Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
File:                     AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json)
Hash identifier:          jyRX7rdGHThkWx95sSwOFGGNvZVfQ1cBGGuToo8MuPw=
Subject key identifier:   37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0C6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
Manifest number:          0C0D
Signing time:             Fri 07 Jun 2024 09:51:09 +0000
Manifest this update:     Fri 07 Jun 2024 09:51:09 +0000
Manifest next update:     Sun 09 Jun 2024 09:51:09 +0000
Files and hashes:         1: 2n6EvR9AyN7tJnEFuXfQPCutSwo.roa (hash: SqELL1MKsuyqKm/6YJ8v1OwVJ4aQktx9YFZRaClYwAM=)
                          2: 5u1YZUjr_ReSzpbbvbULKkSKsfE.roa (hash: Pt2FW1S6kF3dC3vm9B3Nv99jvqi3sDnlIQg3D+3vtI4=)
                          3: 6len2J9YKh38BFfx0ApvDA5uTWg.roa (hash: uBNrp7RXFyhoMJJ26Vud3CefwIWz61vBg4KoaDd1SNA=)
                          4: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: +y0EzCEEtrPXecDygfPdSeA+lJJpoUHNXJx1+NIhZEw=)
                          5: AP267N5DqMfwP-PlJg32gbx2PHU.roa (hash: 6036tJlRXFdCeZIKX+K1swlcRqMDwgF69NQxakPMPx0=)
                          6: CMw0DXBNyL8TsKZakTda61IqXEM.roa (hash: g1wC7uOXZgxFjUkH4T6AtPgtTk4bbIaveID0pwV4jgc=)
                          7: Efmah4nE0RdwCpE6612_-cFOOIM.roa (hash: 7aU1q0gOzRmUbJXlISWgz7kP0Ay9yN5RXyDpFBoFxXc=)
                          8: GioVl2_S2V5w6qhAxegRNXH0pn8.roa (hash: A6ICUJGRIZ7mYuSWqALzxGhZyScJxoMFf+C92dkC4wg=)
                          9: LfBAesebvRGcmdOms-0oi_nrQXA.roa (hash: stx/qqAL4vVPTw/m9A20z+S2d4WOqjYWwiBIdT5gydA=)
                          10: LkiMompBHe9bDP16PLIBnu2_5U8.roa (hash: cMMdNRUZ9tX7SkOM9032qSnHIDX0cqbXF70AhHcN9fc=)
                          11: aJh2vWxOuViDmAytwFawGwvZta4.roa (hash: GAviczI61m3k/K7gdsF8C/cDF2Z7Bgj04hTbBn2zxMI=)
                          12: bxVDCtLywsPGgUCRrfVOj69hy0M.roa (hash: y6h5Yr7m6xZYHokEoBbghaOE1ZsIDcRK8VMLH9/7Svw=)
                          13: cab9WcAC5dFPCK7RS_kG2G3-uFs.roa (hash: N1gRN+9tdgDGvNVrohMiACYJfZqieYYqgiBDZ8BjiI0=)
                          14: d-ku3h2vRmi7h2hgQFO5L7DQAJ8.roa (hash: m6aAOhkuqD0Lp5Ju5BUYAM4N/hy07Fx1LMb05NrYQWo=)
                          15: ftq59rDXGGKuAh6UW8iPkxzGVwk.roa (hash: UO+9Kr162xftsMJBgpcvu8qrEe41dhprJp4jI2mW7PA=)
                          16: noXEI-g9xkX_XyOQcrMosdouIYE.roa (hash: eebArVfIRz3eYtB4lzjScfs/DPFeS4qfS1RvTawbLEo=)
                          17: oWOPw0oQqxZo3F7zZ-cKONZTDwM.roa (hash: Oeo8Ds/ELRjGNqkyjsgK3iIwv4PBsHPSnWmKNzXA/xo=)
                          18: qjFETbOBw695tdWwVyk3LP8wRCM.roa (hash: NgZelfajjP9Rrtw/4bHcbkW1x8v/KdPc93ya0/A5oQs=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 09:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Jun  7 09:51:09 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f:
                    e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4:
                    8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46:
                    c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14:
                    2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f:
                    bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f:
                    66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0:
                    fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37:
                    01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec:
                    03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df:
                    7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79:
                    ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e:
                    2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37:
                    f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73:
                    6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4:
                    67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b:
                    ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:ff:5a:cd:d1:bb:c1:d0:28:af:c2:51:6c:27:b5:18:2c:
         cc:c7:f9:3c:0d:d2:b0:83:5f:2b:f5:22:bd:02:e2:e5:cf:c4:
         21:0e:7d:07:82:a8:f1:50:ec:95:fb:e7:96:46:fe:2f:00:22:
         ee:24:5d:d8:10:3d:2d:5f:ce:65:32:3f:fa:35:66:59:52:2c:
         44:46:72:fc:6c:43:ac:91:84:8a:7c:b7:a0:4e:0a:95:16:e0:
         97:26:e5:d1:a6:95:2f:23:86:5e:a1:7c:49:e7:de:45:90:e6:
         e0:b9:d9:0e:1e:3f:6c:83:55:25:10:25:2f:e7:6a:d9:21:a7:
         43:68:f9:88:05:fc:f0:67:0e:24:0f:e2:5c:d6:c9:d2:32:77:
         5f:db:0e:bf:7b:b5:22:fb:f5:f0:5a:72:39:6b:73:20:32:01:
         e9:6f:18:36:4e:d1:75:fb:b8:7a:3f:dd:ae:4b:f5:3a:2d:2d:
         48:22:d7:de:2e:86:45:81:38:ab:72:ba:45:82:ef:d2:e2:1c:
         e7:99:9c:7e:ef:87:4b:61:c6:99:d5:dc:2d:cd:c8:0e:a6:84:
         de:5e:7a:86:56:ca:31:aa:d6:ca:a0:c9:4b:ff:44:21:73:80:
         b4:85:fa:e3:20:b3:0c:42:b2:eb:57:2a:0c:78:cc:93:77:0f:
         72:df:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:13:33 2024 by rpki-client on console-fra.rpki-client.org