e:91:78:70:e1:03:aa:dd:65:
                    79:37:3d:ca:eb:0d:6d:44:73:0b:2e:d6:d9:94:d6:
                    4a:2c:b9:2b:af:3c:c5:bc:3c:f5:0e:4f:74:a8:18:
                    06:2c:cb:4e:9c:85:f5:ae:22:b6:69:93:be:92:03:
                    6a:9c:b0:d4:ff:0a:47:2c:32:d2:81:b5:24:ee:b1:
                    49:88:5c:65:30:1f:37:b5:1f:c7:39:2f:d8:f5:75:
                    93:c6:33:af:54:d6:24:e3:79:79:9c:5d:5d:1d:65:
                    66:4d:6c:ff:d9:d0:56:ee:45:4c:3a:80:c4:06:2c:
                    b3:0e:a0:fe:69:29:db:46:f1:d1:1d:4f:e7:20:84:
                    0a:6c:a3:55:11:64:f3:8b:e8:1d:cd:26:bb:0f:d9:
                    9d:7c:78:30:55:fb:e1:05:f4:a3:36:c7:e7:62:1f:
                    d6:4d:47:b6:99:7c:7c:8d:e4:1d:31:99:76:94:c5:
                    3f:57:0f:d3:1c:02:c9:31:53:6e:0b:81:e5:38:23:
                    f1:54:cf:d3:3c:75:b1:36:07:28:96:63:57:fa:21:
                    ba:1b:08:0e:4c:92:ba:c9:d1:2d:75:6a:95:8f:24:
                    aa:b5:00:a7:85:07:22:0d:b6:ea:58:bb:80:fc:ce:
                    1e:97:8b:a8:72:1a:ea:a2:8c:b5:cb:4b:88:c0:4b:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:C4:9D:C8:64:5C:E6:00:E8:EA:0C:24:48:76:20:0B:49:A9:EA
            X509v3 Authority Key Identifier:
                keyid:83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ca:45:58:ec:2c:02:4d:af:b2:a8:51:d7:2c:2a:12:fe:88:
         f7:81:4d:91:74:97:29:34:e4:64:6d:37:bb:ad:57:28:26:07:
         c6:07:87:a2:9b:cb:4e:16:b0:58:97:a4:43:a5:6c:1a:5d:8c:
         ea:6a:f6:95:6e:6f:bc:99:ad:e8:fe:6f:42:4b:86:9f:a0:23:
         92:3d:a5:c2:cb:5c:11:c0:61:17:96:0d:62:dd:9b:64:0d:47:
         9a:7f:39:2f:24:bd:9d:9a:82:f5:fa:f2:03:12:4f:8c:91:95:
         0b:44:ff:20:b5:14:de:80:92:70:ce:e5:7a:ac:f6:67:7a:cd:
         a4:62:f5:2f:da:34:21:28:98:f3:e4:97:8b:95:b6:2d:14:72:
         6d:1c:9a:17:dd:16:3b:e4:62:71:e9:3b:df:52:0e:44:8b:c5:
         ca:d2:86:12:01:2f:04:f8:6c:7a:90:3b:25:b8:e5:f0:f6:70:
         a4:4e:5a:df:72:ee:9d:92:d2:19:8e:67:48:e2:81:b7:df:db:
         5f:ed:31:82:e9:f7:fa:b8:71:44:e2:d6:eb:f0:e4:b1:0d:41:
         4f:26:b7:1c:78:bd:1c:89:ed:78:53:d5:79:a8:41:6a:93:f8:
         62:29:31:45:c7:38:67:95:28:f6:16:96:e0:cb:b3:fd:db:e6:
         19:86:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:16:21 2024 by rpki-client on console-ams.rpki-client.org