Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
File:                     hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft (raw, json)
Hash identifier:          ERfOouPtro+I0lXvuHdeM8bTjn5J6ip9E2v8x2via4M=
Subject key identifier:   D2:C1:C2:AE:08:B9:E9:D0:10:1C:9C:08:E2:7A:1D:D2:B6:FE:55:4C
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0F2E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
Manifest number:          0EFE
Signing time:             Wed 20 Mar 2024 01:47:29 +0000
Manifest this update:     Wed 20 Mar 2024 01:47:29 +0000
Manifest next update:     Fri 22 Mar 2024 01:47:29 +0000
Files and hashes:         1: hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl (hash: LMn92f2cToTgNlydEfP/Uy5wsut9Fq5wxsRiThTQ6y4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3886 (0xf2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Mar 20 01:47:29 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D2C1C2AE08B9E9D0101C9C08E27A1DD2B6FE554C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:b8:9b:62:45:6e:b5:95:c6:a4:7d:3a:ee:
                    f7:f3:a2:e2:63:d3:5a:4f:c8:53:39:4e:0b:5c:82:
                    e2:14:85:25:d6:66:8a:38:f0:16:3d:7a:02:d5:85:
                    e2:dc:04:06:13:b4:d2:2b:f0:30:0d:be:3d:04:44:
                    74:c7:de:c5:5b:fe:b7:f9:5b:a6:07:cd:30:bb:f5:
                    1a:c2:19:d4:51:e1:c4:24:e7:0a:48:20:ed:26:a2:
                    18:8c:a9:e3:6d:f2:93:ba:51:56:f9:2e:db:b0:7a:
                    17:c6:93:06:0f:03:e2:a7:ec:e8:82:8e:e0:b2:ef:
                    fc:6a:0f:08:80:bc:de:21:98:60:09:00:c9:83:17:
                    5e:b4:1d:af:e1:a6:28:9a:2c:cf:c1:fc:67:62:d3:
                    1d:10:18:98:65:3c:28:eb:7d:69:9a:d8:82:e4:94:
                    d4:43:e0:3c:57:c6:09:35:e0:a5:84:97:50:93:12:
                    79:f8:0c:4a:66:1e:38:1f:21:e7:da:e2:44:87:ed:
                    ce:19:7e:63:5b:6c:16:43:b7:d0:ce:fa:ce:8d:27:
                    61:fb:79:1f:4d:5a:d9:59:3a:63:ca:e9:eb:2a:74:
                    59:e2:87:41:90:58:51:4a:28:c5:d5:00:84:51:53:
                    b6:88:32:b1:66:a0:c7:97:83:f0:33:a9:4b:6d:98:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:C2:AE:08:B9:E9:D0:10:1C:9C:08:E2:7A:1D:D2:B6:FE:55:4C
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:89:20:8e:8b:07:9d:41:6a:4e:27:70:20:82:2e:2e:aa:
         b4:5f:99:e9:18:f8:7c:69:16:c9:09:2b:1e:db:da:1b:d3:4f:
         21:46:9c:60:97:8e:d1:4c:37:7a:90:84:b3:3f:af:78:bb:b4:
         c2:45:f9:06:59:f0:47:fc:d4:50:dd:82:a1:07:ca:bf:79:38:
         65:3f:99:fd:b1:d7:18:36:96:5d:12:46:f4:2e:92:09:08:d7:
         c0:1b:86:ae:96:3d:e0:fa:a8:98:ed:f0:17:7d:49:fb:74:df:
         66:80:b9:3e:56:92:18:fd:7f:be:d1:08:ad:20:8b:85:15:5f:
         84:31:85:4f:cc:3e:8d:0a:ce:09:1b:bd:af:b6:51:84:2c:d5:
         50:12:5a:31:2d:00:e1:a7:10:d1:a9:d4:b9:ce:e3:5c:31:86:
         0f:3c:8e:75:30:5d:84:f7:f1:e8:73:1a:9d:c5:9e:d2:c5:5f:
         17:5a:4a:23:49:0e:8a:37:25:65:f1:4c:bd:06:5b:31:11:71:
         60:e6:e5:28:ca:b8:f8:b5:5a:59:68:5d:57:08:72:34:4c:2c:
         2e:dc:2c:ad:38:dd:e3:4f:3f:89:c4:fa:a7:7a:84:a8:c0:38:
         09:94:3c:bb:25:12:80:55:dd:71:15:a2:59:67:44:1e:60:76:
         f9:96:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:43 2025 by rpki-client