Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GENTRICE/2tPC2R8RIcvGzfT3MJuWW3_W09g.mft
File:                     2tPC2R8RIcvGzfT3MJuWW3_W09g.mft (raw, json)
Hash identifier:          HyUkWvUdh3c8DrP8DHC/0sJg6m3RCFf+0y9wPtaE5VU=
Subject key identifier:   6C:C8:6C:7C:77:61:F2:3D:77:BC:E6:CE:1D:85:FB:56:71:84:6E:03
Authority key identifier: DA:D3:C2:D9:1F:11:21:CB:C6:CD:F4:F7:30:9B:96:5B:7F:D6:D3:D8
Certificate issuer:       /CN=DAD3C2D91F1121CBC6CDF4F7309B965B7FD6D3D8
Certificate serial:       0E3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2tPC2R8RIcvGzfT3MJuWW3_W09g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GENTRICE/2tPC2R8RIcvGzfT3MJuWW3_W09g.mft
Manifest number:          0E3F
Signing time:             Thu 03 Dec 2020 23:26:53 +0000
Manifest this update:     Thu 03 Dec 2020 23:26:53 +0000
Manifest next update:     Sat 05 Dec 2020 23:26:53 +0000
Files and hashes:         1: 2tPC2R8RIcvGzfT3MJuWW3_W09g.crl (hash: iPtKpVNGcluS9ZmdP+M9UTDwCzFWQyQJ3Q4axKFog/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3647 (0xe3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAD3C2D91F1121CBC6CDF4F7309B965B7FD6D3D8
        Validity
            Not Before: Dec  3 23:26:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6CC86C7C7761F23D77BCE6CE1D85FB5671846E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:f3:b3:7f:c9:ac:2f:7a:db:3f:40:3c:ac:
                    86:b0:f2:1c:d8:31:95:1c:70:a3:8c:47:62:f0:1b:
                    05:c4:95:81:53:50:ef:f8:3a:6a:e1:18:47:7d:d8:
                    1a:1b:ef:b8:96:ed:1e:17:9c:b0:e3:a5:c3:61:ae:
                    9e:47:22:86:d8:7c:79:4d:be:29:fb:06:45:c9:8f:
                    7d:e1:46:4d:b6:33:99:16:f1:c5:e2:ff:e9:70:92:
                    14:6f:49:d6:0b:60:9c:3e:65:cf:36:f6:fc:22:d4:
                    c5:90:0b:fc:af:71:97:18:43:c3:f9:5a:d7:b9:68:
                    f7:fe:7e:09:00:8c:cb:47:c2:c8:3e:7d:12:1f:a0:
                    93:0e:2a:ea:ea:35:4d:5e:a1:44:3a:a4:cb:9c:c3:
                    1b:02:ae:5f:b0:2a:c6:cd:a6:46:88:5b:07:63:f3:
                    d0:23:8b:d1:12:70:ac:48:4c:c3:fa:bb:f2:f9:69:
                    6a:a4:a6:c6:9c:11:74:8e:04:6d:8b:17:02:bc:46:
                    29:45:6c:13:b8:ea:d7:d7:b6:52:e0:3f:08:8e:99:
                    ec:d1:88:2f:68:16:e2:9e:ac:87:2f:54:17:23:16:
                    ba:79:a7:b1:af:50:80:ec:5a:37:d8:e2:a4:8c:55:
                    2e:1d:e7:85:60:c3:39:21:77:af:07:ba:75:9e:39:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C8:6C:7C:77:61:F2:3D:77:BC:E6:CE:1D:85:FB:56:71:84:6E:03
            X509v3 Authority Key Identifier:
                keyid:DA:D3:C2:D9:1F:11:21:CB:C6:CD:F4:F7:30:9B:96:5B:7F:D6:D3:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GENTRICE/2tPC2R8RIcvGzfT3MJuWW3_W09g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2tPC2R8RIcvGzfT3MJuWW3_W09g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GENTRICE/2tPC2R8RIcvGzfT3MJuWW3_W09g.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:37:23:26:b7:c0:cd:f8:dc:d5:47:32:87:c4:ba:83:b5:96:
         fa:44:6b:f1:32:26:ad:83:e7:37:f4:f8:4f:f3:b4:62:6a:b1:
         ad:5c:ab:d6:2f:ed:0a:04:f0:f9:c8:40:ec:a6:a4:8e:42:64:
         32:f7:81:3d:cd:43:1f:c3:78:ae:62:f7:96:c7:18:07:5f:63:
         2b:97:42:67:3a:ff:8e:d1:4c:df:47:79:83:b5:8f:20:80:dc:
         d0:38:0b:2b:8a:39:0c:98:9f:45:83:78:16:68:aa:72:e0:60:
         80:fb:74:ed:7f:96:f7:f5:ba:e3:c6:57:c1:57:42:e9:92:0d:
         86:90:d6:0b:2a:55:b1:cb:c4:3c:34:3a:71:07:e9:5d:a1:7a:
         e9:02:1d:cf:3c:a5:e2:b1:87:58:0e:a9:83:2c:84:5f:12:18:
         44:f1:94:8f:fe:14:53:13:16:27:07:04:27:9d:60:7d:d0:00:
         2b:6b:7c:02:22:ac:84:a1:c4:60:2f:b8:4d:48:de:7f:f2:d6:
         d2:b7:a5:c8:6e:3b:90:af:ca:0e:2f:32:7b:b8:e4:a4:ba:e7:
         c6:27:9f:ef:75:96:21:73:37:75:05:55:e2:7d:89:07:eb:f8:
         e7:01:f8:50:18:48:5a:db:c8:f1:d1:aa:e2:f8:3a:ae:32:a9:
         bd:4a:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org