Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.mft
File:                     Nkd2xo-bbNyggOJrAfMYfgcvXJk.mft (raw, json)
Hash identifier:          Np086rcYFcPw3KlqqeqCvwYHDI7uIe6zNImwv6IQIMQ=
Subject key identifier:   67:47:70:65:33:19:37:DB:8F:2C:D7:66:40:2B:0B:57:D7:6E:A3:5B
Authority key identifier: 36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Certificate issuer:       /CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Certificate serial:       0C89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.mft
Manifest number:          0C65
Signing time:             Wed 14 Sep 2022 23:49:39 +0000
Manifest this update:     Wed 14 Sep 2022 23:49:39 +0000
Manifest next update:     Fri 16 Sep 2022 23:49:39 +0000
Files and hashes:         1: Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl (hash: ++InqsTydchBZ7oxhyf4toAhPV7G9yhVLcHUecGHJ5g=)
                          2: WGrLodkUyITihXH3r7qoS24fhEE.roa (hash: lXOeX32/wpBzHUrCW4Ug1xHEs8ltc0oLvo0gvOmWPME=)
                          3: eajR2APuXT_RVq-59vNEUw1D6OU.roa (hash: EakUG8loO6c7RbW8hX6Rj4h9166iGRdiMNSASwVphkU=)
                          4: fRUUxqtF6BzjsukrC_uvaufpqPE.roa (hash: 9TfhxTSFcU8jOcnIH3iAagqdLYDgHQO5dfMaNacQJmk=)
                          5: hYWQNjp0B5AT9dFcBmxPvnKP91Q.roa (hash: ojey9q/sJOaTALiI33t0S6Lspx9A1UFcn82LO5eziDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3209 (0xc89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
        Validity
            Not Before: Sep 14 23:49:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=67477065331937DB8F2CD766402B0B57D76EA35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:d9:04:51:2d:95:bc:5b:93:dc:b0:08:4d:
                    c1:fe:75:ab:65:5c:ff:22:9b:de:bb:d7:a3:56:62:
                    5f:ad:0e:d1:86:ce:f5:b0:05:a4:e8:3b:43:cc:3b:
                    94:9f:59:4b:37:ab:e1:a1:96:db:db:9d:06:4f:6b:
                    33:1e:0f:31:ee:98:78:0b:53:87:c7:08:29:4f:e4:
                    a4:17:58:6a:e9:1f:f5:d0:ea:42:79:5b:75:e7:e4:
                    c5:55:ec:f6:64:ef:57:b9:c5:9a:2a:50:9b:34:81:
                    cd:a0:85:20:d3:c9:97:5e:5b:fb:af:b6:28:13:31:
                    11:b0:ae:13:ef:c8:da:8a:79:9d:aa:0f:0f:f3:e0:
                    05:43:dd:cc:78:20:79:86:da:d5:35:bb:80:94:99:
                    5a:6d:ae:f9:b8:a8:78:c2:80:27:7a:ca:7e:69:7b:
                    e1:3b:46:3f:05:ac:9a:de:49:95:54:17:03:09:41:
                    6a:76:53:98:65:ab:98:8b:d5:d2:95:90:c6:bf:b1:
                    76:af:17:98:1b:aa:d2:89:bf:cc:04:3e:a4:ee:3c:
                    3a:be:95:02:ac:ae:65:a5:1f:b1:37:2e:6d:c4:1e:
                    2e:98:57:a5:15:62:1e:8b:f9:23:a2:a0:df:9a:47:
                    7c:c0:14:e1:4f:6d:2a:58:72:c2:50:a4:73:b7:34:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:70:65:33:19:37:DB:8F:2C:D7:66:40:2B:0B:57:D7:6E:A3:5B
            X509v3 Authority Key Identifier:
                keyid:36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7f:94:68:63:89:c1:50:ef:7d:99:38:d3:f9:b1:8f:58:84:
         3f:f3:9b:d7:67:f5:04:ec:ea:3d:0c:7c:5d:8c:73:8f:3d:68:
         20:56:3d:93:31:75:e3:3e:4c:e4:76:10:22:8b:2a:ab:09:fa:
         a0:c7:7c:89:b1:17:02:71:9d:d3:28:aa:0c:46:7b:83:b5:32:
         f4:da:84:0d:72:bb:14:0d:2a:ca:4c:eb:95:ac:1c:f2:e8:93:
         b7:21:74:8d:91:df:a8:d6:9a:0d:32:27:24:78:ce:5f:00:89:
         9c:dc:32:ee:ff:de:dd:16:d1:7b:b3:7c:dd:01:b2:81:20:47:
         84:ee:7b:cd:22:75:d0:60:a6:76:c8:90:4a:a1:04:e5:31:13:
         6d:c5:38:0f:88:05:a6:3c:17:d0:27:9a:7d:33:8e:ce:10:24:
         b0:16:88:f3:ae:7b:eb:b1:8e:6e:27:b6:2d:a6:f1:a7:b4:00:
         6e:3f:07:58:ae:32:0b:a8:37:c3:6e:6c:a1:d9:22:43:38:a8:
         e4:0d:57:bc:f1:2a:24:2b:e0:e6:a5:55:43:1c:27:60:0b:96:
         d4:fd:b0:f9:ae:e0:b9:ed:70:92:15:98:fd:07:c7:c4:ea:e3:
         ec:6c:d1:85:28:81:98:16:b3:8b:52:03:a1:29:a3:0a:39:b1:
         cc:bf:30:bd
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzY0
Nzc2QzY4RjlCNkNEQ0EwODBFMjZCMDFGMzE4N0UwNzJGNUM5OTAeFw0yMjA5MTQy
MzQ5MzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY3NDc3MDY1MzMxOTM3
REI4RjJDRDc2NjQwMkIwQjU3RDc2RUEzNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkENkEUS2VvFuT3LAITcH+datlXP8im96716NWYl+tDtGGzvWw
BaToO0PMO5SfWUs3q+GhltvbnQZPazMeDzHumHgLU4fHCClP5KQXWGrpH/XQ6kJ5
W3Xn5MVV7PZk71e5xZoqUJs0gc2ghSDTyZdeW/uvtigTMRGwrhPvyNqKeZ2qDw/z
4AVD3cx4IHmG2tU1u4CUmVptrvm4qHjCgCd6yn5pe+E7Rj8FrJreSZVUFwMJQWp2
U5hlq5iL1dKVkMa/sXavF5gbqtKJv8wEPqTuPDq+lQKsrmWlH7E3Lm3EHi6YV6UV
Yh6L+SOioN+aR3zAFOFPbSpYcsJQpHO3NBexAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUZ0dwZTMZN9uPLNdmQCsLV9duo1swHwYDVR0jBBgwFoAUNkd2xo+bbNyggOJr
AfMYfgcvXJkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9QUExF
Ui9Oa2QyeG8tYmJOeWdnT0pyQWZNWWZnY3ZYSmsuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL05rZDJ4by1iYk55Z2dPSnJBZk1ZZmdjdlhKay5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RPUFBMRVIvTmtkMnhvLWJiTnlnZ09K
ckFmTVlmZ2N2WEprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AH5/lGhjicFQ732ZONP5sY9YhD/zm9dn9QTs6j0MfF2Mc489aCBWPZMxdeM+TOR2
ECKLKqsJ+qDHfImxFwJxndMoqgxGe4O1MvTahA1yuxQNKspM65WsHPLok7chdI2R
36jWmg0yJyR4zl8AiZzcMu7/3t0W0XuzfN0BsoEgR4Tue80iddBgpnbIkEqhBOUx
E23FOA+IBaY8F9Anmn0zjs4QJLAWiPOue+uxjm4nti2m8ae0AG4/B1iuMguoN8Nu
bKHZIkM4qOQNV7zxKiQr4OalVUMcJ2ALltT9sPmu4LntcJIVmP0Hx8Tq4+xs0YUo
gZgWs4tSA6Epowo5scy/ML0=
-----END CERTIFICATE-----