Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEARSPACE/aOzUQ-zBbjfhiMtHFvpY3jU3too.mft
File:                     aOzUQ-zBbjfhiMtHFvpY3jU3too.mft (raw, json)
Hash identifier:          Nv/TsOcPRpLdE6WmkqKcuIkFv1GNXoHSABfhyuKhq3c=
Subject key identifier:   FC:8B:2A:F5:78:53:83:95:4E:4A:3A:2C:95:A5:D6:EC:CB:75:EF:A7
Authority key identifier: 68:EC:D4:43:EC:C1:6E:37:E1:88:CB:47:16:FA:58:DE:35:37:B6:8A
Certificate issuer:       /CN=68ECD443ECC16E37E188CB4716FA58DE3537B68A
Certificate serial:       08A7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aOzUQ-zBbjfhiMtHFvpY3jU3too.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEARSPACE/aOzUQ-zBbjfhiMtHFvpY3jU3too.mft
Manifest number:          08A7
Signing time:             Tue 02 Mar 2021 00:45:19 +0000
Manifest this update:     Tue 02 Mar 2021 00:45:19 +0000
Manifest next update:     Thu 04 Mar 2021 00:45:19 +0000
Files and hashes:         1: aOzUQ-zBbjfhiMtHFvpY3jU3too.crl (hash: AA2mD4UVWKTgQPou03tpWl5z0g82QsT/gdQh7sLfa7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215 (0x8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68ECD443ECC16E37E188CB4716FA58DE3537B68A
        Validity
            Not Before: Mar  2 00:45:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FC8B2AF5785383954E4A3A2C95A5D6ECCB75EFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:1f:1c:87:49:4f:55:df:ee:a3:04:fa:e2:
                    7c:72:bd:2c:b9:4a:16:52:c4:17:4e:f4:fe:2d:31:
                    a0:00:36:12:95:94:aa:df:c0:86:bd:86:45:8a:28:
                    04:fa:a7:11:10:45:a1:7d:ee:c3:c2:b0:22:12:2f:
                    4f:19:bf:3e:44:46:e2:1a:9d:df:56:09:29:06:9c:
                    a4:a3:7d:e7:c3:29:56:51:c6:f6:d6:b2:3c:20:5b:
                    f9:09:e8:37:23:2e:b6:19:c2:78:b7:d6:de:e9:31:
                    43:f5:0f:de:ad:9f:db:4f:ed:0c:3d:17:33:04:d3:
                    f2:96:61:e8:ff:98:cb:4c:63:27:af:fe:80:88:4b:
                    bd:26:60:25:b3:66:60:95:91:dc:d6:89:be:eb:84:
                    61:13:e5:ef:b9:be:00:c3:7c:41:56:3d:9c:ff:f3:
                    e9:75:db:dd:c4:53:1d:28:5a:61:5b:c3:9b:c3:04:
                    38:14:08:c7:c8:af:d9:27:26:a3:c2:cf:b4:dc:62:
                    2a:ee:ba:cc:c3:a6:69:c6:6d:41:b9:21:47:de:d1:
                    e6:89:53:e9:a6:56:f2:fc:bd:0c:bf:09:b9:c2:ac:
                    be:b3:54:aa:9c:42:4b:8d:4b:b0:27:39:96:58:59:
                    73:e1:3f:88:9f:63:e6:a1:0c:f2:8d:df:62:51:e6:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:2A:F5:78:53:83:95:4E:4A:3A:2C:95:A5:D6:EC:CB:75:EF:A7
            X509v3 Authority Key Identifier:
                keyid:68:EC:D4:43:EC:C1:6E:37:E1:88:CB:47:16:FA:58:DE:35:37:B6:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEARSPACE/aOzUQ-zBbjfhiMtHFvpY3jU3too.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aOzUQ-zBbjfhiMtHFvpY3jU3too.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEARSPACE/aOzUQ-zBbjfhiMtHFvpY3jU3too.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:4b:b1:41:e6:e3:d8:20:f9:85:45:a8:98:21:6a:37:44:
         f5:f5:c6:dd:0a:db:90:f2:66:96:19:a4:52:0b:8d:b4:1f:d0:
         49:fa:e6:71:5a:12:f5:a3:11:1c:01:d5:fa:df:08:f3:44:6f:
         a7:f1:21:67:6b:b5:67:36:86:13:85:9e:25:e8:e1:37:4f:c4:
         e9:f8:e3:d6:51:b2:d2:38:d7:4a:49:aa:77:3e:09:d2:71:31:
         9a:c7:98:bf:07:c0:fb:7b:55:65:ac:cf:39:44:48:53:b1:b4:
         cd:41:07:09:7a:f3:f6:85:78:f9:26:23:3e:26:49:48:d8:7f:
         b9:cb:a1:0f:6a:4e:a5:38:7c:b8:eb:b3:b4:0c:cc:fa:32:d3:
         93:3b:53:d9:5a:c6:18:be:37:1f:a2:b2:87:b5:61:4c:6f:b7:
         7c:03:c3:6d:3d:f5:01:2a:19:94:f4:aa:e1:37:0b:3a:3c:81:
         d4:bc:73:54:a8:d3:71:f3:0e:7d:b3:2e:9c:73:cc:98:c5:ec:
         cc:b7:95:bb:41:0f:41:d8:90:1b:11:43:14:af:d2:5b:03:a1:
         9a:34:01:76:b4:7c:3a:1f:7d:43:e2:72:04:d8:b0:85:4d:15:
         34:87:f2:78:9e:0a:03:27:2e:e8:21:2b:98:21:83:f2:eb:c5:
         cc:1b:69:04
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhF
Q0Q0NDNFQ0MxNkUzN0UxODhDQjQ3MTZGQTU4REUzNTM3QjY4QTAeFw0yMTAzMDIw
MDQ1MTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZDOEIyQUY1Nzg1Mzgz
OTU0RTRBM0EyQzk1QTVENkVDQ0I3NUVGQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8kh8ch0lPVd/uowT64nxyvSy5ShZSxBdO9P4tMaAANhKVlKrf
wIa9hkWKKAT6pxEQRaF97sPCsCISL08Zvz5ERuIand9WCSkGnKSjfefDKVZRxvbW
sjwgW/kJ6DcjLrYZwni31t7pMUP1D96tn9tP7Qw9FzME0/KWYej/mMtMYyev/oCI
S70mYCWzZmCVkdzWib7rhGET5e+5vgDDfEFWPZz/8+l1293EUx0oWmFbw5vDBDgU
CMfIr9knJqPCz7TcYiruuszDpmnGbUG5IUfe0eaJU+mmVvL8vQy/CbnCrL6zVKqc
QkuNS7AnOZZYWXPhP4ifY+ahDPKN32JR5oL1AgMBAAGjggINMIICCTAdBgNVHQ4E
FgQU/Isq9XhTg5VOSjoslaXW7Mt176cwHwYDVR0jBBgwFoAUaOzUQ+zBbjfhiMtH
FvpY3jU3toowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVBUlNQ
QUNFL2FPelVRLXpCYmpmaGlNdEhGdnBZM2pVM3Rvby5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvYU96VVEtekJiamZoaU10SEZ2cFkzalUzdG9vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVBUlNQQUNFL2FPelVRLXpCYmpm
aGlNdEhGdnBZM2pVM3Rvby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQA57EuxQebj2CD5hUWomCFqN0T19cbdCtuQ8maWGaRSC420H9BJ+uZxWhL1
oxEcAdX63wjzRG+n8SFna7VnNoYThZ4l6OE3T8Tp+OPWUbLSONdKSap3PgnScTGa
x5i/B8D7e1VlrM85REhTsbTNQQcJevP2hXj5JiM+JklI2H+5y6EPak6lOHy467O0
DMz6MtOTO1PZWsYYvjcforKHtWFMb7d8A8NtPfUBKhmU9KrhNws6PIHUvHNUqNNx
8w59sy6cc8yYxezMt5W7QQ9B2JAbEUMUr9JbA6GaNAF2tHw6H31D4nIE2LCFTRU0
h/J4ngoDJy7oISuYIYPy68XMG2kE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org