Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
File:                     nUQardI5rZJgEK_E2yBFTvLEsME.mft (raw, json)
Hash identifier:          /ZHiCZ89uTJtjnsDAOwYFJ+DO53psbCw6UIwTM6s2Nc=
Subject key identifier:   01:25:9E:C8:F3:24:14:A5:F2:80:DB:DA:54:9D:F1:6C:0F:13:C9:22
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Certificate issuer:       /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial:       0BF0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
Manifest number:          0BE5
Signing time:             Sat 15 Jun 2024 17:07:35 +0000
Manifest this update:     Sat 15 Jun 2024 17:07:35 +0000
Manifest next update:     Mon 17 Jun 2024 17:07:35 +0000
Files and hashes:         1: L1IpWUhVfDKAKUSBP9odvzlMRU8.roa (hash: CmDDjiCQqgnYxS4Ia/iQEmI5N1PT0nNJZhSlsK0PVh8=)
                          2: L6FF2a2XhxgMiraYAjzfkSgUPeE.roa (hash: IwOh/XjdbTAcvY3/D9wmhXA0nOrl3PVezNhJ/n9Ypjs=)
                          3: nUQardI5rZJgEK_E2yBFTvLEsME.crl (hash: Dlf7eIM3lwoFcGerVlYsqBVjzENweNyggTwiDx4EYao=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Jun 2024 17:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3056 (0xbf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
        Validity
            Not Before: Jun 15 17:07:35 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=01259EC8F32414A5F280DBDA549DF16C0F13C922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:71:d5:4f:ae:e9:72:e7:f3:24:3b:75:14:
                    85:e3:64:05:ca:a8:61:02:db:10:07:ad:68:3e:b1:
                    8d:de:0a:78:34:02:30:b8:ce:be:66:6c:82:a0:25:
                    fc:3f:bc:cd:93:21:c0:36:79:95:48:ab:fb:8c:39:
                    3f:19:e4:06:f0:ee:a4:1c:ca:65:7e:d3:53:6f:99:
                    b7:48:af:68:b7:bd:84:42:82:62:41:e9:c4:09:a7:
                    ea:e7:56:38:f6:47:52:ba:4d:34:80:3f:ff:fd:9e:
                    9d:ad:3b:58:62:3a:db:6b:42:af:55:f9:17:0c:41:
                    f5:47:80:f0:6f:81:c5:8b:96:0b:7b:ab:4d:fc:49:
                    5a:c7:34:6a:96:bc:90:b3:1b:13:d6:fe:7a:7a:84:
                    66:b1:d4:18:cf:04:91:73:20:f9:e5:7e:8d:10:db:
                    6f:68:57:18:9e:b2:28:18:00:3f:77:e1:26:e9:bc:
                    fc:7c:75:2d:4a:d0:9b:e4:31:60:0f:ad:34:87:bc:
                    27:40:67:67:5e:50:94:34:ea:b1:71:01:a5:1b:8f:
                    e7:25:94:9f:24:b7:78:46:1d:39:87:93:b7:88:29:
                    b9:d8:ca:42:43:d3:17:3b:36:2b:78:8b:d6:fc:cd:
                    16:0e:6d:5e:e9:c0:48:ae:9f:2f:42:ed:57:f3:f9:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:9E:C8:F3:24:14:A5:F2:80:DB:DA:54:9D:F1:6C:0F:13:C9:22
            X509v3 Authority Key Identifier:
                keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:c3:c0:32:69:5b:90:6c:dc:07:b5:32:20:fc:87:5a:0f:
         7b:d9:1a:97:88:8e:88:b6:5c:b5:38:39:05:29:f0:db:eb:7a:
         58:9e:f5:5a:27:39:7a:96:22:58:17:61:73:1c:f5:f5:7f:fe:
         a1:a9:21:cf:ee:14:05:a3:63:1e:4a:b1:3b:c3:7d:fd:da:61:
         88:b3:4f:74:74:50:80:b6:bf:65:ea:a0:88:15:72:b1:bf:21:
         1f:f8:bd:ca:de:bb:0b:79:3e:f2:56:19:37:d6:7f:ee:bc:b8:
         2b:12:34:42:ab:7a:82:48:e2:6f:e7:99:c6:2a:19:dd:9d:a7:
         52:f8:46:60:5a:86:f9:a2:c1:7a:c3:00:30:a4:36:7a:6b:aa:
         e1:70:9d:35:08:be:0b:24:2a:f0:95:16:36:47:28:73:fb:26:
         cd:7f:df:3c:8c:0c:b3:78:3e:eb:e9:45:da:ad:c9:14:37:3e:
         2c:3e:ab:60:37:4a:5a:8d:78:c7:b9:93:67:23:20:b2:c2:e5:
         f3:70:4e:f2:b8:37:f8:fa:95:03:79:25:de:aa:ca:b6:bb:c4:
         ed:7f:18:b0:bb:9b:b6:54:4c:69:e8:82:97:26:83:04:8e:c8:
         79:1d:fd:e7:16:f2:20:30:44:ba:98:aa:48:5f:40:da:e4:0b:
         7a:a0:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:59 2024 by rpki-client on console-fra.rpki-client.org