Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
File:                     FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft (raw, json)
Hash identifier:          cAVNdeh0zCWLVqnJlekFCUQEfyF2KU8gQlcqgy9cjfM=
Subject key identifier:   3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       1801
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
Manifest number:          17B5
Signing time:             Thu 21 Nov 2024 20:54:11 +0000
Manifest this update:     Thu 21 Nov 2024 20:54:11 +0000
Manifest next update:     Fri 22 Nov 2024 02:54:11 +0000
Files and hashes:         1: -FjQAAx8RqmGsuuWgV8GriaTqdA.cer (hash: JgESsffOlPMQhptNP4+k0/zE5wbx7GM3zEJmc9iLkow=)
                          2: 2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer (hash: Ai+anP3jOWl3tnag2H8N6Dh64jRqJC7m4ScHDblUc6k=)
                          3: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (hash: JyudcGULrSa/DetF1TanmP0LZuBb4Pdyj8et/KZv2sg=)
                          4: 4hRiP9Epy5cnQNOR2vORlvKt8r0.cer (hash: MllxS55j6/4HMNHWBuN8eygDIdCDCtWOIZv2s2kIu4k=)
                          5: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer (hash: iapzW322wsOz9HyLnm+Saz0gn1pD4DpLBf2a+5FVSWY=)
                          6: 7hlBw3vR4s8SUS-YqzZsKdp5txg.cer (hash: nyFUH52rXM/qBrZUKbRhY8Qybo5p9jtK0FjT+32ixjg=)
                          7: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (hash: 1bhnFoLRYe/4jrK0dOmfCRRCJSyHtPjdEmV4HbGfDfw=)
                          8: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (hash: 69YT660aHwW/dmp6bRXoPdEHUD+RCLczZzHBiEyQvIw=)
                          9: B-NqPSGaivyE-IswVT5jjObCzs4.cer (hash: hJqk7UGqgv5ygF6K1lwXxyUA1efmX+oWQiIkdFpRuwg=)
                          10: B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer (hash: BlpFzeXOBfuZT8h7ccpd6dGQb32D3Fp2LWbd7hizw7o=)
                          11: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (hash: 2PWfsNk3u/lyO49p4kPzv9DHVCvji4sZt909yiOZ+uc=)
                          12: C2fHjjXSNjKiVTKu_otKn8q-O00.cer (hash: h8vLyFPJchLvyRg+67CplV6DgXi4lgvcJUc+zDS8RSQ=)
                          13: FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl (hash: o6hIh7qzLZI3c3E0g1moafbz+d0VDlvHVtWMCem9vXI=)
                          14: IKzKhxhQA3Ov93tBSyPcal8UdO4.cer (hash: d1xJyFv1HdE1PYPlToEFMyl6iHbA7VWTxLgjD4arSIg=)
                          15: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (hash: iXU4XXzGBdFRHEDSe5df89gXym9whhcj27zSqAJswzI=)
                          16: Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer (hash: QoxT/iW4rpQ8MmaEaFzstEbCm/LMV2QRe9G6PhcHxBc=)
                          17: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (hash: /9Ni0OThyEMOiww60u+X4RGCFBbqRl4vDb7BbK6BBbA=)
                          18: RPjc9msltxkFbR7WXBbqklflVT0.cer (hash: bkd4hQQyl1jAofFd7gd5sAEKsmrln3VSDADXJ3rse0w=)
                          19: RUwtAMcuK1O0J_30WpO8Vn5AQOI.cer (hash: umnkF1zi95Kmh3lCFRbCvsBEvO+MjF9tq9QKHbxr3AM=)
                          20: RXsQNypobj_3Nla-tc0968kyNxo.cer (hash: WZGrw7JTP17Z5hUt6E/bYnLdUXjMAZ91xOaQedEX8rA=)
                          21: RhvA5RYCLDwnj8iSQgcF_rhWaNk.cer (hash: OiVXj7NXl4AyRyNmHo8Kt+QBFxBLHWW08JiSaDhyheg=)
                          22: S0bOj4AxurdTZNpb2YHoiFBPtBE.cer (hash: Ks0RLGzbWgaFvFdNyoK2Ps0UTWqgOoMWZZnk7Njlg64=)
                          23: UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer (hash: HoRK16pSppJTh0dn+yCDkiL3tYArg83tCzOO+C/5Eq4=)
                          24: WHbkuN-qIkwBnSRpMfw816T-7So.cer (hash: 2JHDoUTOUQ8Pz0hH7VpujawvpaeaOzMctE63SzMWbqY=)
                          25: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (hash: eCIocOZjzfwVVcrHUEs5L1QeXfRMfWalOPDrDem813Y=)
                          26: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (hash: J6Gx2U1PXOzP/hVJKu6NfBx5dVWR/NQgnsBaZR4aOok=)
                          27: mgzAu2MdFRMQI4SQg9lBotvN-mU.cer (hash: VsXXKtLTINbdBEN8MnIuigEO4x+YjNtjvBSF8JrxYmw=)
                          28: tKZaDrhmkhnEGFRC1J_J1vgltmU.cer (hash: ngnK91v45N/1ay/bIsMtch7Eeu4B4Wkwc5jYp1qIBV8=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 02:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6145 (0x1801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Validity
            Not Before: Nov 21 20:54:11 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=3CE3DF617BEA5D05792AF99707A7FD2C2CCD9172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:ee:25:61:32:a6:5d:0e:04:37:32:5f:d6:
                    12:41:14:61:6d:c2:98:d3:de:c8:01:8e:72:15:6a:
                    91:83:f2:e4:91:ef:94:48:d8:2b:66:18:29:ae:e4:
                    2d:05:bc:86:8b:5f:b9:cb:3c:e4:bc:9e:6b:6c:b4:
                    b7:92:23:a6:28:14:98:44:9e:1b:b1:2a:4f:e3:09:
                    8a:83:ad:04:cd:6d:01:d6:95:3e:e4:d8:bf:db:86:
                    13:70:fe:8b:db:c8:29:57:61:29:fb:10:13:c4:18:
                    59:68:50:fb:a1:ec:df:0d:33:46:92:90:9d:9b:7e:
                    c9:db:02:06:a8:73:4f:d9:fb:13:6a:b7:c3:c2:0f:
                    ae:b1:4f:fa:37:fd:a8:59:2d:13:62:b3:52:de:b9:
                    3a:9f:48:6a:ac:f2:e4:77:83:38:83:2d:6b:c2:0a:
                    b7:e4:63:c9:33:82:fb:1c:06:6d:4c:2b:c8:09:12:
                    a4:ba:fa:3a:59:36:b1:c4:46:a3:92:e2:64:33:c9:
                    6c:9f:aa:cb:1f:da:86:13:ea:b7:fc:0b:30:c1:3f:
                    a0:4a:9b:cc:66:93:da:86:20:96:ec:20:78:e0:10:
                    1e:3f:82:b4:61:c9:8e:f0:93:19:61:f9:a4:d7:ae:
                    f7:e4:a6:db:39:65:3f:43:e5:b0:cc:30:bb:4d:aa:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:59:a1:5f:f8:65:ff:44:d6:74:51:8c:00:12:52:25:8f:a8:
         ad:5d:d0:5a:b3:f6:38:37:35:a4:85:0b:12:07:61:9f:38:9c:
         85:03:f0:bb:d3:c1:11:fd:d3:7f:70:aa:1d:f4:a0:34:3b:7f:
         bd:03:f1:e8:ba:ad:83:a7:a3:6f:dc:2d:65:ec:66:08:1e:8f:
         7f:bc:fb:81:68:18:f1:7c:92:21:56:1f:d7:06:51:9a:ed:45:
         49:dc:57:fe:5a:ed:7e:75:2d:71:3a:e2:8e:17:10:24:4d:b2:
         97:c9:21:9b:72:9e:ec:f5:10:7f:65:3a:12:b1:db:b2:66:ac:
         24:5f:5a:66:d6:bf:ec:7c:0c:7b:29:a4:86:6e:a6:be:d7:e6:
         51:fe:5c:c9:c6:08:3d:53:3f:7d:af:d9:a1:bc:5c:6b:78:d6:
         03:98:83:30:26:7c:1c:f2:cc:8b:a8:f9:40:71:16:a3:ff:88:
         33:6c:17:b6:4e:93:8c:eb:42:8f:9a:42:01:41:b8:47:95:16:
         75:90:06:8c:07:cc:77:b7:92:73:b1:21:a7:12:d4:c3:52:ed:
         f4:8d:26:62:40:a5:e3:e1:59:c5:4c:2a:5c:f0:a1:66:0c:98:
         72:b0:c8:b2:98:de:ae:9c:49:94:1b:26:5a:7d:88:ea:41:96:
         66:f9:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:14 2024 by rpki-client on console-ams.rpki-client.org