Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft
File:                     Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft (raw, json)
Hash identifier:          sGA8dT+gW376IfHkfEn6v+S6FI07KscPKJowLoViOQw=
Subject key identifier:   2B:03:D5:B2:71:46:0C:28:9E:91:60:F7:B4:B1:D8:36:0F:5F:48:C6
Authority key identifier: 62:3B:77:14:A0:38:27:FD:E7:D2:32:BD:8F:4E:01:A2:9F:B4:71:DE
Certificate issuer:       /CN=623B7714A03827FDE7D232BD8F4E01A29FB471DE
Certificate serial:       0B9B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Yjt3FKA4J_3n0jK9j04Bop-0cd4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft
Manifest number:          0B98
Signing time:             Thu 06 Jun 2024 16:34:56 +0000
Manifest this update:     Thu 06 Jun 2024 16:34:56 +0000
Manifest next update:     Sat 08 Jun 2024 16:34:56 +0000
Files and hashes:         1: Yjt3FKA4J_3n0jK9j04Bop-0cd4.crl (hash: Nsj2jYlVxW2xBC3STAedi3hBvQaSiImm6EJCZW1Frro=)
                          2: pBvfhiI1D7TYSnaMxWEpdn45UGk.roa (hash: pNLgf8SzMlbh2vygIB1+v2aGXsNSeP88PhUiQ5E8Dxc=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Yjt3FKA4J_3n0jK9j04Bop-0cd4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 16:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2971 (0xb9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623B7714A03827FDE7D232BD8F4E01A29FB471DE
        Validity
            Not Before: Jun  6 16:34:56 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2B03D5B271460C289E9160F7B4B1D8360F5F48C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:2c:f1:d9:da:91:43:d8:35:1e:08:c0:cc:
                    d6:db:f1:0c:31:e4:d2:63:6e:c6:22:8d:57:46:50:
                    f6:5e:12:96:a6:5c:15:6f:d5:0f:3f:32:cd:3f:23:
                    30:db:37:6f:34:07:ef:c5:80:ab:bd:98:59:78:e6:
                    f0:17:58:b6:45:b1:df:c5:c2:ad:43:e5:b5:f1:a9:
                    54:fb:45:92:83:ce:b7:30:1b:d5:41:b6:cc:b7:bc:
                    2d:1f:63:0b:83:61:b4:e1:ca:7e:94:b5:04:d9:a2:
                    f4:75:7f:40:05:e3:37:5f:61:b4:3f:46:f3:1c:2c:
                    ea:cb:a7:a2:08:66:6d:1a:e2:a7:e2:25:ff:fc:88:
                    3d:56:f1:74:6a:fe:13:75:75:5f:28:79:cd:8d:f2:
                    89:79:5a:76:2d:1a:7e:d2:d1:de:09:7e:06:ef:55:
                    7c:53:54:36:42:b1:c9:5d:a7:ba:97:0e:6b:b4:7f:
                    02:e2:7d:c1:68:b6:af:cb:5a:bc:1c:5f:47:ec:a2:
                    99:9a:1a:8e:64:62:35:cc:f0:9f:9c:2d:d6:a0:1d:
                    8c:7f:f7:73:47:d6:52:09:24:fc:f4:19:59:6c:8d:
                    ed:75:81:b2:be:7e:4a:eb:96:aa:34:84:ed:b5:6b:
                    67:6c:e3:0e:cc:c7:8c:de:8f:47:bb:80:81:f0:ce:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:D5:B2:71:46:0C:28:9E:91:60:F7:B4:B1:D8:36:0F:5F:48:C6
            X509v3 Authority Key Identifier:
                keyid:62:3B:77:14:A0:38:27:FD:E7:D2:32:BD:8F:4E:01:A2:9F:B4:71:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yjt3FKA4J_3n0jK9j04Bop-0cd4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:41:1b:60:c8:fc:45:9f:f0:29:76:1d:05:28:7b:09:e2:
         b4:2f:d9:37:15:23:38:35:98:ff:8b:28:95:fa:b1:1f:bb:dd:
         07:bc:14:97:78:d2:ed:54:be:c4:6b:69:fc:bc:e7:51:c4:b7:
         56:bc:38:c9:85:02:49:6e:6d:72:23:7a:d5:24:e7:d5:f7:ed:
         33:d4:64:be:71:be:84:e8:5b:92:ad:1c:6c:26:fe:09:99:50:
         c0:dc:57:a1:10:a2:7a:1d:2d:fd:d2:be:03:d1:2d:f2:4b:9c:
         31:08:ab:97:5f:30:f5:7c:2c:43:c0:c8:a3:b4:e8:21:ae:32:
         c8:0f:56:5b:60:b0:97:73:0a:dd:f3:06:18:4b:9e:12:4b:0a:
         0b:50:49:f4:10:4f:13:51:cd:d1:24:d9:51:31:64:18:fd:24:
         fa:0c:24:78:43:85:26:04:f6:0d:4f:f7:22:f9:9f:a5:59:c2:
         26:19:8e:2f:57:6b:bd:2a:93:5b:2f:a8:05:2e:a0:76:24:be:
         ba:d6:38:e7:e0:e9:d9:24:e2:22:4e:c7:de:98:b3:2e:03:b0:
         01:43:71:42:47:18:02:34:94:c6:c9:0a:32:81:01:7a:a3:97:
         e0:4f:73:d6:77:b1:78:67:0f:a6:b4:73:98:23:95:52:f7:97:
         8d:b4:83:83
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgICC5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjIz
Qjc3MTRBMDM4MjdGREU3RDIzMkJEOEY0RTAxQTI5RkI0NzFERTAeFw0yNDA2MDYx
NjM0NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJCMDNENUIyNzE0NjBD
Mjg5RTkxNjBGN0I0QjFEODM2MEY1RjQ4QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUUyzx2dqRQ9g1HgjAzNbb8Qwx5NJjbsYijVdGUPZeEpamXBVv
1Q8/Ms0/IzDbN280B+/FgKu9mFl45vAXWLZFsd/Fwq1D5bXxqVT7RZKDzrcwG9VB
tsy3vC0fYwuDYbThyn6UtQTZovR1f0AF4zdfYbQ/RvMcLOrLp6IIZm0a4qfiJf/8
iD1W8XRq/hN1dV8oec2N8ol5WnYtGn7S0d4JfgbvVXxTVDZCscldp7qXDmu0fwLi
fcFotq/LWrwcX0fsopmaGo5kYjXM8J+cLdagHYx/93NH1lIJJPz0GVlsje11gbK+
fkrrlqo0hO21a2ds4w7Mx4zej0e7gIHwzjaJAgMBAAGjggIBMIIB/TAdBgNVHQ4E
FgQUKwPVsnFGDCiekWD3tLHYNg9fSMYwHwYDVR0jBBgwFoAUYjt3FKA4J/3n0jK9
j04Bop+0cd4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFRDL1lq
dDNGS0E0Sl8zbjBqSzlqMDRCb3AtMGNkNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
WWp0M0ZLQTRKXzNuMGpLOWowNEJvcC0wY2Q0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVFRDL1lqdDNGS0E0Sl8zbjBqSzlqMDRCb3At
MGNkNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8wEEbYMj8
RZ/wKXYdBSh7CeK0L9k3FSM4NZj/iyiV+rEfu90HvBSXeNLtVL7Ea2n8vOdRxLdW
vDjJhQJJbm1yI3rVJOfV9+0z1GS+cb6E6FuSrRxsJv4JmVDA3FehEKJ6HS390r4D
0S3yS5wxCKuXXzD1fCxDwMijtOghrjLID1ZbYLCXcwrd8wYYS54SSwoLUEn0EE8T
Uc3RJNlRMWQY/ST6DCR4Q4UmBPYNT/ci+Z+lWcImGY4vV2u9KpNbL6gFLqB2JL66
1jjn4OnZJOIiTsfemLMuA7ABQ3FCRxgCNJTGyQoygQF6o5fgT3PWd7F4Zw+mtHOY
I5VS95eNtIOD
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:02:49 2024 by rpki-client on console-fra.rpki-client.org