Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.mft
File:                     8iFjLTENCFqTkHmeWkn_8Y69_bQ.mft (raw, json)
Hash identifier:          0jOP5R6cT42YQRTNPu9fjYBfcD+t1uVgwpAbchI+1rM=
Subject key identifier:   3C:5E:0E:6E:AA:5F:39:FA:CB:16:A0:85:23:5F:41:20:D8:9C:CD:AF
Authority key identifier: F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4
Certificate issuer:       /CN=F221632D310D085A9390799E5A49FFF18EBDFDB4
Certificate serial:       11B1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.mft
Manifest number:          11AD
Signing time:             Mon 11 Dec 2023 08:56:42 +0000
Manifest this update:     Mon 11 Dec 2023 08:56:42 +0000
Manifest next update:     Wed 13 Dec 2023 08:56:42 +0000
Files and hashes:         1: 8iFjLTENCFqTkHmeWkn_8Y69_bQ.crl (hash: NH7bLwEg02Ndmc1Rl1bLnIp7FmXIoejcj5EV+q9mjM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4529 (0x11b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221632D310D085A9390799E5A49FFF18EBDFDB4
        Validity
            Not Before: Dec 11 08:56:42 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3C5E0E6EAA5F39FACB16A085235F4120D89CCDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:8d:68:aa:50:70:8c:40:50:3c:bc:d5:ee:
                    04:59:18:64:d8:b5:36:0e:af:59:f3:fc:18:f6:19:
                    b0:c3:6b:c1:df:2d:fc:f5:aa:b4:ef:73:52:fc:11:
                    28:5b:7a:46:bb:55:36:25:94:8a:d8:db:6c:56:79:
                    e0:0f:86:05:95:bc:ef:dc:75:26:8c:b8:37:25:73:
                    3d:e4:8d:a1:f2:1d:5f:45:ec:88:d8:0d:1d:36:a5:
                    2e:e9:6f:6e:30:04:ff:36:a1:46:55:8c:03:f8:db:
                    66:f5:86:ad:96:a5:b8:c7:a0:ff:03:0a:c2:7e:65:
                    15:15:ab:62:29:37:b4:a1:22:7b:2f:9e:1c:24:fb:
                    85:86:47:b5:ae:fc:ac:86:f0:fc:49:1a:02:1b:e7:
                    19:ec:f4:7a:1c:9a:92:29:86:1a:62:00:3e:c7:b8:
                    9a:c7:a7:ae:b2:43:7f:7b:94:f2:cb:dc:6a:14:5c:
                    b1:8b:b6:c7:a6:4c:b9:43:0a:28:9e:92:66:de:98:
                    41:41:e9:a1:96:06:e1:fe:67:a3:71:19:f4:57:3c:
                    a3:08:b9:0c:18:bd:9a:80:b1:13:1e:3f:9a:bb:a9:
                    95:0e:11:90:e3:f4:42:fa:40:d5:18:31:ca:9d:2e:
                    68:ed:6d:14:7e:03:01:12:59:9e:ef:8f:3f:e2:8e:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5E:0E:6E:AA:5F:39:FA:CB:16:A0:85:23:5F:41:20:D8:9C:CD:AF
            X509v3 Authority Key Identifier:
                keyid:F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:ae:34:1e:10:e5:e9:f3:13:6f:c1:97:9d:f1:98:bb:fa:
         a9:94:c1:c0:ad:ad:f0:1c:b0:4e:a0:c3:40:38:c0:6a:f7:b0:
         01:73:a7:3e:f1:d6:4f:87:e1:b0:d8:7e:25:81:5c:10:bb:f5:
         69:55:29:97:6e:bb:15:59:50:b5:ca:0b:73:71:25:a2:24:81:
         a6:cc:68:1b:63:b7:91:35:82:0a:2c:d4:d6:00:dd:ec:d3:f4:
         74:f5:d6:e1:55:19:68:49:20:50:ba:f3:fc:8c:e0:65:47:07:
         6f:3f:9f:e7:77:e5:9b:74:dd:5d:d0:cf:fc:10:74:88:56:56:
         ed:be:bf:ab:a3:dc:b7:5d:24:a8:4c:0b:fb:55:ec:e1:98:88:
         86:34:e3:74:df:f1:e3:c5:0c:50:8b:31:63:15:b3:84:8a:3e:
         a1:1b:8a:95:2d:45:6a:04:83:e1:3a:43:e1:1d:7f:b9:49:61:
         7b:59:0c:58:5c:7f:b4:94:86:71:2d:d0:de:31:23:16:f1:22:
         ca:6e:b8:d5:48:64:03:af:4c:d5:a7:b5:51:d7:9b:97:36:73:
         33:2d:d6:e6:24:a1:d0:21:b4:8f:95:6c:63:45:4a:85:3d:79:
         78:45:0f:ee:a0:1b:00:c6:b6:93:7f:90:b7:0e:83:dc:26:cf:
         0c:79:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----