Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.mft
File:                     LYTKJpMg4lYhai3uLqOBowRSarQ.mft (raw, json)
Hash identifier:          KwvG2vt85LVQDmJrHSZVy/gLGi9yltjmeSsTsuys8QA=
Subject key identifier:   27:A1:7F:D0:38:AE:0B:33:0E:E5:B4:71:D7:06:5D:1E:B0:EA:5C:4E
Authority key identifier: 2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
Certificate issuer:       /CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Certificate serial:       0B8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.mft
Manifest number:          0B79
Signing time:             Sun 14 Jan 2024 11:45:28 +0000
Manifest this update:     Sun 14 Jan 2024 11:45:28 +0000
Manifest next update:     Tue 16 Jan 2024 11:45:28 +0000
Files and hashes:         1: -0qZX9hUjDl9gCfs11Nf0Sm0efQ.roa (hash: ydIO6KrQwzaMkFS1WB6kYnuMM1x7UsqT0CieZsTP1DE=)
                          2: Aj2WUd_GHeUPJ0by1slWpaEdwxo.roa (hash: NC191Krd5dbUvTgpwipLhkExaWSpmTte9GUNLMvnDPE=)
                          3: LYTKJpMg4lYhai3uLqOBowRSarQ.crl (hash: PG0/nlyh2M6+Ui1QHlW1/+fQjsMDqMe9JoedmvmxA8k=)
                          4: oX0Z-z6YB6FHY1PbCy01UMlVuNA.roa (hash: XuRSPfdzYeECHiahleXAfYFspYfWz0InEHP3e8S/n3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2956 (0xb8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D84CA269320E256216A2DEE2EA381A304526AB4
        Validity
            Not Before: Jan 14 11:45:28 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=27A17FD038AE0B330EE5B471D7065D1EB0EA5C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:81:19:02:93:1b:2f:f8:5e:4b:8e:8e:93:
                    2a:1c:74:6a:de:23:77:9d:9f:be:d0:d7:30:78:4f:
                    de:b0:f4:e4:88:96:8e:c5:dd:bf:7f:c0:10:39:75:
                    dd:3a:7b:c9:4b:e1:5d:dd:94:6f:bb:8e:83:73:31:
                    52:69:73:9d:7c:4e:13:90:23:f5:5e:b5:b2:fe:24:
                    9c:fe:ff:ae:8d:d4:64:0f:94:7a:2f:81:3b:45:aa:
                    f0:74:cc:ac:fd:1f:f5:a9:32:76:fe:86:08:ba:0b:
                    5b:77:7a:90:0c:14:fa:2e:4f:cb:56:94:39:b3:7f:
                    22:98:84:fd:c0:cf:f3:a1:d2:71:c4:89:de:81:02:
                    a1:0b:15:16:37:77:c2:22:64:72:b4:2e:87:37:c9:
                    ab:78:e1:e8:99:dc:95:c1:1c:f5:b9:49:fd:1d:09:
                    b7:64:9b:f9:71:19:59:87:f9:00:0c:48:7f:6d:c9:
                    43:ff:a0:5f:4a:17:3a:b0:3a:aa:01:2b:2e:22:4d:
                    90:ba:36:29:45:53:2e:73:b3:74:3f:7a:f7:fb:0d:
                    86:7d:3d:72:1b:45:67:17:9c:06:16:54:1f:49:e0:
                    0c:5d:02:dd:2a:fc:4a:6f:c8:ed:c3:bf:dd:10:84:
                    a9:99:cb:a2:4b:8a:da:80:7c:ae:98:ef:0e:70:b4:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:7F:D0:38:AE:0B:33:0E:E5:B4:71:D7:06:5D:1E:B0:EA:5C:4E
            X509v3 Authority Key Identifier:
                keyid:2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:05:cc:66:98:06:03:cf:36:78:bb:cd:30:e5:88:91:38:
         19:87:a9:74:a2:9e:34:f0:16:99:31:ae:97:20:81:75:76:4f:
         24:42:7b:8e:4f:d1:53:c3:66:e2:79:98:87:99:13:d8:bf:3f:
         01:72:11:ad:25:b8:ac:48:e6:31:48:07:42:0a:81:fe:de:57:
         e4:aa:5f:40:db:d0:0b:46:ab:80:b0:5c:10:cb:d7:4e:75:ce:
         a2:27:97:6d:9f:cf:99:61:f6:74:e0:9f:a1:27:b0:85:5c:0b:
         5c:3e:60:f4:00:fd:f8:d1:ef:a6:75:f6:5b:ba:60:1a:38:94:
         78:9a:05:15:22:a3:81:02:18:6d:08:1f:e9:b6:3f:95:00:02:
         59:f1:69:86:48:fb:67:b8:7f:24:4b:4d:95:94:64:39:1a:28:
         6b:8b:c9:8c:ce:f6:f5:a9:c4:c3:80:fe:aa:45:74:6c:be:40:
         a3:56:01:48:7b:6f:9a:8d:13:6f:6b:1f:bf:1e:b0:c5:13:98:
         0e:d1:a3:ba:b7:69:e8:53:e9:d8:c1:f0:62:e6:4f:92:fb:0b:
         f1:c3:da:07:d1:3a:82:17:73:35:68:af:1b:b2:14:e0:8c:88:
         79:13:e6:0e:ec:c4:82:bc:84:a3:c6:af:f1:e9:2c:ff:17:6e:
         16:b0:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org