Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/NkcOwuzWTbmkZbJ26vrXGCC3lYI.mft
File:                     NkcOwuzWTbmkZbJ26vrXGCC3lYI.mft (raw, json)
Hash identifier:          P/yYxJdKMG4UlPg0UIENydwfS3eKQ+6kvWtq4n8JX1I=
Subject key identifier:   DA:42:77:37:43:F3:56:C6:3B:A1:54:80:EA:30:6E:F8:0D:46:CB:D4
Authority key identifier: 36:47:0E:C2:EC:D6:4D:B9:A4:65:B2:76:EA:FA:D7:18:20:B7:95:82
Certificate issuer:       /CN=36470EC2ECD64DB9A465B276EAFAD71820B79582
Certificate serial:       0839
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NkcOwuzWTbmkZbJ26vrXGCC3lYI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/NkcOwuzWTbmkZbJ26vrXGCC3lYI.mft
Manifest number:          0839
Signing time:             Thu 03 Dec 2020 22:26:22 +0000
Manifest this update:     Thu 03 Dec 2020 22:26:22 +0000
Manifest next update:     Sat 05 Dec 2020 22:26:22 +0000
Files and hashes:         1: NkcOwuzWTbmkZbJ26vrXGCC3lYI.crl (hash: XaMGAtTXcKPAC2O2vyjoJiG0yyU+qheDfQ3SrE7dpok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36470EC2ECD64DB9A465B276EAFAD71820B79582
        Validity
            Not Before: Dec  3 22:26:22 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DA42773743F356C63BA15480EA306EF80D46CBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:eb:12:1c:f0:84:9d:3b:4e:a1:91:cd:2e:
                    a6:a2:3d:f3:01:e0:85:67:fc:50:a6:5b:47:94:a0:
                    cc:3c:0f:b2:c0:c9:6f:ea:fa:9e:cb:3e:a5:ae:f9:
                    cd:eb:39:9d:00:0b:9e:34:3a:2f:64:7b:45:7e:ed:
                    d5:5d:a8:0e:7d:8f:ec:49:e9:9b:82:31:98:23:48:
                    0d:da:88:71:14:e3:4f:50:81:2a:01:39:fa:ad:17:
                    44:1a:b6:76:13:e0:00:8b:82:da:01:9f:03:d7:ee:
                    b6:04:da:81:ef:06:6a:8d:ea:ab:d6:1a:e5:76:0b:
                    34:32:2f:07:54:ee:b8:7d:ce:1a:78:d8:60:55:f1:
                    50:ad:99:23:41:3c:82:4d:78:75:55:21:5c:75:af:
                    a7:b4:9c:d3:46:67:7b:36:2b:45:28:d7:65:52:c9:
                    b1:4f:d3:ff:08:9a:a4:e1:04:2b:4b:67:b5:54:a4:
                    7f:e6:ad:55:29:2c:f0:b9:69:4d:91:d5:f6:e1:88:
                    dc:88:72:cd:6d:e5:c4:0a:41:fb:17:e4:f5:73:8a:
                    4b:4a:aa:2e:e1:6a:ba:0a:c8:bc:57:0e:8c:42:9e:
                    b5:ee:2b:57:c5:fd:af:75:13:f3:12:73:cb:95:59:
                    d0:2f:d8:9b:32:bc:2a:de:9a:3f:d2:06:65:1c:80:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:42:77:37:43:F3:56:C6:3B:A1:54:80:EA:30:6E:F8:0D:46:CB:D4
            X509v3 Authority Key Identifier:
                keyid:36:47:0E:C2:EC:D6:4D:B9:A4:65:B2:76:EA:FA:D7:18:20:B7:95:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/NkcOwuzWTbmkZbJ26vrXGCC3lYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NkcOwuzWTbmkZbJ26vrXGCC3lYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/NkcOwuzWTbmkZbJ26vrXGCC3lYI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:52:48:1b:f9:05:d0:91:2b:61:b6:3f:fa:aa:ec:dd:e9:ec:
         40:a9:98:88:05:20:89:8f:b4:88:97:d5:16:94:63:f7:7f:3c:
         40:04:bc:3c:1f:22:cf:4a:3f:5a:8a:b3:0a:2f:26:01:5f:96:
         3f:c1:14:3e:f2:41:1a:f7:60:cc:a0:59:95:fe:f8:14:cc:c8:
         a1:c9:a5:8e:36:22:98:1e:aa:e2:40:fc:13:f8:b9:52:42:23:
         ff:f2:ea:bb:55:90:a1:a1:27:85:ed:38:f8:f8:b9:b9:3b:7a:
         b1:64:40:1b:3f:51:20:6c:67:43:16:a6:ab:3c:c9:dc:20:52:
         39:3a:3e:d3:f1:59:ff:ca:4c:c8:88:d6:a5:9e:3b:1a:20:b8:
         72:6f:42:68:69:6e:b5:b1:c4:79:31:b3:46:2a:37:a6:8c:04:
         2a:dc:e6:ea:1b:17:4f:6f:19:3b:a3:1c:aa:b8:da:90:f7:ef:
         17:f2:fe:48:a1:9e:ad:0a:f1:ec:88:de:62:b7:4d:9f:99:2d:
         b3:66:cc:56:b8:b0:b3:15:8a:30:17:3c:39:88:b5:fc:c4:b5:
         7f:78:a5:12:b8:09:73:cd:34:47:60:da:84:d9:82:e2:11:8b:
         99:97:52:af:8d:14:aa:42:1d:d9:79:92:02:03:c9:b0:17:57:
         6d:a0:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org