Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
File:                     cJhPAIyij2R120JjU7_RxDPYvBo.mft (raw, json)
Hash identifier:          MzKBh4RNwj8HCJ3TsXmTS1sIesfeUDI5M0UQA9icV0c=
Subject key identifier:   E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Certificate issuer:       /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial:       0BE8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
Manifest number:          0BD3
Signing time:             Sun 02 Jun 2024 00:43:53 +0000
Manifest this update:     Sun 02 Jun 2024 00:43:53 +0000
Manifest next update:     Tue 04 Jun 2024 00:43:53 +0000
Files and hashes:         1: NOKYRr2bMQOewq4YnaPSBW2JS-w.roa (hash: VcTfg2C32TeIW6HWqCpbuOiv9nxUzAdYpN+P4O94fqw=)
                          2: T10pnlqKGD-UNC-t1mbcRSCVRgA.roa (hash: xsXLWhQ1rSEvfkCnGt1N5rGElL7S/pbyTIwInEbuJ7M=)
                          3: VjmDKKlgs4IhnIF-usUKuBmFVGQ.roa (hash: KAjWIEJMlOFrtNx99cFaTElHnxYcqr7xoEiL34P3MOg=)
                          4: cJhPAIyij2R120JjU7_RxDPYvBo.crl (hash: Or7c+CI1WVUyXVeR+RY0YhvnaRr7JULmhczgKii0DWk=)
                          5: kJy9tBzWEl86wcGTRie7y_cWU68.roa (hash: 4OWo4CZy3g3rHBkY6AA8OImSlXaz4iH8Pzks0xxwQSE=)
                          6: xV2tjTqqInVJhPDGBSae0ZuUpPc.roa (hash: NemA6YGVF4FkslFeAw0B4F56Mq0E6SfGMRafvCvs7H8=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 00:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3048 (0xbe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
        Validity
            Not Before: Jun  2 00:43:53 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E9C602C2C3AB8879C82F5ACD6A4B0EACA020AA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:4a:e6:25:b3:c9:a8:72:89:ad:c7:e8:56:
                    3c:86:b4:8d:a9:ce:31:78:73:63:8c:c0:5a:40:91:
                    71:02:e9:57:06:67:78:de:2b:fe:e2:fb:d5:0e:8e:
                    b2:a0:ec:68:64:cf:ac:dc:7e:4c:d7:de:9a:e5:e9:
                    f2:cb:23:50:2e:01:3b:53:2e:83:33:ef:99:70:f9:
                    b6:64:e8:67:bc:04:c8:e3:c2:19:57:1a:f0:c6:44:
                    1f:e7:18:6f:e3:cc:e9:57:c0:8a:a6:d4:ca:46:ef:
                    89:49:09:3e:0c:77:de:08:05:16:58:6a:7d:df:cf:
                    47:b1:df:75:97:7c:2f:16:a2:e2:bc:9b:dc:07:8a:
                    40:f6:83:a0:47:ce:ac:6b:d8:26:8a:b2:77:19:6c:
                    9d:3e:4e:af:14:ae:9f:73:ec:d3:66:9c:e2:7c:29:
                    d5:18:b0:f8:d5:c0:25:11:0d:37:ef:44:0f:3e:c1:
                    e1:77:56:47:fa:79:3c:bd:82:c7:a8:72:e4:46:e1:
                    16:02:f0:03:98:ea:d5:46:a3:2b:85:d0:36:21:e6:
                    ab:c0:58:c3:35:b6:4f:76:ee:76:bf:89:34:b0:f8:
                    6a:ac:73:98:89:85:1c:a8:e2:bd:42:29:fa:a5:ac:
                    98:95:fa:aa:ae:22:25:1b:31:cd:b9:75:f1:b0:a0:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
            X509v3 Authority Key Identifier:
                keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:45:8a:55:04:f8:f2:bb:3a:23:1e:51:c6:78:3b:ce:1e:2c:
         34:ac:e6:94:61:73:12:35:9c:ed:48:0e:95:15:b7:ef:74:68:
         53:0a:0f:c9:f8:b9:fa:fc:09:f4:c4:44:85:1f:4a:1e:8c:4f:
         9e:3d:e9:97:53:e4:8d:2c:45:4e:35:f5:dc:be:8e:65:1d:22:
         d3:a7:29:44:99:97:2d:78:95:f9:d0:43:05:90:8c:e3:79:93:
         21:57:08:fd:12:c8:93:1a:b0:01:43:a3:6a:ad:e7:5a:50:c2:
         f8:04:4f:68:3b:af:1a:80:b2:6f:38:76:f1:38:a5:b9:2c:ec:
         fe:47:2f:57:0c:50:17:ad:aa:f8:05:32:75:37:ea:08:50:22:
         50:90:7c:38:e9:4f:8d:7f:4f:fd:b5:a1:bd:1a:30:4e:5a:9a:
         fe:60:2c:27:b9:37:05:70:94:18:67:df:d6:a5:56:e7:b9:84:
         56:13:1e:be:47:e0:c6:f6:ed:3c:ea:54:b9:8a:cb:fe:42:5b:
         88:29:9e:a6:57:93:d4:92:50:48:59:80:0a:d0:8c:7e:44:1d:
         31:74:c1:fd:ec:f3:d6:56:d9:6f:3a:a9:f3:6b:16:56:69:b6:
         87:45:df:5a:e6:ac:0c:f7:0b:94:13:2d:62:40:63:d0:b0:33:
         df:36:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org