Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
File:                     FlSV6NMn5PYtWhZDjwgOYIo00NM.mft (raw, json)
Hash identifier:          5oAIzupyC9p22LJb/goP/N9LWrQQRrx+zwAUGCZR7GI=
Subject key identifier:   99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0E11
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
Manifest number:          0DC0
Signing time:             Sat 18 May 2024 02:58:26 +0000
Manifest this update:     Sat 18 May 2024 02:58:26 +0000
Manifest next update:     Mon 20 May 2024 02:58:26 +0000
Files and hashes:         1: 6QH2xH1SL1HqXd127GWxslNtBYo.roa (hash: 38IfBFuG+cbFFoJWZT9iVb535PlGKzN6ghkSnBYptqo=)
                          2: 81WQE-YjndINucL5LLYyxHjLDHQ.roa (hash: FK6rMK0BnNb1EgLQbhR/OWDj2lkjAFdlJwofudAw7i8=)
                          3: EYYLqlMhIv1D69GKtHrQXVw4L7s.roa (hash: WBU6E0UBlkBsMPdqcLTObQ6NyHcQMeW6Dg8HUQ6PB9E=)
                          4: FlSV6NMn5PYtWhZDjwgOYIo00NM.crl (hash: QEh1uo2ttPmcj4IsJ1ateyU8aFOxZWqp25EUVlIy4EE=)
                          5: MofA-huRy_7xwb4fng3Xnqo_qvo.roa (hash: DzssXM3QzbO9DF+6MF0omj7umNYKI5pEdJdtQ7DutGQ=)
                          6: cZC_N9UDUqZvNHLntxETAasDMNI.roa (hash: aEZS5El4H3+HdPl3Y82vn84esCTDZqKLmpi5O7YKT7g=)
                          7: gfIoLEnAqzL3w6JL-y19gwdYu_c.roa (hash: +PvB9OmT+Bl+gI2EW4vgVAUHRPh6A9u0cRrLwrSXGpU=)
                          8: lij7sN53bKTXUShqNrioa7tZaFY.roa (hash: JC8WWZr56BoOKCnTnQftKGPp4Ho2IFuBlHepqDjqb0Y=)
                          9: qBY-_O1WQTkyH3chMUDI3_Ck2ig.roa (hash: n00wURGo1BfEqteUb6mRK7rlDg8Edjr9j5++KGgLTXA=)
                          10: wb4wDt0rHsHcwZb9BN3haY6eBHc.roa (hash: olOVXbhaMriZO3l/juNWmEUaSseWmNfvXTtb9xM1v7o=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 02:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3601 (0xe11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: May 18 02:58:26 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=99D7C86BB0179CECBF7C47167DEB75FC584B5EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:5b:82:e1:af:76:2d:70:7b:83:b3:1b:fe:
                    d5:a7:03:88:12:99:d8:a0:5f:eb:85:dc:43:97:fd:
                    38:f9:af:00:7d:ce:15:42:9a:4b:71:ae:96:68:f4:
                    0c:92:af:88:f2:85:e1:66:7c:39:90:53:f4:1a:8e:
                    0e:a1:c9:3e:13:ae:d3:54:8e:40:ac:55:15:87:ea:
                    b6:82:a1:ac:e4:ae:e9:34:b5:cd:5d:87:87:b4:b5:
                    79:4f:13:0a:cc:b0:7a:bf:8a:53:86:0a:e8:db:54:
                    88:39:6b:aa:36:35:39:a1:a4:b8:3e:4e:78:8a:34:
                    cd:98:d5:30:08:b1:cb:10:10:45:b3:24:e0:f3:06:
                    f8:44:8a:c5:c0:5e:a9:42:d2:48:fd:82:a4:3d:b2:
                    58:e6:39:f0:7d:b2:0c:e5:bb:e8:12:2d:ca:db:35:
                    3c:20:5b:15:c6:0a:d9:23:0d:6c:d0:58:75:77:fe:
                    c3:cf:46:58:bd:cc:37:03:95:8f:2e:fc:21:d4:13:
                    50:1b:dd:85:9e:15:c5:38:fb:cc:1e:31:be:a2:f1:
                    a4:79:af:c2:a0:28:64:fe:5b:e1:97:93:3c:51:9b:
                    12:63:f1:ce:bc:c1:bd:ed:c0:f5:a1:7e:67:24:c7:
                    8c:7d:91:38:e5:31:8d:fb:1a:51:7d:36:dc:72:54:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:C8:6B:B0:17:9C:EC:BF:7C:47:16:7D:EB:75:FC:58:4B:5E:C6
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:16:21:2d:bb:8d:90:0e:d9:95:4a:d8:96:45:ab:1b:24:
         cf:97:f8:d0:d9:50:1b:c5:e3:04:84:a1:6f:2c:3d:3c:2b:c8:
         9f:89:72:26:39:9e:b7:64:17:b0:8c:25:e1:ac:bd:f6:ea:94:
         78:71:fc:03:59:27:16:cf:83:c0:75:55:12:af:d7:a3:69:1d:
         83:ef:84:b9:f3:4d:a0:cd:3e:26:b2:b7:f5:7c:46:dc:13:7e:
         0f:42:5f:0c:17:ba:36:d2:cd:f7:79:20:2c:78:30:42:f0:80:
         b0:aa:35:ed:c0:e9:e4:da:84:5f:89:58:b3:9e:e4:e5:aa:b8:
         43:20:30:3c:39:79:fe:1b:93:36:42:f7:3a:6b:c7:ec:3f:53:
         91:c2:3a:3a:ec:27:ce:c8:d8:1e:ed:15:3d:b5:12:0b:f2:07:
         4a:1a:83:c7:36:77:68:4b:06:1d:ad:4d:ee:f6:20:88:13:65:
         59:2b:15:b2:3e:bf:e7:5b:ab:ff:f4:4e:24:eb:09:f5:69:05:
         64:87:8b:dd:49:bb:d9:e6:4a:71:d9:92:53:4d:d8:65:d5:30:
         6a:54:a5:f7:aa:4e:90:4f:88:a3:56:8b:5c:4c:c9:c1:49:c8:
         22:13:92:de:7b:f7:85:2a:3f:b7:4f:f5:f3:43:81:a2:38:7b:
         89:4a:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:15:00 2024 by rpki-client on console-fra.rpki-client.org