Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
File:                     4aiMNNJG73wqfBrF_peyYrxIF44.mft (raw, json)
Hash identifier:          WEgmG7CrnbKwesOQbrJJgb86jC61dtuVA9/zPhdA4Co=
Subject key identifier:   44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0DDE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
Manifest number:          0C96
Signing time:             Thu 06 Jun 2024 18:19:55 +0000
Manifest this update:     Thu 06 Jun 2024 18:19:55 +0000
Manifest next update:     Sat 08 Jun 2024 18:19:55 +0000
Files and hashes:         1: 2ZYWp8pp_ODi27QiUZEHkEgxIHU.roa (hash: 4WZWcfQIVXx2b09uICdtqfQILTVgfSww6ErQbPgo/SY=)
                          2: 2xt72Uek6enenru6oxjpaEgp9zQ.roa (hash: vHy8CSMM8ZUuozTz0T1FgUA7rVqIC0eSbn49vbaZSAA=)
                          3: 4aiMNNJG73wqfBrF_peyYrxIF44.crl (hash: 5DQ3aRXiOkdjvfzC27riR29vTTfK0l0TMa/DUf+yDtw=)
                          4: 5_-fqeZhXvUkfpUz81FJIDmqasE.roa (hash: D3TdCTTGTmm7HwRERoLQfkaYJKEgODX2ii+O6TbnA94=)
                          5: 5_p1CsXCAIgP42QZHqubfRg5jak.roa (hash: Czms+o+m0LJcLQCVPCamWmxqvUpiLcZFtWodz9e/kFU=)
                          6: 6ZisdIOSqMwXNMjw_2lzW0lGM_8.roa (hash: JqT7eInOCp8Tl1APB4stClGikx3mDnV3XI0LxoRfRiw=)
                          7: 8qROE9tccFOYsCrRNJ8DDilDqx0.roa (hash: i6ZykbMbfKerRdj+O5iEuDzQKDD4B1bgyQ+/J4uvbDc=)
                          8: A2bY0Mrj8hhFAj3aKUMX_WPkB4A.roa (hash: SnbNkj9ArmLlTQ0roip7VImCyW/UQ5RYxqbcltU9eUo=)
                          9: AJlCm0HzLTIQDFp_6j21nPps1n0.roa (hash: LVfLVNZtYdLiymRyO6KEJsk+lviuMNRS5JnX9t+kuDs=)
                          10: CXOAv7boONDtx-8nx-hT26Csa6k.roa (hash: LqSTt7sGKQFsTBStevJQ+wK+fF33zaTjKBIr+M9psks=)
                          11: CZyEwQzW5noLJGOzFuy66c9qDWw.roa (hash: 1x/j2hFbePx+sBzOXIx/c3GKSRZr3jJG08zS9Ta19eo=)
                          12: HqEkJqdlMfWRRfBPeRjabeNGWOg.roa (hash: 5APafvfe754y83mh+NTfs18sjoICmbCxIjJRAji6IB4=)
                          13: JTGfJv_-H6LE72rWNJmp_pmlpWQ.roa (hash: bJb195jNBiKtHbus9jdATxekiekomT1JQxf9X/z3g6U=)
                          14: JZxpHSZ-7h8jNCgl6WC_jU7t26U.roa (hash: c58gvNnqZBay51dZYnvn86kaewW0mQKCLXWDaVxe7UQ=)
                          15: KTdmhAoZSSh6G5GPWM0pOiBPi6g.roa (hash: KGlsf4iD5tARL7dyqjyfV5+MuB4b0lQeYmt6OvcMwD0=)
                          16: Le_ChCY3zQgyD9id9Le2FRh_8ig.roa (hash: Q79wnFG7M+GD2ZEZn5yqY9qbuPLS0fdUiKHn2XDwSRM=)
                          17: MAsgklt8iE4iSa5WJYz8wd1TV8I.roa (hash: tl19YtyU9+09E1HI+p24UTUYGd2YCyyNY9B3tqvSG1k=)
                          18: N5HqxTO32YIXYM8vLGSUE_ubAvM.roa (hash: EgrAY9NHsy1CQqXHl5PdxaoF5mZ6cFeCS2SznbTDZsg=)
                          19: Nrlwk7P3Wsjr7F5Qc_bX3d9sHLk.roa (hash: CIx4NVIyxHAnKsyxBhhCdPJr4WoE6hrAtYYPvX6J5Nw=)
                          20: OZGT-seRqR5Iz7VnNBrAKMBVfUk.roa (hash: 4ADhL/rn+sld1SJfdgJc9kFvYA2Jk7Kv577Xtlitvx4=)
                          21: PG9t06q-9uWkIRf4Q-hVm5AZN90.roa (hash: bGD+amibBgX8UeGcmITT7NOv8ry0wGqmSCCHkyghw4U=)
                          22: Qj3bBCOl6ao7PjRyALMwmPXb_Ps.roa (hash: oIUvXXYm7v/W+Qg1d8omWr3XUycRDXppRoodBbz8UCA=)
                          23: TR3EMlES0KBKVLBXb8TVyQk_X-Q.roa (hash: bbY64dK5pyrEBR8VPAiKJkRXeuwKw7999fmR7U4lHGQ=)
                          24: W-2htBHJvPSiMeOhBw33gT50oak.roa (hash: hO7zl2e93da/jBNfWlkYIyalW6pRFXgBolR7JdmrQks=)
                          25: X2y9Ws_3FArLWdnP-u4zZPL8BbQ.roa (hash: LtSi7LxUPZehm/9OwOdHc5u9jsZB2yNC4tYGB3aOg88=)
                          26: XozROPMbiGoT3Ymg1OSGqMzn2bY.roa (hash: 09/G7iDK9iU0CRHz5BnXKI1SeBEJK+c0nbNpNeIuXJI=)
                          27: YQvAWktT-b5VdMOV0TE10wtcQkg.roa (hash: 4QBTePFJP+IilAMyTvxwLekdWD8SrV6sGntLq921YzQ=)
                          28: bnTPk-zsjSXmAOpoEei5XMafV-Y.roa (hash: iaN2L7GNR4vZnks4Yyn3/4fHAV1T4id/pzPT+U/P83Q=)
                          29: cvInd9cv_B2L1W7hFHjTHTqIayI.roa (hash: O77U2BON4s7RJuYob3PFyqI0CUk1zRaG+HeAljH1SKw=)
                          30: d9ZHTTsFovtDwd5tLFGbdRK1kfE.roa (hash: bbfgxdauLmw+Cp0qEVAqCE76KDhujfVgEg9V2Pb3cCo=)
                          31: e1QH0H9fyMMJQLccI-CyOivAa7Y.roa (hash: oBR4bO24GHoR8fB+M4jxWcRzpwni4qyZZJAP2ABZnR4=)
                          32: etdGQOYZrTU9GZJdk4jMXZQ-kGY.roa (hash: TfIPWITme6zfoUJcYXpZCkjiW5hnJstz3xDnSc8QBAY=)
                          33: fvEJsF4McvO7hEZN3YgHomfOLm4.roa (hash: plLCX9qFv/eH9TWw9V3eVZe8cpwptrS22X02zJZG+SY=)
                          34: geql-Htgll53bwUzo7oXjBvvlOE.roa (hash: 6mz1rcDDeVCNwpt9rtt9oMMDlW8j5gY/NZbhDEoAacw=)
                          35: k4IcmMSfoMqvnGmvToGZx1Za7jg.roa (hash: CkYh/48np1ZVLtvFCeoqwYLTA1t6BrLL/FW7T46tX/g=)
                          36: lxpnCLB_9PAdi1t-PwwjMMqHx_g.roa (hash: aLFm+1c5WwqcDClcgOd6yTml/6vJKrUZv280NJPO2f4=)
                          37: mX2m9yrP1kghmT3N5ZcfkNN-1oI.roa (hash: fq/KXW/JLPPKrpuKNXTgCxhIRNByaYQD9hYxT5phSG8=)
                          38: oTOPtHeU89SVTJb9W-UJqTrAluc.roa (hash: H7z9uh6GhUmqJwVT9p3SnmjWmrQUyLh0bzk9PahNIMw=)
                          39: olfDiP-rp18G3qu4_0yn449onQ8.roa (hash: zkplxlxrcBHTpVQzwH/56QAa+xFuRko+FWJNpyduoZE=)
                          40: t2DLn8fXBIULMCV3kl79V9-wbXw.roa (hash: Ua70UbqDnjQOjgRXHUrt+5temC+/VP6noJEohQVqiXA=)
                          41: ur2pgjE9-U_FBNL9bxOYNBMlQcA.roa (hash: 5eGohBLTpmCtQpfsiOOJuPDqOQWT6TLCd8/AGLtegjs=)
                          42: v_LerracFjqR5rJbr_eUhUiGM2Q.roa (hash: j9YNB1OgznYmjIyVIFblb+uONOh4kcBTChv+lpAMnPA=)
                          43: wCR1eYVu2XJj4neBWmZ4lbeEpR0.roa (hash: IDRbMeWi/HpJIYDQbFTsTmivfH+RAY//nNlZzQqI8KQ=)
                          44: w_kdilKg-b7bMi-GZWrIGI71zls.roa (hash: y2DkVUG3ck1zvUTq39gAJuYQXjF/u/eUowz8cZmVcyU=)
                          45: z9uO_NBIUvi1hDI1MkVnQV2nn6I.roa (hash: HxzL8/aspprzc4Df61wzZiRbHGQM3+e9zC7o+rMrjWc=)
                          46: z_ZjINkp3LLC7RvjtE0qG5SoZs8.roa (hash: u+eka+u3DX0a6TvoISMfnhFgiQauHq7LFl/fiBAK67o=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 18:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Jun  6 18:19:55 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=44D5A98A822C973366C197E758A744F3038278C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:b6:95:b6:4c:61:91:69:75:17:90:97:b1:
                    45:51:4c:eb:c2:b5:b7:40:78:d2:78:42:f3:1f:50:
                    89:fe:af:a3:07:52:ba:2a:a1:95:6b:05:f7:4a:34:
                    88:bf:d0:67:32:e5:fb:c5:60:85:5e:f3:32:a9:4f:
                    9a:17:c4:c0:fa:52:9c:1c:b0:c8:dd:6e:25:32:3a:
                    fa:59:28:1b:16:4c:e1:56:52:a6:d9:c2:00:39:3d:
                    a0:73:68:d6:a6:ac:1d:e5:b3:21:e7:84:61:67:f7:
                    57:ff:1e:d8:d6:88:c1:66:39:60:8a:92:cc:3c:c3:
                    ed:a8:42:28:01:ac:be:af:aa:82:54:11:e8:a9:39:
                    b3:80:33:94:18:22:ee:a6:b1:0d:8b:bf:77:eb:38:
                    e5:a5:d4:a8:79:79:e7:22:b7:d7:ca:81:03:95:05:
                    e1:b3:f3:57:81:a8:c1:bf:b0:cd:e7:62:43:2e:72:
                    6a:d0:00:95:54:1f:53:69:e2:2f:b2:6b:49:52:37:
                    86:8e:e9:a6:1f:b3:ef:a4:29:a1:0a:43:34:a4:99:
                    f1:90:32:a0:b2:a4:f7:65:0a:5e:91:70:8d:6d:ab:
                    a5:b8:38:d5:f0:5d:9a:bf:57:a5:c6:a3:85:7e:19:
                    15:f1:cc:ce:fe:72:9b:57:f3:05:5f:b3:24:bb:74:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:18:b1:54:96:ff:97:5c:05:50:08:b7:ec:ed:0e:67:aa:c6:
         6a:e8:88:09:e0:a8:03:66:d4:5d:b2:f4:57:25:fd:8b:77:71:
         9f:51:b5:15:da:47:16:b3:ee:66:a7:e6:66:e4:55:2c:a2:58:
         c4:99:63:ac:28:88:9f:f8:43:40:66:3e:56:55:fd:c1:9d:6c:
         0e:36:0b:be:ea:ed:87:32:1c:78:f4:e2:5a:e4:8c:4f:e8:19:
         f5:dd:3b:0e:1a:5b:16:c7:a3:27:34:7c:74:40:75:24:39:40:
         60:be:df:58:b0:2b:f9:ac:1a:ec:bc:94:c8:29:88:5f:5b:fa:
         97:e2:dd:e4:fe:ea:59:bf:f3:21:f2:ac:1a:b6:77:58:6e:26:
         58:a3:d1:f7:54:cb:40:f9:5f:39:a2:41:54:6e:91:63:dc:46:
         ea:da:b3:51:c0:7f:97:8f:8b:4b:83:a8:3c:cc:a3:17:61:94:
         f5:05:a1:00:58:6f:38:72:bd:89:54:04:d6:71:c8:13:09:bd:
         14:9e:bc:c9:d0:04:18:32:99:9f:a7:03:81:0a:96:93:bd:02:
         54:0b:03:72:d5:b9:b3:63:45:a6:2a:03:22:09:32:66:16:ed:
         07:62:72:b6:bb:a7:29:20:1b:b5:2a:8f:9d:28:69:75:3d:4e:
         40:eb:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:06:51 2024 by rpki-client on console-fra.rpki-client.org