Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.mft
File:                     4ndJ6qVXvKVkWidePeCjr1NH98M.mft (raw, json)
Hash identifier:          FdtTPq/5DkfZLaJyfrT6yOkyAe75O0+j1xOhpQx8pbY=
Subject key identifier:   15:8D:AB:34:52:F3:A4:3E:73:54:06:39:2D:83:F2:D0:DB:1E:B3:09
Authority key identifier: E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3
Certificate issuer:       /CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
Certificate serial:       0234
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.mft
Manifest number:          0228
Signing time:             Sat 20 Jan 2024 17:34:08 +0000
Manifest this update:     Sat 20 Jan 2024 17:34:08 +0000
Manifest next update:     Mon 22 Jan 2024 17:34:08 +0000
Files and hashes:         1: 4ndJ6qVXvKVkWidePeCjr1NH98M.crl (hash: AXRcOjMEtb3Bkm1swhnGiEdTOAgWwacRNBccrNqBqX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
        Validity
            Not Before: Jan 20 17:34:08 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=158DAB3452F3A43E735406392D83F2D0DB1EB309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:c9:11:0b:6d:ed:11:9d:15:a3:97:9f:29:
                    d6:07:c1:05:7f:df:95:b9:fc:ec:81:f5:a4:a1:18:
                    17:3f:21:a2:5c:1b:b1:08:1c:ae:d1:14:3a:c1:23:
                    9e:3e:81:39:29:92:07:b0:20:31:7b:b2:b4:60:ff:
                    0b:e9:85:66:7b:d1:a5:b3:b4:bf:e3:36:15:17:b3:
                    e3:7e:9a:fa:02:10:c1:ae:8d:77:22:01:a4:b7:61:
                    cb:73:b6:bb:dd:27:f4:ee:fe:5d:cc:c6:b7:e5:b8:
                    6e:54:8e:02:a4:ba:6a:4c:fe:f3:70:68:72:53:58:
                    2f:53:68:e8:c9:34:6c:8b:af:2e:3d:42:09:a3:d7:
                    ed:4d:9e:be:53:16:0d:7b:4a:ab:87:ae:e8:e8:c4:
                    95:96:ef:26:1e:7f:98:78:2d:3c:c9:e1:fa:da:c1:
                    05:22:a0:c6:ce:a1:4b:70:61:2a:9e:c5:4a:f0:9c:
                    df:9d:36:c1:55:80:ef:c2:ca:65:25:42:5d:77:87:
                    05:98:e0:f5:05:63:4f:82:90:e9:55:7f:6c:a7:cf:
                    04:c5:87:62:cd:91:5f:40:6b:54:9d:90:33:13:cc:
                    6f:e0:ce:58:24:52:56:b6:64:f8:47:57:e5:0e:19:
                    44:2b:82:f7:49:68:30:97:f0:20:72:13:61:27:a0:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8D:AB:34:52:F3:A4:3E:73:54:06:39:2D:83:F2:D0:DB:1E:B3:09
            X509v3 Authority Key Identifier:
                keyid:E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:16:35:0c:45:07:9f:5c:30:ee:2b:94:85:a2:6f:62:4c:ba:
         af:13:5d:1c:4f:42:d0:fb:b2:3a:7b:be:79:69:89:84:a2:6c:
         48:93:ed:01:f2:61:4b:cc:3c:81:32:f2:85:81:e0:c2:b9:ed:
         7f:65:da:4e:1f:49:83:6e:0f:f2:11:1e:be:20:16:df:93:97:
         17:28:3b:a6:22:2e:fa:eb:a9:c9:89:58:57:89:d1:85:25:07:
         79:2e:ed:0d:03:5a:99:c1:59:ad:07:a3:92:19:ad:ce:b0:6e:
         0c:66:07:d5:c7:c0:87:3a:7f:2b:51:10:29:d6:13:f8:f6:3a:
         e7:11:9c:36:ec:d2:e2:57:84:41:42:79:3a:c6:56:86:74:ce:
         bb:c8:4e:ca:60:fd:0b:9a:8f:94:ae:5f:bb:80:d6:1e:51:c7:
         31:56:55:a8:3b:9e:c6:2d:0f:6e:1a:65:cd:f7:74:5a:d0:19:
         7b:06:ed:6b:c5:73:70:f6:4e:41:99:68:10:71:ec:7e:40:b6:
         aa:ec:17:64:72:0e:e5:c8:ff:2a:95:3d:c6:b8:6d:b9:7b:7c:
         05:cf:bd:35:77:ba:9f:85:de:13:91:65:f8:55:ae:8e:61:c8:
         67:86:d6:c7:f3:a4:3f:0c:39:7c:f1:6a:3e:0b:72:88:d5:5e:
         80:af:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----