Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AVER/pwGbBeIMn7wWKz0dz7EeunJlzIY.mft
File:                     pwGbBeIMn7wWKz0dz7EeunJlzIY.mft (raw, json)
Hash identifier:          57S5H8a8FyfZnICS3X9oBWVPl6bycokw/9NU4YwNoqs=
Subject key identifier:   31:61:0C:0B:40:D0:53:A1:11:5A:4B:A8:E3:B8:89:54:61:AF:6F:3B
Authority key identifier: A7:01:9B:05:E2:0C:9F:BC:16:2B:3D:1D:CF:B1:1E:BA:72:65:CC:86
Certificate issuer:       /CN=A7019B05E20C9FBC162B3D1DCFB11EBA7265CC86
Certificate serial:       081F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pwGbBeIMn7wWKz0dz7EeunJlzIY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AVER/pwGbBeIMn7wWKz0dz7EeunJlzIY.mft
Manifest number:          081F
Signing time:             Thu 03 Dec 2020 11:46:52 +0000
Manifest this update:     Thu 03 Dec 2020 11:46:51 +0000
Manifest next update:     Sat 05 Dec 2020 11:46:51 +0000
Files and hashes:         1: pwGbBeIMn7wWKz0dz7EeunJlzIY.crl (hash: 8ZsJpdGCy36SqUMLGjz+Dlhv5hizdVfIhktoeRuKleI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7019B05E20C9FBC162B3D1DCFB11EBA7265CC86
        Validity
            Not Before: Dec  3 11:46:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=31610C0B40D053A1115A4BA8E3B8895461AF6F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:7f:56:66:70:36:07:a0:4d:7f:b9:d1:50:
                    48:0e:c7:db:33:2e:81:e2:c7:19:52:85:1b:8a:c0:
                    18:19:34:1f:f8:8e:ed:bd:1d:0d:ae:da:87:b9:59:
                    ef:7f:8a:81:0c:21:39:a9:04:65:ef:0a:7a:51:90:
                    97:b3:32:52:57:44:9a:53:a0:fd:a9:69:34:7f:6d:
                    b5:61:99:0e:28:6e:f0:76:39:af:ff:4a:90:b1:c1:
                    64:90:e9:1f:9d:87:7f:a1:ec:2e:89:1c:0d:38:25:
                    02:6a:09:b6:8d:c9:8c:7a:94:f5:38:32:af:a9:9c:
                    2a:1d:6c:d2:6f:a9:fe:7a:bb:47:4a:d0:47:2c:d4:
                    2f:56:0c:32:8e:79:9e:80:da:5f:4d:1b:5a:58:f9:
                    96:b6:5c:fc:49:16:df:33:ac:b4:34:8d:46:49:06:
                    b9:e8:eb:50:02:25:90:a9:e2:91:bc:ba:b6:db:1d:
                    f1:f5:c6:38:57:96:c0:fb:90:4c:24:e7:bc:a8:df:
                    93:e1:67:77:54:4c:bf:21:23:74:38:97:45:00:ff:
                    06:88:60:91:cf:aa:18:eb:5b:0d:30:cb:e3:d2:bf:
                    d8:6c:5c:50:6f:c7:fe:23:6c:bd:9c:ba:25:3d:58:
                    eb:04:af:bd:9d:04:7e:7b:b0:73:15:5b:88:7c:b6:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:61:0C:0B:40:D0:53:A1:11:5A:4B:A8:E3:B8:89:54:61:AF:6F:3B
            X509v3 Authority Key Identifier:
                keyid:A7:01:9B:05:E2:0C:9F:BC:16:2B:3D:1D:CF:B1:1E:BA:72:65:CC:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AVER/pwGbBeIMn7wWKz0dz7EeunJlzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pwGbBeIMn7wWKz0dz7EeunJlzIY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AVER/pwGbBeIMn7wWKz0dz7EeunJlzIY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:f5:59:4d:29:47:ec:d4:fb:b7:39:b8:95:db:f7:b7:11:
         0f:1b:bc:09:2f:4d:cb:92:96:e0:c3:ed:07:99:06:5c:87:9d:
         58:6d:b9:b4:24:3e:fc:22:21:f6:e1:f4:66:74:cb:e6:d9:a4:
         3f:00:06:a6:f4:93:01:62:bb:c5:ae:c0:61:f2:98:6a:d9:d3:
         4a:e9:1c:50:3b:a3:40:da:73:10:3c:be:0a:94:c8:4e:e1:15:
         15:62:7e:0a:42:32:e9:66:64:51:fd:51:15:7e:d8:9b:1c:86:
         63:83:58:4b:ea:f7:da:a8:9e:59:e9:36:11:a1:89:34:b8:29:
         f7:f2:9c:de:91:bc:df:a2:79:70:0f:8c:d4:2a:52:1f:01:dd:
         00:ac:9d:ad:ca:6c:e1:4a:5d:12:d6:d8:88:1e:eb:75:a5:e2:
         5a:a1:6c:2c:bb:42:9c:8b:70:38:d7:c5:83:48:ff:e9:9b:d3:
         f2:9e:7e:98:69:ed:48:c3:39:6e:cf:12:37:c4:6f:6b:25:c6:
         ee:b8:10:3f:4b:97:44:28:07:ef:c2:4f:0a:99:70:2a:39:5b:
         11:c5:a0:6a:b7:67:71:17:83:e5:91:2a:fb:8f:a2:87:e8:8a:
         bd:24:76:7e:ad:8c:28:f1:75:7b:a0:0e:7b:a4:4a:f5:61:53:
         0b:58:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----