Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
File:                     pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft (raw, json)
Hash identifier:          YcGs39GB/wYRFB99t4BToXaZ2+SWfC8JG6wITTpfHvU=
Subject key identifier:   05:3B:6F:64:10:36:3F:B1:77:30:2A:0D:C6:3C:F9:92:40:C0:17:18
Authority key identifier: A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
Certificate issuer:       /CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0
Certificate serial:       0BD5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
Manifest number:          0BCE
Signing time:             Sun 02 Jun 2024 02:59:34 +0000
Manifest this update:     Sun 02 Jun 2024 02:59:34 +0000
Manifest next update:     Tue 04 Jun 2024 02:59:34 +0000
Files and hashes:         1: eakUGBEzbzNK7Qti6NgLjXiYsOw.roa (hash: 3UBvhoZHeYEiK36J12x5ZisN66BfZZwEwm2v5xnMm0E=)
                          2: pv5dHJMSfkqu_xAPOlwzDy3Rq8A.crl (hash: 8YB0jpxubxpN1/tCbaz9wENDB7NR3glHN0o7+Hjd9dw=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 02:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0
        Validity
            Not Before: Jun  2 02:59:34 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=053B6F6410363FB177302A0DC63CF99240C01718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:e3:2d:c1:2d:94:21:11:20:cd:d0:92:42:
                    18:a0:c5:70:07:86:02:58:11:5a:41:0f:11:c1:06:
                    57:ed:76:30:14:90:b5:e8:0a:58:a7:e2:e3:b1:be:
                    46:bd:fe:74:a9:53:50:76:2e:c1:89:8f:36:ac:2c:
                    de:7b:7f:4b:ae:6f:84:74:eb:87:35:22:9c:6e:50:
                    9a:1a:26:96:a8:fd:81:cc:5f:18:bf:b7:82:77:01:
                    a0:b5:44:7a:85:67:a0:a4:20:01:3c:5f:37:94:3f:
                    7e:f0:66:94:dd:a6:da:47:d6:e5:88:f8:ad:78:2a:
                    ca:a6:89:8e:44:cd:ca:df:a8:f3:36:44:65:12:64:
                    33:e4:bc:3f:b4:bf:7c:7d:d4:9f:71:07:57:d4:1e:
                    5b:a6:84:44:d1:79:e3:13:d1:ff:5f:de:bc:b6:0f:
                    83:fc:d5:b3:6e:11:36:b2:d4:87:d0:24:ca:5b:9b:
                    f6:1e:7d:21:80:9b:77:0e:bd:d5:fc:3b:1a:af:89:
                    7c:92:21:39:65:e6:47:57:e8:8d:94:a4:7e:0d:2f:
                    9a:72:15:05:c3:89:36:bf:65:e6:8b:f0:8f:27:0c:
                    45:dc:a3:8b:b8:58:d0:9f:cb:3c:18:1e:a2:69:44:
                    01:05:7d:6b:fe:31:18:88:17:2c:16:e8:c4:07:f6:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3B:6F:64:10:36:3F:B1:77:30:2A:0D:C6:3C:F9:92:40:C0:17:18
            X509v3 Authority Key Identifier:
                keyid:A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:66:07:0e:6d:82:c2:20:32:b8:d5:9c:bf:2e:d2:1f:80:c6:
         c2:4d:38:3e:e0:6e:ed:fa:ce:63:6f:31:29:a1:b6:59:b2:47:
         b8:8c:c7:91:17:1a:76:21:a4:df:dd:94:2e:fe:44:d3:c8:34:
         b8:64:b3:cd:79:7d:97:9d:98:a6:52:d6:bd:ad:49:08:50:50:
         c1:b4:b1:27:ba:fa:34:09:b7:f3:2f:0f:e2:68:8c:53:56:f0:
         6e:9b:23:39:ce:4b:71:2d:3f:c9:ec:e4:41:cf:d6:77:e3:5e:
         b2:00:5d:34:7b:f2:68:62:70:61:d5:5f:2f:58:51:bf:aa:c3:
         60:f6:15:e6:a3:07:3f:45:3c:a7:34:3f:a4:8e:f5:0e:93:02:
         31:d1:ae:89:2e:d4:b6:de:0a:d0:59:15:27:d7:56:da:c4:88:
         5f:c1:3d:0e:ed:1a:ea:e5:89:fa:af:64:51:21:18:44:3a:6c:
         e6:60:fd:16:62:d6:ad:cc:5a:27:27:ff:71:25:6c:3a:9a:70:
         09:8d:28:2d:a2:b0:09:a9:1c:97:02:93:3d:8b:0c:89:23:3c:
         d6:bb:56:fb:7e:ea:17:e5:9f:72:ce:fe:bb:fd:54:04:66:f4:
         e2:a8:b7:96:40:11:53:ce:d5:45:fd:ea:71:e6:db:fb:56:c9:
         b7:9f:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:21:41 2024 by rpki-client on console-ams.rpki-client.org