Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AMBIT/O4VtA4nyi3mwj2fUn-XbWSTXzqo.mft
File:                     O4VtA4nyi3mwj2fUn-XbWSTXzqo.mft (raw, json)
Hash identifier:          8GyszZnoui6y2u9tgkEF9mEXtMR998IUOqOTdK09AQI=
Subject key identifier:   E1:4D:D8:52:99:46:63:0D:3E:52:24:82:86:E2:21:D8:C8:D0:CA:39
Authority key identifier: 3B:85:6D:03:89:F2:8B:79:B0:8F:67:D4:9F:E5:DB:59:24:D7:CE:AA
Certificate issuer:       /CN=3B856D0389F28B79B08F67D49FE5DB5924D7CEAA
Certificate serial:       0875
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O4VtA4nyi3mwj2fUn-XbWSTXzqo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AMBIT/O4VtA4nyi3mwj2fUn-XbWSTXzqo.mft
Manifest number:          0875
Signing time:             Mon 01 Mar 2021 22:45:37 +0000
Manifest this update:     Mon 01 Mar 2021 22:45:37 +0000
Manifest next update:     Wed 03 Mar 2021 22:45:37 +0000
Files and hashes:         1: O4VtA4nyi3mwj2fUn-XbWSTXzqo.crl (hash: /JE+l/8Iak3M1K0ZJ9f+aMhoFcAJzLViVdWFNSWdSv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B856D0389F28B79B08F67D49FE5DB5924D7CEAA
        Validity
            Not Before: Mar  1 22:45:37 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E14DD8529946630D3E52248286E221D8C8D0CA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:96:94:f7:1a:b4:ba:c4:cc:51:eb:6e:8b:
                    ee:a1:b9:6d:3c:92:18:25:0f:7b:fb:d2:4a:97:1d:
                    82:75:91:9e:f4:ad:40:56:d1:e8:2b:c4:a2:3f:e1:
                    f6:97:f7:9e:d0:c4:b1:e6:78:8b:e3:d7:be:db:b6:
                    5e:41:67:ca:8b:9e:9c:9a:28:8c:fc:a1:a8:5c:99:
                    98:7c:2c:fe:69:e7:67:b8:99:cd:6a:53:01:05:6c:
                    5c:93:51:f8:50:9f:24:37:c1:df:26:0d:7a:49:ed:
                    0b:13:4c:a1:38:4a:20:9e:dd:c5:90:2a:b0:0b:9c:
                    9d:83:2b:43:d3:bf:46:27:62:51:f5:4a:b7:46:e2:
                    6f:b8:7f:d3:16:95:0f:d6:39:72:64:b6:2b:d5:d6:
                    48:46:c0:3c:1e:ac:96:58:ab:38:60:ce:7d:4a:bc:
                    bc:bb:bd:3d:a1:7f:94:c9:63:f9:a4:74:e1:55:77:
                    a6:dc:b4:84:ed:42:90:b8:e4:1c:00:b7:bf:da:9a:
                    21:13:01:54:c5:5f:f6:31:3f:b2:ca:41:14:32:e5:
                    e1:3e:60:eb:d0:8e:96:19:29:ed:6b:d6:fb:f3:b1:
                    c8:fd:a3:fa:ec:e8:32:f9:da:91:2a:2b:b2:fa:6f:
                    22:f5:a4:94:11:8e:c3:b5:34:65:5c:ea:1e:32:f9:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4D:D8:52:99:46:63:0D:3E:52:24:82:86:E2:21:D8:C8:D0:CA:39
            X509v3 Authority Key Identifier:
                keyid:3B:85:6D:03:89:F2:8B:79:B0:8F:67:D4:9F:E5:DB:59:24:D7:CE:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AMBIT/O4VtA4nyi3mwj2fUn-XbWSTXzqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O4VtA4nyi3mwj2fUn-XbWSTXzqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AMBIT/O4VtA4nyi3mwj2fUn-XbWSTXzqo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:07:a2:c6:8e:2a:20:25:f7:6f:c1:41:ec:e5:4b:7a:c1:cf:
         40:24:09:5d:3b:17:8b:77:50:77:0f:0b:5a:53:85:f6:86:cc:
         92:38:51:a9:24:08:f4:6e:67:5b:a7:08:9d:cb:67:d1:c2:5f:
         92:6d:12:75:e5:04:89:48:99:23:d1:14:7a:23:55:f7:23:cf:
         ad:99:4e:65:b7:7b:0d:3e:ec:43:08:c4:d4:16:63:00:6e:e5:
         88:46:00:2c:07:be:87:58:b0:ed:89:db:06:d7:70:6b:4d:5e:
         4e:4e:09:a9:fc:b0:d1:cc:8a:7d:19:3f:44:05:be:c7:1f:0c:
         e6:8a:74:ae:e3:e6:c0:7b:75:65:3b:3e:81:d2:3f:69:5a:34:
         4c:9a:64:ed:d1:b3:7a:f7:ae:a6:2f:ed:21:eb:ee:5f:63:84:
         da:b1:7e:3f:2a:1e:3e:06:ca:a4:a9:d3:1a:ac:30:6d:2d:a3:
         1a:a7:0a:28:57:9a:be:84:aa:97:ae:72:c9:e4:6a:c6:3d:d6:
         78:6e:f7:e9:fa:cf:93:15:79:9a:04:1c:5d:66:38:5d:dd:26:
         c3:e5:dd:c6:33:78:d8:df:43:1a:b1:91:39:82:d3:75:f5:92:
         03:ac:78:65:c6:2b:06:3b:07:4e:4e:11:4b:46:a5:dd:38:14:
         53:f1:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-fra.rpki-client.org