Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/VSoHAdbvvQstqPGUHi8DxbAbn20.mft
File:                     VSoHAdbvvQstqPGUHi8DxbAbn20.mft (raw, json)
Hash identifier:          d8z9BUxTa1YsYfYTP+uuT5LjBBOSYEp+pgXpPwAWMKg=
Subject key identifier:   7C:14:62:BA:E3:E3:C3:4F:0D:C8:38:C8:88:46:F1:7B:89:4F:84:85
Authority key identifier: 55:2A:07:01:D6:EF:BD:0B:2D:A8:F1:94:1E:2F:03:C5:B0:1B:9F:6D
Certificate issuer:       /CN=552A0701D6EFBD0B2DA8F1941E2F03C5B01B9F6D
Certificate serial:       0DA9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VSoHAdbvvQstqPGUHi8DxbAbn20.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/VSoHAdbvvQstqPGUHi8DxbAbn20.mft
Manifest number:          0DA9
Signing time:             Thu 03 Dec 2020 17:35:52 +0000
Manifest this update:     Thu 03 Dec 2020 17:35:52 +0000
Manifest next update:     Sat 05 Dec 2020 17:35:52 +0000
Files and hashes:         1: VSoHAdbvvQstqPGUHi8DxbAbn20.crl (hash: DniUrCuqqzysxqhRpCZ+DtWpvDIUI0T0dQ5p162bZeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3497 (0xda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552A0701D6EFBD0B2DA8F1941E2F03C5B01B9F6D
        Validity
            Not Before: Dec  3 17:35:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7C1462BAE3E3C34F0DC838C88846F17B894F8485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:87:fb:77:24:08:7e:37:45:10:53:8e:d3:
                    cf:1a:69:81:97:fd:59:18:17:de:d6:14:58:2a:1c:
                    24:76:a0:56:0f:10:13:02:16:90:b7:61:c0:ec:c8:
                    b3:13:a2:11:87:d3:b5:ba:81:b4:fa:00:b5:6b:13:
                    99:30:f8:ab:41:36:bc:b8:c1:7b:58:54:8a:62:3f:
                    f2:bd:87:3d:af:3b:5f:af:00:c2:94:78:a1:38:dd:
                    d6:cd:d3:76:5d:16:a7:17:76:06:41:30:0b:ce:bd:
                    23:36:ed:4b:27:f1:14:e3:63:ea:93:e5:4c:fa:8d:
                    66:d5:97:aa:41:2d:6f:07:b3:c1:b5:4d:36:87:7c:
                    4a:a6:07:7c:9a:e6:f8:84:9e:a5:69:42:72:bb:af:
                    75:26:ba:45:28:5e:e0:b7:5c:c4:b2:bd:77:14:01:
                    10:be:a5:8a:a9:28:0a:50:c4:f1:2a:aa:47:c5:af:
                    57:1f:66:eb:22:d7:90:8d:88:f2:57:b0:ee:5e:93:
                    9e:35:fd:34:1f:5c:b6:e8:3c:88:67:1b:02:1b:03:
                    5a:a3:63:bf:bd:a7:2f:c0:fd:b4:dd:f1:8b:52:38:
                    58:c9:3b:5b:b4:6c:3a:c9:38:6f:c1:a3:90:fb:8f:
                    38:2d:54:51:5d:45:3a:36:32:aa:33:83:c0:f9:24:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:14:62:BA:E3:E3:C3:4F:0D:C8:38:C8:88:46:F1:7B:89:4F:84:85
            X509v3 Authority Key Identifier:
                keyid:55:2A:07:01:D6:EF:BD:0B:2D:A8:F1:94:1E:2F:03:C5:B0:1B:9F:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/VSoHAdbvvQstqPGUHi8DxbAbn20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSoHAdbvvQstqPGUHi8DxbAbn20.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/VSoHAdbvvQstqPGUHi8DxbAbn20.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:69:03:00:7b:af:6a:78:f9:ba:67:67:4c:c2:e6:23:10:
         3c:0f:d3:2a:d0:ac:0f:22:ce:b9:ed:54:3b:20:a3:8b:06:e0:
         b6:3e:ad:76:91:42:be:cc:ac:4c:99:94:77:16:41:44:ab:20:
         a7:61:a2:e1:5b:a3:42:fd:e4:e7:e9:08:87:fc:99:29:2a:23:
         c5:44:c3:70:9d:31:c2:4f:d4:ad:58:94:63:6a:f9:72:db:d1:
         93:43:bf:2e:4f:77:37:4f:4d:a7:a0:f1:45:7f:90:87:77:80:
         c4:eb:10:55:cb:5f:19:42:8e:d1:56:71:90:48:53:d5:61:b9:
         41:a1:e5:33:c2:ec:21:68:17:55:d0:ab:05:f4:04:c2:e1:3b:
         d6:9a:a6:4d:25:34:83:78:ba:17:29:2f:27:88:0c:16:c6:6d:
         1c:fd:0f:17:ff:33:8f:01:b7:95:30:77:db:6e:6e:e3:f8:7f:
         e3:8c:36:d2:39:3a:a3:b9:e1:79:28:53:8f:17:50:78:b4:67:
         3c:ef:ad:e6:4d:45:56:64:1d:ba:c8:85:98:eb:4b:5b:5c:d6:
         2c:cf:49:04:e0:ba:0f:0b:a8:18:95:01:a8:3d:d0:b2:f9:29:
         fc:ee:fc:66:7d:b0:7b:e0:ba:73:ef:28:82:14:a9:3f:ce:01:
         03:e2:ab:60
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTUy
QTA3MDFENkVGQkQwQjJEQThGMTk0MUUyRjAzQzVCMDFCOUY2RDAeFw0yMDEyMDMx
NzM1NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdDMTQ2MkJBRTNFM0Mz
NEYwREM4MzhDODg4NDZGMTdCODk0Rjg0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRqYf7dyQIfjdFEFOO088aaYGX/VkYF97WFFgqHCR2oFYPEBMC
FpC3YcDsyLMTohGH07W6gbT6ALVrE5kw+KtBNry4wXtYVIpiP/K9hz2vO1+vAMKU
eKE43dbN03ZdFqcXdgZBMAvOvSM27Usn8RTjY+qT5Uz6jWbVl6pBLW8Hs8G1TTaH
fEqmB3ya5viEnqVpQnK7r3UmukUoXuC3XMSyvXcUARC+pYqpKApQxPEqqkfFr1cf
Zusi15CNiPJXsO5ek541/TQfXLboPIhnGwIbA1qjY7+9py/A/bTd8YtSOFjJO1u0
bDrJOG/Bo5D7jzgtVFFdRTo2Mqozg8D5JHX5AgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUfBRiuuPjw08NyDjIiEbxe4lPhIUwHwYDVR0jBBgwFoAUVSoHAdbvvQstqPGU
Hi8DxbAbn20wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVFUEFO
REZBUi9WU29IQWRidnZRc3RxUEdVSGk4RHhiQWJuMjAuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1ZTb0hBZGJ2dlFzdHFQR1VIaThEeGJBYm4yMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFRVBBTkRGQVIvVlNvSEFkYnZ2
UXN0cVBHVUhpOER4YkFibjIwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAB6AaQMAe69qePm6Z2dMwuYjEDwP0yrQrA8izrntVDsgo4sG4LY+rXaR
Qr7MrEyZlHcWQUSrIKdhouFbo0L95OfpCIf8mSkqI8VEw3CdMcJP1K1YlGNq+XLb
0ZNDvy5PdzdPTaeg8UV/kId3gMTrEFXLXxlCjtFWcZBIU9VhuUGh5TPC7CFoF1XQ
qwX0BMLhO9aapk0lNIN4uhcpLyeIDBbGbRz9Dxf/M48Bt5Uwd9tubuP4f+OMNtI5
OqO54XkoU48XUHi0ZzzvreZNRVZkHbrIhZjrS1tc1izPSQTgug8LqBiVAag90LL5
Kfzu/GZ9sHvgunPvKIIUqT/OAQPiq2A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org