Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.mft
File:                     dg6p94M-3GNm_V4jpCa89iuwHmw.mft (raw, json)
Hash identifier:          JZK/45WeKgfDr+e03nzjKG/dIpXfCRzZoqbPdquvym8=
Subject key identifier:   33:13:DD:35:E8:40:B8:7C:23:8F:C6:9B:9E:E7:F4:77:9B:DB:81:78
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Certificate issuer:       /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial:       0C00
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.mft
Manifest number:          0BDF
Signing time:             Sun 30 Jun 2024 15:03:52 +0000
Manifest this update:     Sun 30 Jun 2024 15:03:52 +0000
Manifest next update:     Tue 02 Jul 2024 15:03:52 +0000
Files and hashes:         1: EQpEWN4_mvtx8pvTicpq0ifNBjQ.roa (hash: dZZyokcm34RWa/ELK5RM9HlJPRrVne+HHj2dHDC6R1M=)
                          2: TxN01kusPDZqYe0LIJXvLt36exM.roa (hash: +oif+14H4egQ88vkV1SgrX1y0FPdzYX8BmJF5euftzU=)
                          3: WHFalQoJMoZUBR8XRrNJbFmzAds.roa (hash: RD6uz5jZ0qtev49cCl4vRx2+2aty0Oev6SZJ7LdUajE=)
                          4: b2tITyfmGIm2Z4fuCBoXoMx3mI0.roa (hash: KI1N3DTSz0n1ndz1HAgr7Fr5Ax3Noq+8M759IoUuglM=)
                          5: dg6p94M-3GNm_V4jpCa89iuwHmw.crl (hash: 4AKBrNkHPZO0SBPsU+S8u4nbCUqnui6quIvxwu0+J2M=)
                          6: kXX703E79nItsk6CKzG_g7fpWs4.roa (hash: kR2HJmj3WKPwUv3UC1s0kVF/T8wPXEk8ZMaNQHLfB6E=)
                          7: qTkobEsGSHTeUIkMh-Blm_Wwen4.roa (hash: XsdXpQtKL8zXNSyCS1h39KvJeaURevE1szV5vTrsWWQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
        Validity
            Not Before: Jun 30 15:03:52 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3313DD35E840B87C238FC69B9EE7F4779BDB8178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:87:f3:aa:0e:08:b9:84:40:ae:8a:95:20:
                    97:ef:2d:5d:4b:8f:3c:a1:e4:c5:b1:15:5c:da:d8:
                    e6:40:6a:71:3a:73:6f:4a:61:0c:e7:88:53:17:70:
                    f4:b1:d3:39:79:7c:22:ed:d3:2e:d9:33:e4:b4:09:
                    5b:cc:39:88:07:69:7e:b5:2d:e8:8c:a4:cd:7f:e4:
                    9b:c7:ff:a2:8a:92:b3:ff:29:a6:7f:7c:b0:2c:86:
                    4f:af:f9:93:90:fd:b8:cc:66:22:72:24:24:4b:b1:
                    ae:75:c3:27:6c:f0:71:7b:32:4a:d9:fb:fb:40:51:
                    0a:bf:b7:bf:30:17:35:07:87:bd:fc:03:91:6f:23:
                    9b:de:88:c3:01:69:bf:63:7c:d3:4e:67:dd:dd:ef:
                    86:77:38:21:d6:2a:5e:bf:a6:69:21:5e:8b:42:08:
                    af:32:33:fc:08:4b:38:26:ee:ff:38:04:aa:26:9e:
                    b1:da:0e:2b:8a:63:9e:fe:4e:18:0c:67:78:5d:7f:
                    46:d6:8d:20:f5:75:d3:53:51:c6:5c:2f:89:66:2f:
                    f5:a0:64:67:4f:4e:c1:8c:e6:cb:d2:19:b2:99:b7:
                    4d:a7:12:93:fc:e5:01:4f:c2:ab:1c:db:f7:71:32:
                    49:23:97:12:87:79:17:d1:19:68:fc:9b:d8:20:6b:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:DD:35:E8:40:B8:7C:23:8F:C6:9B:9E:E7:F4:77:9B:DB:81:78
            X509v3 Authority Key Identifier:
                keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1f:09:03:b2:2f:3c:9c:b1:a5:57:26:3c:e3:b7:8c:3b:30:
         1b:25:18:07:7f:8c:58:2b:04:92:58:fd:99:58:06:1a:a2:19:
         ab:b3:85:45:c5:6d:a8:17:8c:d7:ce:cf:08:be:36:3b:bb:24:
         0a:2d:f5:0c:65:6b:e1:ce:1b:1d:e8:10:6d:9a:95:7b:35:1e:
         fb:30:3b:06:79:80:0b:ce:2d:cc:28:a7:a7:71:80:e5:d8:60:
         14:c4:54:8b:56:26:88:ac:02:11:63:32:e7:96:06:8d:01:10:
         25:22:52:f6:08:d1:4b:c2:00:e2:b9:57:4a:ff:83:79:36:f8:
         da:4a:fa:1c:0b:16:81:12:80:77:bb:5d:19:53:02:9d:e0:48:
         b2:ac:b1:2a:6a:c6:c4:52:33:7f:3f:60:9d:3d:c1:80:9a:65:
         22:65:fa:b0:d1:c7:55:a2:ad:e0:93:52:bc:6a:a6:e9:54:7b:
         37:fb:36:95:b6:e8:55:08:b2:06:d6:32:7a:e5:f5:f4:7a:85:
         5a:6a:46:eb:04:f1:1d:99:a1:3b:d5:d3:1e:dd:34:6e:66:9a:
         f5:19:8c:c3:a9:78:ce:18:3e:1a:14:04:5b:36:a2:3c:43:5a:
         70:89:ad:74:f9:94:4c:fd:2f:e7:22:d7:ba:2d:ba:5c:7f:62:
         b2:d9:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----