Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ROAMERMOBL/GTsJnr9Q1u3HukBwMWJLmdnboLM.mft
File:                     GTsJnr9Q1u3HukBwMWJLmdnboLM.mft (raw, json)
Hash identifier:          14Ebh+bDOWT/iMP3kGy2VmtIalKO3Beo43gesS25DcI=
Subject key identifier:   67:A6:90:8E:33:BD:46:77:52:77:2A:4E:BB:D9:AE:C4:A6:27:86:3E
Authority key identifier: 19:3B:09:9E:BF:50:D6:ED:C7:BA:40:70:31:62:4B:99:D9:DB:A0:B3
Certificate issuer:       /CN=193B099EBF50D6EDC7BA407031624B99D9DBA0B3
Certificate serial:       0DDE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GTsJnr9Q1u3HukBwMWJLmdnboLM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ROAMERMOBL/GTsJnr9Q1u3HukBwMWJLmdnboLM.mft
Manifest number:          0DDE
Signing time:             Thu 03 Dec 2020 08:25:27 +0000
Manifest this update:     Thu 03 Dec 2020 08:25:27 +0000
Manifest next update:     Sat 05 Dec 2020 08:25:27 +0000
Files and hashes:         1: GTsJnr9Q1u3HukBwMWJLmdnboLM.crl (hash: aM1f6c+pe4W260uB2/OOKp8PdzmARNJ1qPEK6yoG6So=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193B099EBF50D6EDC7BA407031624B99D9DBA0B3
        Validity
            Not Before: Dec  3 08:25:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=67A6908E33BD467752772A4EBBD9AEC4A627863E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:fb:05:65:fa:2e:d4:c1:d9:3e:fc:be:0b:
                    02:f3:87:e9:07:13:64:52:0c:34:45:25:13:b6:ab:
                    49:d6:b2:0e:50:25:6a:ab:5c:72:90:3e:83:5b:34:
                    01:dc:fb:13:fa:d3:70:27:3f:58:f6:e2:63:5a:5d:
                    68:d7:52:4b:a2:8f:12:6b:3c:5d:37:1f:5e:a5:54:
                    19:d6:51:9e:cb:59:47:22:60:a1:b1:34:77:87:4d:
                    d3:08:5a:0e:75:64:e7:b0:b1:b1:40:bf:91:2e:da:
                    0d:dd:01:0a:dd:93:ce:23:11:ab:41:ca:31:2f:55:
                    ba:ed:aa:cf:11:fd:87:08:23:c2:31:75:16:24:61:
                    06:b8:16:37:51:39:2f:d0:8d:ec:98:69:3e:7d:9d:
                    33:7c:08:cb:85:19:cc:05:df:25:26:eb:d2:a6:55:
                    d5:31:09:3e:0a:0a:c5:0a:aa:45:ee:4f:53:bb:3b:
                    03:0f:73:50:0c:d4:4c:be:a6:c6:02:7a:74:76:e5:
                    cd:a0:bd:3f:11:e3:5e:68:35:67:ad:3e:ea:f5:07:
                    e8:86:d1:39:c9:83:94:34:4b:82:72:47:f5:3d:e4:
                    80:d5:ae:73:95:18:6d:2f:aa:59:15:0f:1b:8b:8f:
                    80:79:d3:94:03:5b:1b:f6:4e:02:41:b9:e2:ab:d4:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A6:90:8E:33:BD:46:77:52:77:2A:4E:BB:D9:AE:C4:A6:27:86:3E
            X509v3 Authority Key Identifier:
                keyid:19:3B:09:9E:BF:50:D6:ED:C7:BA:40:70:31:62:4B:99:D9:DB:A0:B3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ROAMERMOBL/GTsJnr9Q1u3HukBwMWJLmdnboLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTsJnr9Q1u3HukBwMWJLmdnboLM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ROAMERMOBL/GTsJnr9Q1u3HukBwMWJLmdnboLM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:61:c6:85:b0:e4:ca:f0:04:4a:d2:c9:62:84:08:08:38:cb:
         1b:5f:cf:28:e5:77:07:00:2d:55:25:57:34:01:0f:99:10:88:
         4b:43:77:69:af:5e:83:b0:b2:d0:26:1e:46:ce:c6:67:79:6d:
         10:98:36:24:6d:f4:8a:bc:dd:07:db:49:36:88:5d:66:5d:c7:
         6a:31:3a:ee:3d:19:5e:02:1a:1c:af:73:f9:b8:00:44:34:12:
         01:f7:ed:15:9e:b9:35:81:76:56:93:8b:1e:59:92:23:e9:79:
         b6:69:29:1c:59:6a:7f:39:32:f4:5a:07:af:49:92:45:14:1d:
         51:b7:68:b6:ce:2d:f4:9f:69:75:cc:ce:69:71:ab:15:bf:cf:
         4d:97:54:46:6f:aa:e8:5e:e8:e4:98:54:43:cb:81:eb:20:9e:
         39:d7:aa:82:7d:ce:d9:10:17:77:bf:87:22:34:96:cb:6a:74:
         ae:0e:75:e7:70:b8:15:1d:32:40:45:e6:89:42:c2:72:72:be:
         d9:b8:41:1b:6e:68:5e:48:b3:f3:7f:2f:35:69:b3:23:f7:71:
         4d:d3:95:06:3d:9c:ed:41:fc:f7:df:fa:2f:2b:7f:68:96:85:
         21:37:7f:64:22:26:d1:d2:9b:32:45:60:cb:df:4e:79:fc:4e:
         87:28:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org