Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HCT/kUyNtb3VYDqj1WgxPVbgcE-z49k.mft
File:                     kUyNtb3VYDqj1WgxPVbgcE-z49k.mft (raw, json)
Hash identifier:          L6aQ+Z83zEj6IactqCqm1X0FgHu2t7P9VLbEsCJhtdY=
Subject key identifier:   44:B2:1C:31:E7:2A:A3:D3:01:C9:61:9E:8E:6E:2A:C9:6C:42:EE:22
Authority key identifier: 91:4C:8D:B5:BD:D5:60:3A:A3:D5:68:31:3D:56:E0:70:4F:B3:E3:D9
Certificate issuer:       /CN=914C8DB5BDD5603AA3D568313D56E0704FB3E3D9
Certificate serial:       0EC4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kUyNtb3VYDqj1WgxPVbgcE-z49k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HCT/kUyNtb3VYDqj1WgxPVbgcE-z49k.mft
Manifest number:          0EC4
Signing time:             Fri 04 Dec 2020 02:17:02 +0000
Manifest this update:     Fri 04 Dec 2020 02:17:02 +0000
Manifest next update:     Sun 06 Dec 2020 02:17:02 +0000
Files and hashes:         1: kUyNtb3VYDqj1WgxPVbgcE-z49k.crl (hash: MbCVBMwbXxoM8dN7+3cK5Rc8dtfGrsR1XnaN1dpT5KU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914C8DB5BDD5603AA3D568313D56E0704FB3E3D9
        Validity
            Not Before: Dec  4 02:17:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=44B21C31E72AA3D301C9619E8E6E2AC96C42EE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:31:84:73:55:8b:1a:90:72:35:ab:c6:1b:
                    18:a2:14:78:22:44:23:fc:b8:f3:b7:33:57:8b:68:
                    e8:6a:18:b1:50:46:a7:b5:2e:a3:8b:e2:da:b2:30:
                    dc:67:4d:77:0b:09:1f:69:9b:88:a8:83:3d:8c:f0:
                    6a:ce:fc:ec:52:ab:f6:8b:98:5e:e5:ca:94:19:4c:
                    d8:cf:b7:c9:f6:d5:69:a2:48:22:fa:55:e7:7a:1d:
                    6d:0a:bd:8e:01:9c:26:5e:18:45:26:3c:6b:cf:0a:
                    ae:47:ab:43:38:e3:5b:cf:ab:53:66:10:cd:09:27:
                    db:17:aa:fe:9c:51:15:27:23:60:d5:ff:b1:72:c5:
                    25:45:69:e6:f7:2f:41:a2:4f:bd:5f:13:5c:12:06:
                    a0:6a:95:31:f0:38:05:08:99:64:8b:9f:6a:ba:21:
                    b1:2c:23:37:f1:9a:94:a1:3b:13:00:ea:ef:9f:e2:
                    e4:d0:db:5b:fb:47:cd:de:1c:43:f7:c4:01:97:e2:
                    f7:1c:8c:fd:6a:12:46:29:46:55:d7:13:f1:5d:c4:
                    b4:7e:63:8d:6d:37:69:0d:c9:09:46:ae:61:e5:30:
                    34:df:a0:88:1c:11:9b:a4:ce:61:91:94:1c:3e:1f:
                    82:9b:fa:c6:cd:90:d7:32:84:75:c7:1e:5f:c1:36:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:1C:31:E7:2A:A3:D3:01:C9:61:9E:8E:6E:2A:C9:6C:42:EE:22
            X509v3 Authority Key Identifier:
                keyid:91:4C:8D:B5:BD:D5:60:3A:A3:D5:68:31:3D:56:E0:70:4F:B3:E3:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCT/kUyNtb3VYDqj1WgxPVbgcE-z49k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kUyNtb3VYDqj1WgxPVbgcE-z49k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCT/kUyNtb3VYDqj1WgxPVbgcE-z49k.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:79:89:b1:89:20:4e:38:ab:e1:d4:58:06:bc:68:fb:c7:05:
         8a:bc:e5:70:38:3c:e8:39:5b:17:46:12:2f:aa:80:a5:26:25:
         0a:81:1c:a2:b7:62:13:0e:1e:3c:0b:2d:1d:92:98:99:d1:e0:
         3c:fc:89:bb:93:09:60:05:f4:07:93:f5:63:8f:d6:bd:ea:9c:
         4c:7f:22:c8:32:44:44:b1:dc:10:f7:45:55:27:aa:b7:46:63:
         e2:17:8d:55:68:98:8c:fc:ce:76:03:e5:1a:5f:d1:93:95:0e:
         fb:05:bb:f4:b4:07:d1:74:fe:ea:81:e7:37:a4:23:91:53:3e:
         ae:57:2a:ad:34:e1:33:77:56:6f:91:15:98:54:fd:a8:9d:4e:
         ee:cf:a2:5b:5e:f7:95:06:91:bb:ce:99:a8:49:a9:c6:b3:81:
         87:61:a0:75:d5:5c:50:05:ab:51:57:52:5a:a5:7f:46:79:06:
         62:2b:9f:d0:b5:64:a7:5d:32:8e:1f:6b:87:2f:80:a1:e6:17:
         7d:a7:12:3d:3a:69:34:5d:5a:aa:f1:50:a4:56:21:d3:3a:b8:
         7d:02:2a:ed:fa:7f:c1:e9:c4:0a:ce:34:cc:fc:10:4f:46:74:
         f2:9a:0e:89:61:b8:88:bc:14:2b:e8:60:0d:0e:b9:1f:0d:14:
         f1:a5:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org