Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/VDJ68lKKyP_fqvBMUQZNa8TAqZI.mft
File:                     VDJ68lKKyP_fqvBMUQZNa8TAqZI.mft (raw, json)
Hash identifier:          GaTQJhzAfWQaivh7Uuuy5zjNY4tQo2Uc1n3egjT011I=
Subject key identifier:   F8:14:2E:85:BB:12:8C:E1:25:E6:AB:DE:CF:7B:EB:11:79:6F:44:A7
Authority key identifier: 54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92
Certificate issuer:       /CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
Certificate serial:       08A0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/VDJ68lKKyP_fqvBMUQZNa8TAqZI.mft
Manifest number:          0898
Signing time:             Tue 26 Jan 2021 11:05:46 +0000
Manifest this update:     Tue 26 Jan 2021 11:05:46 +0000
Manifest next update:     Thu 28 Jan 2021 11:05:46 +0000
Files and hashes:         1: VDJ68lKKyP_fqvBMUQZNa8TAqZI.crl (hash: PAYb8e+YP0VOBiv8zclrgmR81l6Imw1fZMoPIi5lLls=)
                          2: X2ULCikeLMwfMQGEKCaioZx5mHM.roa (hash: dRU7QPg89/ox4v5xyvxlEw7Z3LQ0FItFasQnDeS55k0=)
                          3: dwFyq8G-BsUFAoAT8q8D3AfTDb8.roa (hash: 0E+hWzrYFGZMu6Q1KBwp/UFD8XkP41sG7cGJ/J2AN18=)
                          4: jsgLXx8zvBP_f5-qDiL_EBi3cIU.roa (hash: Sg/1P+/qLschLIxeQDOGg+37MeNCVoFXzBSjsskmYgo=)
                          5: vZW09q_rM1bSJBWPD7nygCu0GhM.roa (hash: DQhtD5pXlrqRx7wbJSt2vdzEfoWMEBnB+Fue+o957RY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208 (0x8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
        Validity
            Not Before: Jan 26 11:05:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F8142E85BB128CE125E6ABDECF7BEB11796F44A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:4e:03:7a:63:cd:63:f5:8b:62:ef:f6:fa:
                    0b:10:00:fb:33:72:fb:f4:d4:c7:1b:6a:96:1a:1a:
                    b2:cc:5e:df:78:63:f8:92:43:32:dd:5a:ff:64:d8:
                    41:c1:b0:39:49:bb:cb:4b:70:5b:28:6e:57:f4:26:
                    e5:fd:80:3d:b9:62:e3:c1:f8:7c:ab:60:7c:49:07:
                    64:5f:ca:65:07:d1:e2:7f:d8:85:6a:e5:94:a2:c7:
                    e1:64:dd:1d:e7:71:d5:bd:a8:29:8b:6a:92:0b:8c:
                    80:5c:aa:19:ff:dd:03:75:d2:fa:f7:50:85:ee:ce:
                    71:c4:9b:e2:a8:f2:6d:a3:a5:ec:4e:10:f5:26:2f:
                    b6:1b:25:78:25:75:3a:64:69:fa:e8:27:a9:ce:a6:
                    d5:9f:b4:30:75:d1:da:a1:52:c9:75:ae:7e:a2:28:
                    6e:69:bc:e8:01:2e:33:eb:36:b1:43:20:88:1c:30:
                    7a:ea:b0:ce:fe:5f:8d:a8:05:a2:8b:27:dc:9f:14:
                    c3:56:1b:07:b3:20:d3:62:8f:d2:42:f6:98:c9:57:
                    76:52:71:d6:43:ec:74:e1:8e:12:d4:21:8a:85:02:
                    f4:27:7b:39:ec:4c:3c:9a:54:8a:08:c6:c0:52:58:
                    65:ab:d8:c5:dc:24:f4:37:cb:32:79:d2:cd:ff:80:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:2E:85:BB:12:8C:E1:25:E6:AB:DE:CF:7B:EB:11:79:6F:44:A7
            X509v3 Authority Key Identifier:
                keyid:54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/VDJ68lKKyP_fqvBMUQZNa8TAqZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/VDJ68lKKyP_fqvBMUQZNa8TAqZI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ef:23:36:a9:42:cd:de:42:bc:43:89:19:78:ec:27:c5:92:
         6e:c4:b2:73:66:1e:75:fc:06:4d:bc:14:34:d9:6c:91:20:48:
         79:77:bc:ec:ee:6c:d1:2d:9b:a8:de:8a:dd:fe:d0:0d:bb:cb:
         26:8d:de:44:74:e5:79:28:c8:01:65:d0:7a:0c:79:f3:b6:09:
         ef:6e:d5:11:33:cc:94:23:bc:bd:9c:2e:c7:58:f4:ad:37:7b:
         8b:f8:47:9b:b9:ae:6e:df:a5:f5:70:7e:36:fa:5f:1d:ec:f4:
         1a:9c:ff:b6:cc:c4:af:25:75:17:03:03:d1:2a:f6:18:1f:10:
         a0:a1:81:f5:f4:18:e6:9b:02:6c:49:2e:7e:b8:94:a8:2c:f8:
         58:ef:8a:03:ad:a9:ac:19:da:7d:a2:d7:cf:41:18:1f:12:0b:
         57:4f:ab:02:be:c5:3d:5f:dd:d4:15:08:ae:9a:34:66:1e:b2:
         2c:8c:57:69:97:55:04:88:2f:56:69:57:52:72:d8:03:02:a7:
         41:c4:25:92:63:09:fb:91:8d:34:21:ca:26:18:39:f9:a7:b8:
         05:7f:08:dc:05:11:b1:b2:b7:84:1a:b8:ae:5f:d7:d1:3a:83:
         bc:98:04:df:eb:7a:8b:34:5e:4d:38:22:b0:8f:fa:84:ec:9e:
         48:7c:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----