Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft
File:                     Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft (raw, json)
Hash identifier:          gXeV5PqouUjH5TkPE9bkPisz6L3uLqwdTK+Cnspouc4=
Subject key identifier:   B4:30:0D:5C:6C:AA:C8:E8:6D:55:C4:82:E8:E8:E6:6E:AA:BC:00:86
Authority key identifier: 52:DE:F9:33:47:F6:97:22:A0:F1:0F:61:7B:37:80:73:A7:D4:78:37
Certificate issuer:       /CN=52DEF93347F69722A0F10F617B378073A7D47837
Certificate serial:       0F47
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Ut75M0f2lyKg8Q9hezeAc6fUeDc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft
Manifest number:          0F47
Signing time:             Tue 02 Mar 2021 04:55:17 +0000
Manifest this update:     Tue 02 Mar 2021 04:55:17 +0000
Manifest next update:     Thu 04 Mar 2021 04:55:17 +0000
Files and hashes:         1: Ut75M0f2lyKg8Q9hezeAc6fUeDc.crl (hash: C4s7qEKLqDHq5KHjJWCp9vDkEHnuBUCS+t7AeWB5N6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3911 (0xf47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52DEF93347F69722A0F10F617B378073A7D47837
        Validity
            Not Before: Mar  2 04:55:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B4300D5C6CAAC8E86D55C482E8E8E66EAABC0086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:69:7a:a5:47:f2:fe:6e:1c:9c:17:9b:46:
                    ab:6e:94:7c:bd:8e:f1:34:45:c6:31:44:ed:6c:28:
                    03:a8:cd:68:a1:81:6c:f9:e7:fe:c5:4a:88:21:e3:
                    6a:38:ea:37:f4:2c:81:b0:86:b5:da:a0:f3:d8:8a:
                    ac:b4:3f:d3:e0:1a:6b:df:f1:97:e0:89:74:1c:c7:
                    81:62:d4:2d:8f:c5:f7:ff:7a:a0:9f:4d:9f:cd:d4:
                    37:1e:44:e4:02:74:6f:f8:87:24:84:b8:fc:a5:8c:
                    63:28:33:d3:38:ab:c3:f7:cd:6e:01:11:21:b0:8c:
                    dc:6f:d7:f4:78:52:c3:67:3a:92:06:ac:d4:56:60:
                    32:b3:a7:6b:e6:ac:25:e2:0d:52:d5:35:dc:f5:81:
                    54:85:c5:6b:22:2b:6c:0e:23:21:0b:7c:34:a7:81:
                    22:c4:aa:ca:c3:27:1b:83:34:cb:ed:5e:f9:09:b3:
                    45:ea:74:8a:76:8f:be:ac:a6:42:0c:84:57:82:2d:
                    f3:3b:a4:27:98:4c:53:83:52:ed:dc:1d:18:d3:f0:
                    dc:c7:e1:46:4d:66:c9:6b:2e:a6:c4:db:b6:e5:c7:
                    0b:2b:33:c0:ee:9e:3c:81:1a:85:59:e8:81:70:c1:
                    21:10:98:9f:31:23:b1:d0:0c:18:dd:24:e7:75:5e:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:30:0D:5C:6C:AA:C8:E8:6D:55:C4:82:E8:E8:E6:6E:AA:BC:00:86
            X509v3 Authority Key Identifier:
                keyid:52:DE:F9:33:47:F6:97:22:A0:F1:0F:61:7B:37:80:73:A7:D4:78:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Ut75M0f2lyKg8Q9hezeAc6fUeDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:41:c9:bf:42:11:82:1a:1b:36:14:3a:4a:b7:16:19:6f:
         4f:27:c7:c8:70:b2:c7:2b:6c:55:2c:87:8a:2b:64:80:ab:d1:
         70:fc:6f:34:5a:ab:8f:bb:a5:c6:9f:7c:6e:7d:8a:79:7b:63:
         7c:c5:af:26:35:b0:c5:50:61:a7:d9:20:26:a3:33:40:dd:b7:
         a9:45:3c:6d:1b:a3:c0:f5:e0:8c:1c:a3:9d:f7:c2:ed:9e:a7:
         21:82:f3:e5:81:8c:12:57:5b:fa:f6:03:56:1c:84:5e:4c:c1:
         34:c2:54:b3:7a:9d:70:e5:03:ef:07:c1:ed:a0:31:42:70:80:
         6e:0a:a1:da:80:00:c4:31:2d:6e:46:de:2e:be:48:91:50:61:
         5f:88:53:fa:4f:bb:2f:20:7f:b3:bc:d8:3b:e1:6e:c5:7a:a2:
         88:65:bf:85:9a:94:32:61:54:74:fc:e6:76:c1:ce:52:06:f8:
         9c:f7:89:15:74:ad:56:f0:47:0a:93:1b:02:fb:c5:f6:57:b0:
         a7:ca:9e:93:97:bf:5c:9e:14:6f:b3:89:29:20:36:10:74:21:
         0a:f1:8a:81:48:9b:a1:69:77:63:3c:3f:cf:be:b0:a9:5d:75:
         5f:2c:39:03:f9:92:08:d2:61:43:f5:84:f8:35:84:a2:19:f1:
         57:96:57:00
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICD0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJE
RUY5MzM0N0Y2OTcyMkEwRjEwRjYxN0IzNzgwNzNBN0Q0NzgzNzAeFw0yMTAzMDIw
NDU1MTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI0MzAwRDVDNkNBQUM4
RTg2RDU1QzQ4MkU4RThFNjZFQUFCQzAwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhzWl6pUfy/m4cnBebRqtulHy9jvE0RcYxRO1sKAOozWihgWz5
5/7FSogh42o46jf0LIGwhrXaoPPYiqy0P9PgGmvf8ZfgiXQcx4Fi1C2Pxff/eqCf
TZ/N1DceROQCdG/4hySEuPyljGMoM9M4q8P3zW4BESGwjNxv1/R4UsNnOpIGrNRW
YDKzp2vmrCXiDVLVNdz1gVSFxWsiK2wOIyELfDSngSLEqsrDJxuDNMvtXvkJs0Xq
dIp2j76spkIMhFeCLfM7pCeYTFODUu3cHRjT8NzH4UZNZslrLqbE27blxwsrM8Du
njyBGoVZ6IFwwSEQmJ8xI7HQDBjdJOd1XiGxAgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUtDANXGyqyOhtVcSC6Ojmbqq8AIYwHwYDVR0jBBgwFoAUUt75M0f2lyKg8Q9h
ezeAc6fUeDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURN
SUkvVXQ3NU0wZjJseUtnOFE5aGV6ZUFjNmZVZURjLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9VdDc1TTBmMmx5S2c4UTloZXplQWM2ZlVlRGMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTE9VRE1JSS9VdDc1TTBmMmx5S2c4
UTloZXplQWM2ZlVlRGMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYO1Byb9CEYIaGzYUOkq3FhlvTyfHyHCyxytsVSyHiitkgKvRcPxvNFqrj7ul
xp98bn2KeXtjfMWvJjWwxVBhp9kgJqMzQN23qUU8bRujwPXgjByjnffC7Z6nIYLz
5YGMEldb+vYDVhyEXkzBNMJUs3qdcOUD7wfB7aAxQnCAbgqh2oAAxDEtbkbeLr5I
kVBhX4hT+k+7LyB/s7zYO+FuxXqiiGW/hZqUMmFUdPzmdsHOUgb4nPeJFXStVvBH
CpMbAvvF9lewp8qek5e/XJ4Ub7OJKSA2EHQhCvGKgUiboWl3Yzw/z76wqV11Xyw5
A/mSCNJhQ/WE+DWEohnxV5ZXAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org