Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft
File:                     yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft (raw, json)
Hash identifier:          ZRGjQh4ud86p3OMWiHWkO8Db0vnbq/Qf2AaYscFIq+c=
Subject key identifier:   2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Certificate issuer:       /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial:       0DC1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft
Manifest number:          0DAE
Signing time:             Fri 31 May 2024 16:45:51 +0000
Manifest this update:     Fri 31 May 2024 16:45:51 +0000
Manifest next update:     Sun 02 Jun 2024 16:45:51 +0000
Files and hashes:         1: 8fiJkI01K4sj2maHuUxny1ePyww.roa (hash: XwEbiYP1ziycMkScOfl9eK2vtX4tc5SfAVyP3GL7Z9Y=)
                          2: PNybdB8IcfzhHkd9sUTy2f0Z6oA.roa (hash: 11E+bn/peglEGdiwoCg29GoSBRGydqzx1b+8UhERGQc=)
                          3: aYG8Bi4Ntnwv2aedMcB9sn2bE3I.roa (hash: zCqeWOsd+cbrHtbgB3tztocMzSDhlUSX0CpAHHNJqd0=)
                          4: yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl (hash: yHuB14u/Lt74tUYG5ZD3jKBzLRqG0ZIr+3rWEKSNn+E=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 01:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3521 (0xdc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
        Validity
            Not Before: May 31 16:45:51 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2B0A22299F3D186B0FFF5D7474FC5E38D5A00AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:5b:cb:71:84:7e:97:e2:d1:b0:e7:e6:76:
                    33:a0:6e:d9:3b:30:81:a1:46:17:2b:6d:c8:d1:91:
                    13:61:9e:b0:9b:c4:52:5e:7d:d7:2b:ee:a1:d1:8d:
                    56:f3:ca:c8:e3:37:9d:04:92:c8:43:71:df:a6:ed:
                    99:5e:6d:42:9b:ac:13:d5:9b:d3:78:19:36:7b:41:
                    e2:87:db:4b:7e:cf:ea:2e:27:c9:f5:70:a2:cf:2d:
                    31:f6:2f:ea:a8:3a:9f:5b:c5:f5:f0:16:3c:09:76:
                    80:2e:09:71:ba:5c:ba:20:e4:af:e6:41:58:7c:fa:
                    1d:6b:ee:a6:c3:c3:7e:e1:64:fc:8f:19:71:e1:fa:
                    21:d2:25:b6:c3:c1:0a:4b:9f:cc:0d:fc:43:68:c8:
                    35:1c:f9:1a:aa:a9:8b:41:8a:e0:7d:a2:2a:0c:87:
                    45:23:71:f9:df:20:9a:95:4f:38:33:12:8f:5d:db:
                    42:89:5a:a7:be:40:87:54:88:c0:c0:9a:57:35:9a:
                    b1:c0:d4:ce:01:e2:3f:a2:8d:20:8a:d1:d0:83:8d:
                    0b:99:4a:dd:a1:c3:9e:cf:aa:5f:fd:6a:eb:fd:4f:
                    98:72:19:78:dc:d2:fd:6b:73:2c:a4:63:31:b7:a8:
                    91:f0:9d:c0:5c:26:36:13:90:35:2f:7b:1b:1b:bc:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0
            X509v3 Authority Key Identifier:
                keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:23:1d:80:08:6f:b7:92:a6:29:e4:73:93:96:66:67:50:9a:
         f8:ae:c2:a9:b9:08:c4:d3:78:e6:2f:03:42:a9:16:8e:2f:56:
         c5:9c:7b:9f:12:7e:2b:0a:cc:c0:4e:93:f5:08:c7:b8:2f:2e:
         9c:fa:20:d6:2d:b8:f7:65:95:48:a4:67:95:04:3b:d8:68:d8:
         2e:7b:4d:81:67:e3:c6:6b:37:7e:8f:b9:f9:6f:3c:d2:ab:55:
         e6:69:b0:e6:66:47:7c:99:33:24:bc:70:00:35:d7:dd:6e:b9:
         a2:46:3d:24:ec:0c:e2:27:fe:e1:95:ec:ef:e5:e8:d6:95:20:
         ba:9b:47:49:e4:55:d5:d8:8b:d6:32:6a:87:93:9c:53:5c:5a:
         63:9b:4b:8e:4e:87:da:3b:8d:c2:8a:08:81:33:f1:0c:49:bc:
         29:78:d9:5b:dd:1b:06:4b:23:0d:fc:e8:f5:b2:7b:97:78:6b:
         9a:6c:f4:a3:6e:37:0c:4a:d0:97:dc:a3:ad:fc:5a:b3:54:09:
         c4:1f:a9:14:c9:98:17:90:df:77:27:25:9f:2f:02:34:7b:cb:
         83:db:39:7d:45:3e:c2:c1:a8:34:47:80:e5:e9:6e:11:21:3f:
         2a:3d:5d:27:f6:fe:c2:8b:13:60:bb:5d:4e:55:52:20:46:d6:
         03:38:79:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex
QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yNDA1MzEx
NjQ1NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJCMEEyMjI5OUYzRDE4
NkIwRkZGNUQ3NDc0RkM1RTM4RDVBMDBBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCztVvLcYR+l+LRsOfmdjOgbtk7MIGhRhcrbcjRkRNhnrCbxFJe
fdcr7qHRjVbzysjjN50EkshDcd+m7ZlebUKbrBPVm9N4GTZ7QeKH20t+z+ouJ8n1
cKLPLTH2L+qoOp9bxfXwFjwJdoAuCXG6XLog5K/mQVh8+h1r7qbDw37hZPyPGXHh
+iHSJbbDwQpLn8wN/ENoyDUc+RqqqYtBiuB9oioMh0UjcfnfIJqVTzgzEo9d20KJ
Wqe+QIdUiMDAmlc1mrHA1M4B4j+ijSCK0dCDjQuZSt2hw57Pql/9auv9T5hyGXjc
0v1rcyykYzG3qJHwncBcJjYTkDUvexsbvHQjAgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUKwoiKZ89GGsP/110dPxeONWgCtAwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc
GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB
U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS95aHR4NzZ4dmFxUXdK
MkNjR0tjMG1DZGtWVXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAESMdgAhvt5KmKeRzk5ZmZ1Ca+K7CqbkIxNN45i8DQqkWji9WxZx7nxJ+KwrM
wE6T9QjHuC8unPog1i2492WVSKRnlQQ72GjYLntNgWfjxms3fo+5+W880qtV5mmw
5mZHfJkzJLxwADXX3W65okY9JOwM4if+4ZXs7+Xo1pUguptHSeRV1diL1jJqh5Oc
U1xaY5tLjk6H2juNwooIgTPxDEm8KXjZW90bBksjDfzo9bJ7l3hrmmz0o243DErQ
l9yjrfxas1QJxB+pFMmYF5Dfdyclny8CNHvLg9s5fUU+wsGoNEeA5eluESE/Kj1d
J/b+wosTYLtdTlVSIEbWAzh5XQ==
-----END CERTIFICATE-----
Generated at Fri May 31 23:15:59 2024 by rpki-client on console-ams.rpki-client.org