Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft
File:                     -V8KpO7jRvB3oM7sjQbMSY-bGrk.mft (raw, json)
Hash identifier:          8eQu2ZJb3s9XKzzoQRH/PzPHcOJ4SZGFv30gTV/ai04=
Subject key identifier:   24:14:73:4C:35:83:0A:03:BA:42:99:DE:E1:63:95:41:AC:B0:52:42
Authority key identifier: F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9
Certificate issuer:       /CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
Certificate serial:       8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft
Manifest number:          8D
Signing time:             Fri 07 Jun 2024 13:02:08 +0000
Manifest this update:     Fri 07 Jun 2024 13:02:08 +0000
Manifest next update:     Sun 09 Jun 2024 13:02:08 +0000
Files and hashes:         1: -V8KpO7jRvB3oM7sjQbMSY-bGrk.crl (hash: 5eGDfLKiKYCjnwkYfG4h791iR+/SVppA9AuRTDsd7wU=)
                          2: I1qDXlu_iHvMGV5xuVR3j8rzRVs.roa (hash: cmFLGS1MWW2CLldra4pqS95C11bUcdHF4af0UBFIiP8=)
                          3: StE-piNdnNtJ9mQyB7y0U929XPI.roa (hash: qobxeEv+dajR1ecHrY6h3UyJBvUSwRX11NveMEv9Uyg=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
        Validity
            Not Before: Jun  7 13:02:08 2024 GMT
            Not After : Nov 13 15:30:20 2024 GMT
        Subject: CN=2414734C35830A03BA4299DEE1639541ACB05242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:d5:b3:8a:3d:23:37:d3:14:31:17:55:94:
                    7f:f1:56:d1:e2:88:63:bc:6a:38:94:93:f1:44:23:
                    be:c0:33:0e:de:43:85:7e:a2:f8:8f:33:f6:89:0e:
                    4d:6e:7e:cf:3d:5d:e6:2c:dd:af:f1:1d:12:26:3e:
                    41:4c:9a:be:ad:c4:9c:bb:9f:c2:f6:36:ff:04:b5:
                    e9:ad:bc:c0:38:c6:04:02:9b:c9:0f:8f:c8:b5:97:
                    f4:d3:8c:04:14:6b:b8:07:af:59:25:85:1e:db:44:
                    97:8c:59:bb:9f:28:5f:e5:ad:c9:dd:90:d8:df:6c:
                    10:96:15:21:ef:d7:c1:8b:ce:a1:bc:17:eb:6d:e0:
                    a9:86:da:b7:95:fd:8c:ac:11:f9:96:92:4e:a3:c0:
                    3e:22:3b:65:89:c5:cb:d9:ae:d0:f3:a4:0d:c4:d0:
                    a2:42:22:56:66:47:49:10:a0:a2:21:b1:cd:7b:e9:
                    8f:30:7d:14:f5:33:a3:93:87:54:78:77:1e:b4:ed:
                    1f:82:b6:57:ef:f0:b4:d0:98:e1:93:19:20:52:4b:
                    62:34:ac:b8:4a:5e:f2:d5:f8:0a:55:37:59:72:b1:
                    e6:cd:66:f4:01:a0:b5:3f:ba:e2:14:f6:6b:16:69:
                    e1:6e:57:65:45:5d:2a:11:0d:48:9d:49:5a:59:9f:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:73:4C:35:83:0A:03:BA:42:99:DE:E1:63:95:41:AC:B0:52:42
            X509v3 Authority Key Identifier:
                keyid:F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:64:e4:c8:19:e0:69:3a:9e:5a:e8:6e:ab:9d:0d:47:38:f7:
         f3:59:d2:d4:8f:07:cd:5b:0d:54:0e:07:dc:f6:a3:ea:18:b9:
         33:40:43:30:4c:e7:0e:3e:43:38:81:22:f6:33:e8:bc:37:50:
         a0:5b:35:e8:9a:df:68:bf:7e:12:01:2e:87:03:2f:71:c8:a9:
         5a:2c:f1:42:62:d3:9f:49:07:6b:59:00:03:7f:cc:53:02:4d:
         db:7c:ba:4a:ce:a9:a5:81:37:b3:bf:b0:32:be:a3:45:9b:2a:
         aa:d3:94:fd:bb:51:c6:82:32:52:04:22:70:a6:96:75:6e:9a:
         06:f0:4e:36:2a:7b:0e:1f:4c:0b:a3:c4:6b:cc:7d:a5:17:60:
         0d:c0:0a:fe:94:a3:63:71:fc:92:92:54:85:d2:23:fb:ec:93:
         9a:7e:63:a3:d0:bd:d5:32:00:8d:37:a9:cb:c6:7c:62:9c:72:
         61:9c:7e:ed:47:dd:ca:68:3a:47:2c:05:87:e9:2a:1d:88:1e:
         c5:58:99:68:61:a2:4e:6e:90:11:26:a1:68:76:9d:17:5a:19:
         cf:ee:ba:a2:db:d2:db:73:21:13:5c:50:9e:10:77:0a:7d:f5:
         e5:21:40:a4:51:1a:8a:2a:3a:7f:a5:52:8c:b9:3d:77:08:89:
         69:08:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:16:21 2024 by rpki-client on console-ams.rpki-client.org