Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HKXF/HJXQMe5PUotMQaKeMCNgaUUnRSo.mft
File:                     HJXQMe5PUotMQaKeMCNgaUUnRSo.mft (raw, json)
Hash identifier:          xeJf/9OpCNWYZGBjOHounpf5xzmxfEZSPObPAukc3pQ=
Subject key identifier:   FD:9D:A7:42:F1:97:93:69:00:DD:02:C7:38:ED:B2:C0:B0:CA:56:D1
Authority key identifier: 1C:95:D0:31:EE:4F:52:8B:4C:41:A2:9E:30:23:60:69:45:27:45:2A
Certificate issuer:       /CN=1C95D031EE4F528B4C41A29E302360694527452A
Certificate serial:       0855
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HJXQMe5PUotMQaKeMCNgaUUnRSo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HKXF/HJXQMe5PUotMQaKeMCNgaUUnRSo.mft
Manifest number:          0855
Signing time:             Fri 04 Dec 2020 02:56:09 +0000
Manifest this update:     Fri 04 Dec 2020 02:56:09 +0000
Manifest next update:     Sun 06 Dec 2020 02:56:09 +0000
Files and hashes:         1: HJXQMe5PUotMQaKeMCNgaUUnRSo.crl (hash: VbV24dQryWj+BktkBT17wnByK+J3HctAa1WHD/n9Frs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C95D031EE4F528B4C41A29E302360694527452A
        Validity
            Not Before: Dec  4 02:56:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FD9DA742F197936900DD02C738EDB2C0B0CA56D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:86:19:f7:db:13:e9:25:b3:ca:94:a2:1d:
                    de:eb:81:65:82:7b:b5:fb:8b:f6:cc:d2:d8:62:48:
                    55:22:45:04:05:a2:f8:d7:58:4b:64:85:30:5b:cf:
                    81:5d:0b:04:ca:23:f1:3e:11:fe:13:77:69:bf:31:
                    46:8a:0f:66:b2:74:1a:e3:3c:66:1c:ee:19:ea:84:
                    ab:6c:a6:a6:4c:87:9d:65:4b:6c:70:56:b6:52:33:
                    74:5f:68:92:9f:3f:a9:a8:25:16:a5:71:a3:1f:92:
                    83:6a:c6:37:32:9b:ae:3a:42:fa:34:86:de:04:7b:
                    90:d5:db:dc:73:78:e6:4c:c1:ba:7a:83:c2:03:c1:
                    d2:ef:6a:61:a0:c9:0e:8e:41:eb:a4:1f:bf:3b:7d:
                    f1:a6:51:d9:99:97:f6:6d:5f:43:cf:a4:2e:64:c2:
                    cf:71:94:93:34:5c:c5:13:8c:de:df:5b:a9:60:a1:
                    76:d2:9b:41:9b:79:5c:64:49:e2:6e:f0:52:04:c8:
                    da:46:96:86:81:59:4a:ba:26:f5:7b:83:c5:04:1a:
                    4a:d6:5e:4f:ed:54:c7:93:e8:ea:e5:09:10:d1:f8:
                    21:72:e0:d4:3c:e7:fe:2f:37:37:58:ae:28:57:b2:
                    c1:af:89:d5:9f:9e:63:4d:b7:64:7d:18:db:55:56:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:A7:42:F1:97:93:69:00:DD:02:C7:38:ED:B2:C0:B0:CA:56:D1
            X509v3 Authority Key Identifier:
                keyid:1C:95:D0:31:EE:4F:52:8B:4C:41:A2:9E:30:23:60:69:45:27:45:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HKXF/HJXQMe5PUotMQaKeMCNgaUUnRSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HJXQMe5PUotMQaKeMCNgaUUnRSo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HKXF/HJXQMe5PUotMQaKeMCNgaUUnRSo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:81:73:23:78:18:ba:a6:7c:60:65:31:a2:80:8f:e2:d0:53:
         72:39:8a:07:e9:0c:d8:9a:2d:70:88:16:ca:e2:2f:d2:d2:18:
         33:a9:04:26:97:11:44:b4:bd:67:c1:80:50:a7:10:c8:a7:5f:
         38:d2:99:a0:5a:0a:27:08:15:b2:40:31:1d:b8:4c:55:ed:c8:
         d8:2e:ce:17:ab:8a:4f:61:6b:d9:5e:16:50:8e:47:40:b1:ba:
         06:ae:80:3d:41:1c:d0:a9:37:5d:81:61:68:4f:77:7a:98:08:
         0e:5c:32:38:0e:9f:87:4e:a3:01:84:06:57:47:4f:d6:ee:1a:
         66:f5:c2:b9:45:ec:b2:eb:e3:5d:8b:f4:90:f7:f7:7a:b9:eb:
         5e:8e:9d:1d:98:33:54:7f:01:44:d2:6d:e0:97:00:f9:72:03:
         6e:fb:4e:24:40:4b:80:63:6b:e2:00:5b:d9:25:45:83:48:e9:
         8f:9b:38:ae:9c:6c:53:e7:cb:43:79:b6:d1:50:7b:8f:42:98:
         8c:a2:c8:24:85:d7:01:37:aa:de:74:f8:d4:c9:39:b4:c8:54:
         be:8e:6f:bb:9a:38:d9:e0:3a:7d:32:08:52:ff:e1:6f:2f:ce:
         63:1d:90:4b:9a:75:12:2d:71:80:8f:7f:29:50:15:21:73:e8:
         1a:fb:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:44 2025 by rpki-client