Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
File:                     b96jRwcVIpDB0mBv-_xpuSfUCls.mft (raw, json)
Hash identifier:          mqzHyb8i5ZbPpWfTREaz++qkG9TrgpYDTQ2os4vEofI=
Subject key identifier:   08:86:CA:42:E8:F2:8E:D7:D3:94:51:E5:B7:F5:FA:19:95:33:E4:F8
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0D5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
Manifest number:          0D12
Signing time:             Sat 29 Mar 2025 09:34:05 +0000
Manifest this update:     Sat 29 Mar 2025 09:34:05 +0000
Manifest next update:     Mon 31 Mar 2025 09:34:05 +0000
Files and hashes:         1: 43zxwQkQ1BJtMtCf2OgD7QPMNSg.roa (hash: liz/DsHIAzdCwpACCCIGePe4Dg4LV17i53qHR79+7f0=)
                          2: 79jaa3KW1BX49iynPVA8_Yk-Ly4.roa (hash: 9eigHpHl8K1C+DHq+/l1rzr+VMKG92zrNmMYDTTg41o=)
                          3: VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa (hash: OqpB/74KEq5CLRrcGpuP5PJwLxDCOmCaW+rOSSA7Ucc=)
                          4: WGMh2-qtfMLV7JGNrIs3JO39OQI.roa (hash: c0KTG0HrlfLImNTUqc06EtzsokorvHm1YEPb718gd7w=)
                          5: _7rdgf3MstxjV13wfizet_1466g.roa (hash: tx5ru9HuNvx1NeLoN4sLat3jjFhp7rGzwr+1yR0mOA8=)
                          6: aH6pIl04_NUCgEQHZfx-pxyo0M4.roa (hash: dX0B1ckXuX8WCOcas/V+KdeSlhqHegwbfrUhY1tdMYk=)
                          7: b96jRwcVIpDB0mBv-_xpuSfUCls.crl (hash: c+cyzqB49ZYOJFPmY5hBzq3G4b5wzCaisG72ox5s4yc=)
                          8: hhNWcDPQkJDfzlF6cCTumslKuh4.roa (hash: 8k+h3x3u7qMvLRA2cYHE92WhBaL4XhFt00IbFPqKyOQ=)
                          9: ip1xXBUU2Yel8_FfS-ADzhHG3T0.roa (hash: BeeAavcJicDPH5FPFQ77TY+cXAfplqBR8JIEYsHMKfU=)
                          10: j2txO-1uU0yor-gOVggZ3X7ZrHU.roa (hash: O+o/AGxCvKvKwBE97uMgeE2RYD5rx6I1yk5C+XWbDXQ=)
                          11: zdnKzBBTuT6jn4y2d50eWgk-vAU.roa (hash: xw9Q4z5PZgNObdTHExdawhNihqNFJHEAsBzeqeIPLtI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3420 (0xd5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Mar 29 09:34:05 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0886CA42E8F28ED7D39451E5B7F5FA199533E4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:dc:61:27:03:df:b4:89:58:59:97:7d:bd:
                    5e:4d:4b:92:9a:f5:44:72:8e:23:6d:31:72:b5:1e:
                    3c:5a:fd:f8:3e:c1:9e:93:30:ad:a7:c9:73:36:88:
                    e9:f9:df:25:1a:01:e8:53:e6:12:ce:82:b2:a8:72:
                    bc:c2:7a:85:f3:d3:90:23:dd:4f:78:d4:10:04:14:
                    e6:cc:49:9c:3b:ad:97:3b:3c:9e:9d:22:3a:94:3b:
                    6e:6b:6a:9a:33:4b:b7:a1:6a:33:91:63:7b:39:56:
                    b0:40:e9:77:82:4e:73:5c:a3:03:c7:a6:47:0b:36:
                    fb:56:83:b3:a7:9e:74:79:f7:da:b2:35:97:28:a0:
                    09:03:82:ff:f1:90:91:f6:9c:e4:0a:a8:b8:87:dd:
                    90:ad:4e:ba:34:cf:62:21:a2:d8:a8:9f:d5:18:73:
                    57:86:d4:11:2e:c4:64:0b:0e:4b:c0:8e:dd:fd:d8:
                    3f:30:d4:06:c9:2a:48:a4:cd:d2:6d:a0:8a:3c:7c:
                    1a:e1:50:54:98:67:09:07:d7:b6:f0:c8:68:8a:e2:
                    51:54:b0:77:ba:96:0b:79:8e:0e:a5:e4:64:d0:90:
                    68:e1:3a:6b:61:9c:d1:7c:fe:4e:f6:02:75:8e:fe:
                    c1:a3:26:3a:f1:1a:c2:9f:d2:41:1d:17:24:0e:56:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:CA:42:E8:F2:8E:D7:D3:94:51:E5:B7:F5:FA:19:95:33:E4:F8
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:23:ca:be:ef:b0:78:d4:1a:e6:ee:a5:b0:00:72:ef:91:91:
         27:ba:da:b7:84:c5:91:36:ec:10:93:70:57:3d:e6:8d:c2:f3:
         fb:65:25:a6:a9:e6:43:9a:36:27:0b:8a:02:c8:34:21:6a:f4:
         57:31:4c:0d:dc:07:5c:f2:fc:af:5e:d8:81:c7:43:1f:9f:e7:
         fc:0c:f7:ce:d2:48:74:49:da:4f:5f:c4:09:45:85:d1:f3:24:
         bb:71:51:38:e5:c2:3f:22:4d:74:0a:93:60:83:38:a2:49:47:
         cd:95:4e:80:1d:3e:20:b7:70:cb:8f:90:ca:c4:e4:f7:de:8a:
         57:86:05:7d:e6:06:17:9c:a6:e6:ac:6d:21:48:15:bf:c0:d4:
         e0:c5:4c:87:63:83:52:a2:f6:02:fb:38:52:c0:2a:c6:2f:2a:
         6f:5e:0b:ac:63:d1:e8:da:35:c3:b3:64:7f:6f:86:6e:d5:d4:
         4c:85:b7:d1:ab:5d:2b:77:93:79:6e:4c:c3:2b:30:ad:54:70:
         82:c2:59:fa:a5:e1:d3:8c:6d:f9:ef:cf:57:cc:43:13:58:ac:
         f3:d0:77:60:67:99:89:c5:a1:9c:ac:a9:4e:5e:a8:42:78:80:
         d9:5c:84:49:01:2f:10:47:e9:ab:b0:66:71:73:9a:99:a6:f5:
         19:2c:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----