Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
File:                     5f38rnFoBdOTzrEk62PtHC37t3w.mft (raw, json)
Hash identifier:          yDua9SdXsudsan/WWuTwhlLZ5JapPblFv7t7FPr6eEk=
Subject key identifier:   A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
Authority key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C
Certificate issuer:       /CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
Certificate serial:       0C7E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
Manifest number:          0C7E
Signing time:             Sun 16 Feb 2025 13:55:32 +0000
Manifest this update:     Sun 16 Feb 2025 13:55:32 +0000
Manifest next update:     Sun 16 Feb 2025 19:55:32 +0000
Files and hashes:         1: 5f38rnFoBdOTzrEk62PtHC37t3w.crl (hash: 89I3YbUvuFq/Y9PWOV0nYxOdXdRWGblNrFNRTtLTVcw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3198 (0xc7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C
        Validity
            Not Before: Feb 16 13:55:32 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A6D65D49A5CC3DC9AFD8750C1C1A040DA9C3244A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:b3:22:1f:80:4d:a4:41:cb:b5:2c:67:10:
                    11:45:d0:d1:36:db:89:26:a5:73:07:e2:3e:89:b7:
                    a3:1a:dc:16:cc:eb:da:3b:5f:d9:ec:f2:d6:3f:a1:
                    fb:cf:ee:5a:77:75:90:77:18:44:96:6d:28:4a:9e:
                    71:8a:fa:85:27:a7:a5:4a:0b:b3:9e:93:9a:ba:7f:
                    42:7a:db:bc:07:83:e5:87:d5:a0:2f:26:30:99:b0:
                    2b:a6:2b:d3:59:8c:99:24:c0:3d:aa:e7:a6:50:37:
                    3a:1c:e3:00:fb:80:7c:e6:50:0d:a1:35:f1:af:30:
                    ab:90:dc:d8:8e:09:dd:a1:3e:16:9f:88:cc:a1:2f:
                    35:5b:b9:a6:a0:28:b4:be:3e:93:26:06:f9:9c:f0:
                    ce:e6:e2:c4:6f:07:93:7a:b1:40:a0:65:57:4f:7f:
                    66:fc:68:e1:02:1f:34:e4:62:9b:0e:13:3d:f9:18:
                    ba:af:6f:39:72:22:f5:57:35:03:f5:cc:62:ef:09:
                    00:e1:a4:03:1f:c5:56:84:a5:c0:26:04:fe:b2:4d:
                    67:3a:3c:2c:f6:28:fc:68:24:eb:de:82:35:03:50:
                    d1:03:e7:7b:e6:3a:4f:78:b6:b7:69:e5:ed:45:01:
                    77:f3:ef:7e:01:4a:33:fe:36:5d:2a:d6:6b:15:fc:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:5D:49:A5:CC:3D:C9:AF:D8:75:0C:1C:1A:04:0D:A9:C3:24:4A
            X509v3 Authority Key Identifier:
                keyid:E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f2:1b:a5:e3:3e:7e:3a:fd:f6:24:13:38:b6:77:2d:4c:bc:
         02:a7:a7:24:5b:b2:8f:b3:76:4e:9f:12:69:54:7c:fd:44:26:
         bd:cd:f3:4b:d4:88:0a:e1:ed:aa:d1:48:0b:0c:3e:ac:9d:aa:
         17:57:e2:4e:ca:61:9f:af:ad:f1:be:70:0a:14:1b:5c:5d:8d:
         30:92:f0:b4:0f:28:13:bc:3b:3e:7d:5c:ff:91:1c:aa:f0:75:
         7f:b4:25:64:ff:d9:d1:ef:8a:16:f9:72:93:60:cd:1c:70:9d:
         ac:65:6e:b2:fe:52:9f:14:83:b0:13:f9:5d:76:56:4c:51:09:
         04:ff:7f:ac:f7:e6:ae:73:9c:c4:a1:73:5e:94:79:7b:c9:fd:
         4b:8d:e5:f5:e9:db:d8:8e:c8:ac:df:e7:a0:30:e9:23:05:b3:
         a7:92:6f:81:d2:a8:44:d5:c5:ee:32:8f:9c:43:03:fc:c4:a7:
         2c:ad:5d:b2:3a:ca:4c:36:d7:7b:0b:12:32:0d:db:a3:db:34:
         9d:25:4b:56:e1:69:ee:66:ad:a2:25:2a:59:04:00:9d:4c:61:
         4c:8c:0b:f7:88:50:ca:dc:05:a8:96:7a:52:ba:ef:71:fb:85:
         8e:6f:e7:4b:73:d1:04:36:97:b6:3f:a0:7f:1b:4a:3a:f2:ca:
         48:3e:65:dc
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVG
REZDQUU3MTY4MDVEMzkzQ0VCMTI0RUI2M0VEMUMyREZCQjc3QzAeFw0yNTAyMTYx
MzU1MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE2RDY1RDQ5QTVDQzNE
QzlBRkQ4NzUwQzFDMUEwNDBEQTlDMzI0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLnLMiH4BNpEHLtSxnEBFF0NE224kmpXMH4j6Jt6Ma3BbM69o7
X9ns8tY/ofvP7lp3dZB3GESWbShKnnGK+oUnp6VKC7Oek5q6f0J627wHg+WH1aAv
JjCZsCumK9NZjJkkwD2q56ZQNzoc4wD7gHzmUA2hNfGvMKuQ3NiOCd2hPhafiMyh
LzVbuaagKLS+PpMmBvmc8M7m4sRvB5N6sUCgZVdPf2b8aOECHzTkYpsOEz35GLqv
bzlyIvVXNQP1zGLvCQDhpAMfxVaEpcAmBP6yTWc6PCz2KPxoJOvegjUDUNED53vm
Ok94trdp5e1FAXfz734BSjP+Nl0q1msV/Or/AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUptZdSaXMPcmv2HUMHBoEDanDJEowHwYDVR0jBBgwFoAU5f38rnFoBdOTzrEk
62PtHC37t3wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQVUv
NWYzOHJuRm9CZE9UenJFazYyUHRIQzM3dDN3LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS81ZjM4cm5Gb0JkT1R6ckVrNjJQdEhDMzd0M3cuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU0lBVS81ZjM4cm5Gb0JkT1R6ckVrNjJQ
dEhDMzd0M3cubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfIb
peM+fjr99iQTOLZ3LUy8AqenJFuyj7N2Tp8SaVR8/UQmvc3zS9SICuHtqtFICww+
rJ2qF1fiTsphn6+t8b5wChQbXF2NMJLwtA8oE7w7Pn1c/5EcqvB1f7QlZP/Z0e+K
Fvlyk2DNHHCdrGVusv5SnxSDsBP5XXZWTFEJBP9/rPfmrnOcxKFzXpR5e8n9S43l
9enb2I7IrN/noDDpIwWzp5JvgdKoRNXF7jKPnEMD/MSnLK1dsjrKTDbXewsSMg3b
o9s0nSVLVuFp7matoiUqWQQAnUxhTIwL94hQytwFqJZ6UrrvcfuFjm/nS3PRBDaX
tj+gfxtKOvLKSD5l3A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:28 2025 by rpki-client