Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
File:                     J-FpnGz713D5Q6a9849r9IG7Hpc.mft (raw, json)
Hash identifier:          AEnyzjHuBXvvD9kUfBeUO4WkrddPA4R1io0+jkx4Leg=
Subject key identifier:   AF:83:6F:2A:D3:D9:D7:CE:21:3A:CE:D8:1D:FE:89:A4:8C:53:46:3E
Authority key identifier: 27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97
Certificate issuer:       /CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
Certificate serial:       C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
Manifest number:          C7
Signing time:             Fri 07 Jun 2024 21:56:56 +0000
Manifest this update:     Fri 07 Jun 2024 21:56:56 +0000
Manifest next update:     Sun 09 Jun 2024 21:56:56 +0000
Files and hashes:         1: F2xsjrglnGwTYymytbaw8oVzlLA.roa (hash: UgzrxIymwXthM9QGM7gB6pt8ebqX8fAM/jfRWJCPTiA=)
                          2: J-FpnGz713D5Q6a9849r9IG7Hpc.crl (hash: SP3bgk2R2HFCndBVFOO13zi6EBmb5axYg9myt2UqTeM=)
                          3: ZAMB3bbvkByildCsSrGpsb936J8.roa (hash: V567CnXE/PRRivFHONKhSQqJv13qLIvGOgLmvaiXOwc=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 13:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
        Validity
            Not Before: Jun  7 21:56:56 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=AF836F2AD3D9D7CE213ACED81DFE89A48C53463E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:37:c4:1e:f2:a8:03:4b:82:39:bd:8f:b8:
                    7b:c8:6c:0a:ac:c9:11:e5:74:4d:a7:5e:d1:5d:15:
                    f9:ad:3e:11:e6:3a:54:d0:85:1f:67:3d:69:b1:14:
                    b4:cf:01:90:ff:78:6d:3b:bc:23:3e:a8:91:39:04:
                    e0:34:73:74:66:84:38:b8:54:30:4a:9e:c5:a7:f5:
                    68:3f:da:fa:de:95:79:cc:d0:8e:7c:d7:34:22:42:
                    80:a2:9d:3d:eb:ec:cc:8b:79:4f:e3:12:85:ee:db:
                    a6:bf:bb:32:d9:34:ae:eb:80:db:14:91:b1:11:4b:
                    dc:47:c0:6d:24:2a:54:57:f5:59:ef:2d:4a:b6:a4:
                    63:66:ce:17:9b:6e:c7:28:1d:64:55:4b:20:82:57:
                    62:10:86:14:8f:d8:4a:8d:da:5e:7a:ec:66:26:69:
                    50:33:e6:2f:76:8e:99:e3:ae:83:a7:d9:62:6d:39:
                    8c:8d:26:fa:29:da:98:19:84:2c:c9:1b:00:76:79:
                    b2:81:4e:1c:f0:1b:a7:bc:b8:51:95:4e:14:6e:d6:
                    7b:f9:55:68:fb:eb:09:98:8c:a7:f0:d8:a5:f5:d6:
                    c9:4c:2a:6d:c1:d5:f6:17:a3:fd:10:ce:50:aa:a1:
                    a5:21:40:db:c2:a4:e3:6f:46:23:ad:d0:4f:05:1c:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:6F:2A:D3:D9:D7:CE:21:3A:CE:D8:1D:FE:89:A4:8C:53:46:3E
            X509v3 Authority Key Identifier:
                keyid:27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:02:5b:f7:c3:6e:47:e7:02:c3:40:ab:9a:a9:eb:a8:c0:0c:
         df:20:bd:c8:a9:3a:f6:85:18:46:b6:ae:cb:29:f6:c2:4d:ab:
         cc:29:14:d5:e9:e3:24:ff:b8:60:cf:78:c4:c5:5a:3e:6c:15:
         0e:b2:cf:07:36:2a:56:94:55:1e:ad:2d:2a:a5:56:3a:d9:3c:
         8c:2f:8b:2e:d1:2b:c0:6f:c6:5e:6d:45:48:f4:e8:39:71:ca:
         57:fd:b1:29:79:9b:a5:83:cc:55:aa:f6:a2:c5:30:13:22:e3:
         60:d0:63:79:c8:18:e0:2d:36:d6:ad:60:00:18:5b:b1:0c:00:
         09:57:b0:96:ad:a7:73:09:21:e5:b9:76:27:af:83:f9:d1:b9:
         4d:93:88:15:68:04:00:db:d6:ef:4e:06:8d:a5:14:3a:e7:59:
         4b:c1:cc:19:75:c6:30:6a:2c:d4:74:4f:30:1a:c7:da:ca:5e:
         91:7d:37:4d:b7:54:0b:a9:a3:dd:cb:68:23:4b:ac:ed:1b:6f:
         02:7d:5e:29:ae:50:54:96:0e:c9:fa:13:c2:a5:00:fc:95:fa:
         ec:b2:36:c8:01:93:27:67:7f:8d:56:70:0e:84:b0:98:73:4c:
         fe:3d:01:9d:ad:e3:8a:6f:5f:6a:d2:2c:44:65:e1:76:8e:08:
         7c:e4:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:13:39 2024 by rpki-client on console-fra.rpki-client.org