Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.mft
File:                     wlKNjFtnb9miTf2n6SF0V7cxAmM.mft (raw, json)
Hash identifier:          fj7FmowZYQzqmaFcsLwPhCEGe7Cbj3ZbzVLq498WF9Q=
Subject key identifier:   71:73:A7:EB:C9:8E:FF:B3:35:7F:06:17:2B:5A:D2:56:B7:EE:B7:BC
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Certificate issuer:       /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial:       1242
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.mft
Manifest number:          1213
Signing time:             Tue 16 Apr 2024 03:51:59 +0000
Manifest this update:     Tue 16 Apr 2024 03:51:59 +0000
Manifest next update:     Thu 18 Apr 2024 03:51:59 +0000
Files and hashes:         1: wlKNjFtnb9miTf2n6SF0V7cxAmM.crl (hash: b31pfn0Tj7cAqJ5Uqcdtn65UsCAO5UGGl7YCX4WQrK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4674 (0x1242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
        Validity
            Not Before: Apr 16 03:51:59 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7173A7EBC98EFFB3357F06172B5AD256B7EEB7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:53:69:46:df:b9:9e:c4:e4:5e:e7:c8:77:
                    35:de:52:2c:12:1a:4b:06:c4:11:83:4b:e6:6f:18:
                    a0:e0:81:c9:f3:ea:32:6c:8b:df:f4:34:d3:76:c5:
                    da:1a:60:28:57:7b:3b:24:77:34:b2:47:bc:f0:59:
                    28:54:a1:ad:56:84:15:51:3c:c5:cf:9b:70:9e:56:
                    7b:8a:7a:eb:41:4c:a2:e7:02:61:92:04:46:e4:39:
                    25:c7:8b:27:4a:5c:41:cb:13:de:f7:ee:52:62:f2:
                    42:3e:e2:93:c0:c0:ec:2c:91:86:6b:52:44:e4:52:
                    e4:0f:2b:5e:fb:fc:6b:52:77:e6:0b:1c:52:97:95:
                    dc:c3:44:7d:97:2f:c3:44:f3:0c:a5:c1:74:ab:3a:
                    e1:3b:58:b0:ba:5b:96:e2:45:10:0a:5c:8a:84:21:
                    f2:f0:72:42:04:b0:88:cd:3e:a8:ca:69:23:94:34:
                    c7:41:89:f9:5b:02:ad:44:ca:76:cc:13:74:92:98:
                    41:ae:f8:26:11:20:55:15:72:6f:f9:d5:df:77:f2:
                    d0:5a:f4:13:14:a5:1a:bd:7d:72:fc:a5:f5:e8:df:
                    d4:4b:43:b8:e1:68:c7:86:fe:75:d7:e8:c9:f8:15:
                    36:d6:bd:f7:cf:c5:66:40:76:e5:05:c3:04:d6:7a:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:A7:EB:C9:8E:FF:B3:35:7F:06:17:2B:5A:D2:56:B7:EE:B7:BC
            X509v3 Authority Key Identifier:
                keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:41:be:36:2f:dc:e4:f8:4f:18:b7:07:cd:28:4e:7c:ed:8a:
         86:2c:f1:8e:89:50:ec:89:97:94:64:a8:5e:ce:00:90:f6:f9:
         98:28:b9:37:6e:03:12:59:aa:a8:d2:56:88:d8:15:91:8f:20:
         af:3b:d3:09:06:17:69:2a:f0:3c:57:f7:c4:26:a8:b2:01:9f:
         7c:b7:84:20:a4:02:85:fb:44:70:80:b7:f4:15:fa:d8:15:93:
         3c:29:94:1e:a4:ba:e1:25:7a:c6:ce:14:e6:7e:e8:d1:61:a1:
         c3:d2:79:25:3a:03:65:1f:ac:68:ff:21:72:cf:da:fb:c5:53:
         aa:00:4f:6e:c3:d6:0f:c8:2e:f6:80:22:bf:2c:da:1d:8d:57:
         56:92:6e:41:11:49:aa:89:d4:81:64:08:19:a3:a2:ee:1c:89:
         6f:46:f4:73:a7:3f:c7:d9:46:02:68:ba:ee:de:ae:de:9a:02:
         db:7c:f2:99:fa:bf:46:7f:fa:3f:f3:f7:47:4a:da:bf:51:0d:
         41:79:de:28:2b:03:05:0a:1c:dd:a8:09:41:c3:4d:90:dc:f1:
         63:21:8c:bf:c4:87:4d:db:b6:42:d4:e6:99:88:ad:b7:08:5d:
         35:90:77:ed:e0:58:2a:8d:12:f0:09:23:8e:e2:3a:1d:74:fd:
         e5:9f:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----