Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/oTNzmX34FAIa-3uu9b2ooJIgo8g.mft
File:                     oTNzmX34FAIa-3uu9b2ooJIgo8g.mft (raw, json)
Hash identifier:          XKvQTx/A9TS1IPdwnove993mj1SfF9+73goyonhoF5s=
Subject key identifier:   DE:32:9D:9A:C8:B0:7C:8D:70:55:61:74:43:6F:E7:81:87:D8:61:98
Authority key identifier: A1:33:73:99:7D:F8:14:02:1A:FB:7B:AE:F5:BD:A8:A0:92:20:A3:C8
Certificate issuer:       /CN=A13373997DF814021AFB7BAEF5BDA8A09220A3C8
Certificate serial:       0B8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/oTNzmX34FAIa-3uu9b2ooJIgo8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/oTNzmX34FAIa-3uu9b2ooJIgo8g.mft
Manifest number:          0B8C
Signing time:             Wed 17 Apr 2024 20:39:11 +0000
Manifest this update:     Wed 17 Apr 2024 20:39:11 +0000
Manifest next update:     Fri 19 Apr 2024 20:39:11 +0000
Files and hashes:         1: oTNzmX34FAIa-3uu9b2ooJIgo8g.crl (hash: WcMyEzewePARumWUul0EMI2dKYwPU3oh1BkC+mhfm/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2956 (0xb8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A13373997DF814021AFB7BAEF5BDA8A09220A3C8
        Validity
            Not Before: Apr 17 20:39:11 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=DE329D9AC8B07C8D70556174436FE78187D86198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:18:97:92:78:57:c4:ef:6d:c4:24:7b:d8:
                    d0:ae:3b:12:f9:a7:25:05:cb:6d:92:d5:3a:6d:68:
                    3d:fc:db:52:62:01:9a:1a:9d:dd:90:da:40:39:a3:
                    ae:10:6b:0e:6b:7a:a2:2f:29:3c:89:8b:8f:b8:e5:
                    2c:86:c3:03:bf:ad:22:12:e8:d7:77:db:8c:7d:87:
                    9d:f2:77:79:79:4d:66:24:13:31:af:ec:25:b4:00:
                    5e:0b:9c:7c:e6:66:4e:fa:a0:41:4a:59:6c:84:b5:
                    85:e1:38:9e:02:90:f3:34:d3:e1:3b:95:39:f7:21:
                    08:9d:21:eb:db:00:7f:44:ef:9b:84:ba:d2:2a:91:
                    52:66:9e:95:a1:75:14:b9:27:af:32:af:40:ac:c2:
                    40:e5:bd:8c:94:90:38:21:ab:a9:15:38:f0:b4:28:
                    b7:f9:c4:68:d3:d0:94:07:7e:aa:48:8d:b3:43:34:
                    7a:1d:54:88:51:23:e9:e0:98:52:cd:6c:f7:e1:97:
                    88:70:eb:b1:ef:e9:96:8c:80:6e:93:b5:ec:ef:ed:
                    a3:35:4e:8f:44:28:ab:1f:2e:a6:f5:12:9e:ce:fe:
                    43:e4:22:4a:94:aa:39:19:16:ea:b0:40:11:de:69:
                    07:96:0c:fb:42:c1:ab:7e:e2:a9:73:07:1a:b1:f9:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:32:9D:9A:C8:B0:7C:8D:70:55:61:74:43:6F:E7:81:87:D8:61:98
            X509v3 Authority Key Identifier:
                keyid:A1:33:73:99:7D:F8:14:02:1A:FB:7B:AE:F5:BD:A8:A0:92:20:A3:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/oTNzmX34FAIa-3uu9b2ooJIgo8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oTNzmX34FAIa-3uu9b2ooJIgo8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/oTNzmX34FAIa-3uu9b2ooJIgo8g.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:c1:ae:a3:25:4f:73:4c:47:8e:8c:09:a8:b7:cc:ea:8d:
         0d:15:df:cd:5c:3f:a2:fd:07:55:f5:e1:bc:82:7a:81:dc:06:
         04:56:b3:f5:d9:5e:de:09:c7:41:e5:a4:87:cf:82:0d:0b:ad:
         ed:24:e3:de:b1:a0:ce:53:ae:a2:6c:8a:fb:ec:a7:58:8e:03:
         36:f6:3c:21:ce:18:ae:3e:ef:67:8a:c7:34:d2:d4:63:4a:5a:
         6d:0f:1d:9b:d0:e6:d4:9f:ef:7d:f9:2a:3f:7d:f5:c0:0c:89:
         82:de:b0:37:b9:97:42:b8:4b:3e:0c:21:ac:72:08:33:bd:69:
         7b:ed:d6:45:d6:e6:0f:4a:84:4a:47:a0:dd:13:7f:f4:10:df:
         c6:ee:b9:98:93:c3:56:d3:75:53:01:03:a4:83:46:90:7f:2d:
         5f:73:14:e1:c8:99:eb:1a:ce:15:6c:11:7b:15:b9:13:c9:60:
         f4:8d:0e:91:e6:ed:a1:80:00:69:72:2d:43:6c:ee:d7:09:23:
         1a:ef:d0:2b:28:9c:29:78:79:94:2d:d7:8c:5d:77:07:21:0c:
         16:19:fd:19:e4:f0:f8:b9:95:91:4e:25:76:51:6d:66:14:d9:
         76:e5:6c:0d:1c:60:93:aa:bf:4b:30:fd:35:55:ee:b6:d7:42:
         f3:8b:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----