Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASITSNOC/XSqgPgIczXUVOoxDsxvJTJYsKYc.mft
File:                     XSqgPgIczXUVOoxDsxvJTJYsKYc.mft (raw, json)
Hash identifier:          FvkS0q+tlTjRsOAky1Qorpiq6isajQ1I2BIFNztuO2Y=
Subject key identifier:   B9:DC:E6:A6:2C:85:AF:4C:03:BC:45:0A:17:9B:60:D2:31:1E:B4:A0
Authority key identifier: 5D:2A:A0:3E:02:1C:CD:75:15:3A:8C:43:B3:1B:C9:4C:96:2C:29:87
Certificate issuer:       /CN=5D2AA03E021CCD75153A8C43B31BC94C962C2987
Certificate serial:       02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XSqgPgIczXUVOoxDsxvJTJYsKYc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASITSNOC/XSqgPgIczXUVOoxDsxvJTJYsKYc.mft
Manifest number:          02
Signing time:             Wed 27 Jan 2021 09:56:24 +0000
Manifest this update:     Wed 27 Jan 2021 09:56:24 +0000
Manifest next update:     Fri 29 Jan 2021 09:56:24 +0000
Files and hashes:         1: XSqgPgIczXUVOoxDsxvJTJYsKYc.crl (hash: npktv1FYT0E9jALKt4NKmtpjAV56Toveoa6W6bsvlvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2AA03E021CCD75153A8C43B31BC94C962C2987
        Validity
            Not Before: Jan 27 09:56:24 2021 GMT
            Not After : Jan 27 09:47:16 2022 GMT
        Subject: CN=B9DCE6A62C85AF4C03BC450A179B60D2311EB4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:0f:d9:de:9a:29:98:cf:55:00:24:15:92:
                    c7:2c:99:79:15:1c:2a:0a:2b:a2:82:3f:0f:97:6e:
                    81:f2:3f:8a:9e:f4:b3:a4:90:d2:f5:82:2d:8e:11:
                    f4:0d:64:48:41:c2:fc:06:92:88:65:6a:84:95:eb:
                    17:04:b6:b7:c2:60:00:01:62:1e:57:c1:54:b4:bb:
                    bb:1c:72:17:b1:d1:ee:bf:02:39:d8:2f:0c:7d:43:
                    31:11:6a:4a:21:11:38:82:21:1f:52:d3:80:93:1e:
                    ad:9f:c7:03:3a:bf:23:3e:16:a5:61:a6:62:dc:ac:
                    20:cb:9a:02:27:07:e4:c7:5b:66:79:40:d8:56:6a:
                    81:a0:15:eb:fa:00:3f:bc:e6:ce:64:cb:75:e3:fe:
                    dc:ba:e6:20:a2:d3:75:39:a9:10:0c:e8:64:3c:39:
                    86:3b:61:59:34:3e:43:0e:d4:2a:46:7f:27:90:60:
                    55:3d:52:19:0c:f2:e1:f2:ed:65:19:51:52:72:0d:
                    b1:ba:8c:50:8d:8e:74:6d:ac:74:55:25:a9:5f:c0:
                    6b:31:42:6f:e9:e1:9a:3e:df:c3:45:20:97:e9:60:
                    45:84:47:6e:3a:51:17:e4:1b:cb:87:03:b8:01:ee:
                    ef:6c:b0:88:05:20:3e:7f:74:79:82:f0:f3:29:2d:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:E6:A6:2C:85:AF:4C:03:BC:45:0A:17:9B:60:D2:31:1E:B4:A0
            X509v3 Authority Key Identifier:
                keyid:5D:2A:A0:3E:02:1C:CD:75:15:3A:8C:43:B3:1B:C9:4C:96:2C:29:87

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASITSNOC/XSqgPgIczXUVOoxDsxvJTJYsKYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XSqgPgIczXUVOoxDsxvJTJYsKYc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASITSNOC/XSqgPgIczXUVOoxDsxvJTJYsKYc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:02:45:60:b7:b4:29:77:39:dc:1f:c8:98:8c:f3:f5:67:68:
         69:6a:42:89:68:6d:5c:d5:a8:91:04:ad:da:59:10:bf:a2:44:
         3e:fc:9d:8f:13:af:97:29:f7:ea:c8:51:82:26:df:20:3a:e6:
         76:73:39:e8:b6:fc:b1:9e:dd:63:28:3a:10:19:96:bc:c5:2b:
         7b:ad:70:8b:c6:33:8a:97:96:18:3e:97:09:a9:bd:ae:51:2b:
         6c:d5:b2:f5:6f:2a:cc:37:81:d8:8e:f1:25:68:e0:fa:4a:df:
         19:49:f0:e2:57:b9:e4:87:ac:31:ac:53:e3:6f:24:88:39:8a:
         86:8d:92:af:97:47:9a:60:01:dc:d7:78:24:4d:19:87:4e:df:
         d5:12:f9:4b:c1:45:84:bf:14:c7:34:dd:5a:9e:c2:a1:12:33:
         3c:b1:e6:9a:94:78:ef:77:72:de:11:10:60:cc:2b:e4:dd:1b:
         2d:bb:01:8f:bb:be:03:dd:da:e4:d9:a9:6e:bc:7d:6a:75:fc:
         48:8b:eb:c9:19:29:d6:04:fa:5c:36:e2:53:9b:10:76:80:48:
         3c:b8:3a:36:bb:c7:b5:7d:29:07:99:e8:e9:30:4f:49:44:2b:
         93:b2:0e:26:9d:3a:7e:6a:ef:1a:a7:de:35:28:dc:b5:28:9e:
         a2:e9:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----