Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FONGYULAW/ofHVSyyfXVm13ABracOrH3B0LhM.mft
File:                     ofHVSyyfXVm13ABracOrH3B0LhM.mft (raw, json)
Hash identifier:          hgzd8DtsETE7DLMU04HR0qKfxuLQZBpNUxgWwpLy8E0=
Subject key identifier:   0B:1F:9D:84:CD:1C:66:4A:BA:24:E5:04:43:53:32:08:E7:7D:33:24
Authority key identifier: A1:F1:D5:4B:2C:9F:5D:59:B5:DC:00:6B:69:C3:AB:1F:70:74:2E:13
Certificate issuer:       /CN=A1F1D54B2C9F5D59B5DC006B69C3AB1F70742E13
Certificate serial:       0D8A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ofHVSyyfXVm13ABracOrH3B0LhM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FONGYULAW/ofHVSyyfXVm13ABracOrH3B0LhM.mft
Manifest number:          0D8A
Signing time:             Thu 03 Dec 2020 21:56:09 +0000
Manifest this update:     Thu 03 Dec 2020 21:56:09 +0000
Manifest next update:     Sat 05 Dec 2020 21:56:09 +0000
Files and hashes:         1: ofHVSyyfXVm13ABracOrH3B0LhM.crl (hash: 2jCyVRJlnU2D3U2WO3tHHhOXINru+XSa9jnpetyQ2fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3466 (0xd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F1D54B2C9F5D59B5DC006B69C3AB1F70742E13
        Validity
            Not Before: Dec  3 21:56:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0B1F9D84CD1C664ABA24E50443533208E77D3324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:6f:f4:7d:6c:2a:16:71:23:97:36:a3:31:
                    86:d6:81:45:b6:b9:fc:d8:01:87:fa:9c:c2:73:bf:
                    97:ed:d8:95:52:e2:07:ad:17:88:a5:37:22:b5:ff:
                    df:79:c2:4a:cc:39:ec:d8:3f:25:fd:b5:05:d4:c8:
                    87:91:ba:32:2c:d5:91:f7:c5:47:1f:87:5c:c1:a4:
                    9d:a8:43:d6:e8:48:67:0c:17:f3:4a:24:01:36:d2:
                    f3:7a:41:0a:d7:47:41:08:53:6b:54:7b:8e:a7:f1:
                    de:2d:09:5f:1c:c6:e7:b2:d7:2a:96:2b:b8:40:b6:
                    85:2f:67:47:5f:91:f4:db:bf:f7:25:01:02:14:06:
                    35:61:00:db:de:09:56:1c:8a:c8:f9:60:3c:b2:ef:
                    6b:64:be:38:98:ef:8d:e2:1a:2f:d9:9f:7a:c7:29:
                    2b:72:f3:27:be:69:18:4b:f8:29:ac:3f:ee:bb:c0:
                    02:bb:ee:d4:f9:52:a9:95:47:46:1c:b4:dd:84:3e:
                    9a:31:8a:ac:34:98:32:c5:5a:cd:66:4f:b5:3a:73:
                    25:bc:8f:50:8d:cf:14:e2:69:23:b0:dc:b4:5d:49:
                    12:77:04:77:42:34:0b:c0:27:c4:9f:9c:35:92:46:
                    9e:42:bb:c2:39:83:98:74:30:c2:47:21:ef:db:46:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1F:9D:84:CD:1C:66:4A:BA:24:E5:04:43:53:32:08:E7:7D:33:24
            X509v3 Authority Key Identifier:
                keyid:A1:F1:D5:4B:2C:9F:5D:59:B5:DC:00:6B:69:C3:AB:1F:70:74:2E:13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FONGYULAW/ofHVSyyfXVm13ABracOrH3B0LhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ofHVSyyfXVm13ABracOrH3B0LhM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FONGYULAW/ofHVSyyfXVm13ABracOrH3B0LhM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:82:2a:f2:d8:e8:0c:1d:4a:8d:52:70:a1:9e:de:b1:b1:e0:
         d2:a1:bd:c0:36:22:ba:ea:d9:01:6e:60:a0:a6:3a:28:19:1d:
         06:18:6a:46:1c:0a:17:b6:0d:54:92:c1:47:9b:75:ca:5b:b6:
         79:38:0b:59:58:8e:e2:bc:9c:9b:b1:0e:32:3a:06:4d:b9:c0:
         e7:da:a3:d1:df:af:df:ba:55:4f:ab:c0:7f:77:15:7e:fd:54:
         8c:e3:56:19:83:a3:6d:5a:23:4c:3e:89:34:ca:bf:93:1f:29:
         08:b0:aa:13:cb:43:d1:a6:d2:96:f7:5c:9b:c6:d1:a6:05:19:
         24:9f:57:d7:d5:e9:4a:1b:db:59:a5:4d:7d:a1:64:54:b4:a6:
         ba:5a:d9:ae:c5:42:bc:66:1f:8f:07:6b:2a:19:15:f6:3f:75:
         bc:bd:fd:c3:6a:88:14:0d:1c:00:73:87:e1:c6:4c:7a:79:28:
         f5:69:7c:a7:1a:35:3e:d4:62:08:60:bb:b4:7d:94:d3:52:d3:
         1f:32:98:52:94:f2:33:14:28:71:de:3d:98:f4:77:2e:1f:eb:
         37:f8:3c:49:cf:55:ea:40:ab:78:89:57:4e:80:fb:0f:f4:b5:
         fc:60:44:75:1b:9c:26:f2:18:43:8f:0d:6f:fb:1d:4a:fd:1c:
         4b:0d:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----