Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft
File:                     zjfXyZGFo9msYRcY2nhVm26Zoxs.mft (raw, json)
Hash identifier:          4MfmijXp0RccnfBxCREeDLh+n18EsJEvzFqpf+k/1lQ=
Subject key identifier:   EC:85:16:20:53:85:7E:71:92:F2:BF:CD:72:57:10:01:D3:16:E3:D0
Authority key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
Certificate issuer:       /CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Certificate serial:       0E9F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft
Manifest number:          0E8C
Signing time:             Thu 13 Mar 2025 01:37:28 +0000
Manifest this update:     Thu 13 Mar 2025 01:37:28 +0000
Manifest next update:     Sat 15 Mar 2025 01:37:28 +0000
Files and hashes:         1: zjfXyZGFo9msYRcY2nhVm26Zoxs.crl (hash: fhZbGM5QLZ4cxp4mAFVqd5K/1ExIksWysa7okWJT9MY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3743 (0xe9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
        Validity
            Not Before: Mar 13 01:37:28 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EC85162053857E7192F2BFCD72571001D316E3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:93:18:da:f4:da:cf:2f:5f:b7:18:ca:88:
                    21:8f:0e:a8:57:46:2b:63:c6:92:30:75:2d:ae:09:
                    ef:35:06:1a:2b:30:fb:ac:9a:dd:cc:f1:8e:8f:08:
                    73:e3:0d:02:7d:aa:31:87:45:fe:03:d8:14:57:2c:
                    21:30:ac:e4:6d:ba:88:4d:29:e9:21:d5:ea:40:17:
                    30:a0:80:d7:3b:1d:e7:8b:3b:2b:a1:84:2f:00:b6:
                    c5:ab:d3:2a:09:e4:16:89:a4:54:7a:fa:57:10:12:
                    b3:93:c3:05:df:be:20:1e:79:58:3c:75:74:eb:85:
                    d0:0f:db:a8:cb:89:d8:92:a6:64:ad:8f:8e:0d:9c:
                    2a:97:1a:f1:c1:cf:fd:d9:86:dc:66:49:dd:83:12:
                    53:a3:05:49:48:84:05:48:27:56:aa:ed:03:6e:38:
                    90:b0:9b:23:c7:91:77:c4:88:b9:c6:3b:a3:14:ae:
                    fe:1b:04:99:63:1f:21:d7:94:ef:a4:60:dd:db:96:
                    d6:c4:1b:73:07:37:6f:7d:3f:f4:f3:30:9c:80:b1:
                    b7:3d:ea:46:4d:cb:21:58:24:41:3a:53:fb:86:5c:
                    66:90:67:61:de:ce:b3:11:25:af:22:19:ec:e6:a9:
                    7e:4d:ec:69:2f:c4:d2:05:68:e8:2c:db:93:30:63:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:85:16:20:53:85:7E:71:92:F2:BF:CD:72:57:10:01:D3:16:E3:D0
            X509v3 Authority Key Identifier:
                keyid:CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9d:d8:c3:e7:27:58:c2:cd:f4:81:55:22:cf:1c:d6:8d:b1:
         a5:e7:65:52:6f:47:f9:47:87:11:e9:7b:28:a5:bd:1f:99:95:
         8f:37:66:a9:12:57:b7:84:e0:47:f1:17:5b:57:d4:42:33:ea:
         91:ce:95:b0:4e:b8:22:39:b3:b9:83:44:37:fc:eb:70:67:44:
         16:6c:dc:8f:e2:e4:fd:38:df:c3:b5:96:af:75:61:4c:52:81:
         d6:b3:8b:8f:26:86:e7:a0:75:0f:e5:30:ec:2b:52:04:d2:d1:
         3c:59:f5:0b:83:c5:1e:52:b1:40:0f:dc:f2:81:2c:ea:15:cd:
         b8:2f:60:06:e4:f2:79:15:fc:2a:f9:eb:79:c0:b8:ed:03:20:
         ed:c2:e7:2c:23:d8:47:87:33:c8:ac:d9:1e:d6:83:0b:a6:eb:
         8c:68:78:fa:88:7b:4c:75:52:94:19:d6:4b:d4:35:de:1d:29:
         b5:ae:9e:bb:73:9c:19:de:22:34:99:35:69:33:31:0f:ed:0f:
         c4:67:79:72:77:c2:fe:80:82:00:19:5c:3f:13:55:ed:a3:1d:
         fa:17:0e:e2:91:08:d1:02:da:f9:fb:9c:3e:54:58:06:64:5c:
         2e:b7:cc:56:bf:67:85:2c:62:f8:f5:1b:d1:9f:b6:7b:eb:e2:
         d1:86:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:11 2025 by rpki-client