Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
File:                     JX23uZGZdWlzZrcBT4z-KO82TnM.mft (raw, json)
Hash identifier:          +uHg0IQxb509WxuqBXXd90UAHkLAVqOKHrkWFYpJWH0=
Subject key identifier:   A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       0646
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
Manifest number:          05EA
Signing time:             Wed 24 Apr 2024 21:33:32 +0000
Manifest this update:     Wed 24 Apr 2024 21:33:32 +0000
Manifest next update:     Fri 26 Apr 2024 21:33:32 +0000
Files and hashes:         1: -TnV1iA7z5J59_AMsTLkrfjjAtU.roa (hash: VL8HiVMGqoAXsgFWG/Psef73BTnm6DpUhyYSNKpmds4=)
                          2: 15SY4_EQr9Pxw9VeCgnJGd-CS6c.roa (hash: f6qBkG9/oHuG6ZV8AcznjFJCgvGdAF6ifPhoipgNxDs=)
                          3: 2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa (hash: oJY6kNlNyb9TGbyfdgm6/JZK5/v4sKJIKoMARNbq3XE=)
                          4: 7uXpzfJflemFWgFDf_H8HDs3h4I.roa (hash: D9rhJcNUhOTUvqiaD9C+MK4XcpJigKas3saEwB+n8K4=)
                          5: 935ovYW6JYoDaeGQ3ZAYSBnoITs.roa (hash: YuDXiikEZbpa+2t2CJLyXr3l5Szr/tVbxtGUoMJfbgk=)
                          6: AI8DCJYrygDHvSuYWNDQm7Pac2c.roa (hash: dEXdtk3/DvxmW34Wr7TNW1IWtpuLx01dPC3wwZoYar4=)
                          7: BGnqfEjx6hBN0MKelC23m4luZVU.roa (hash: x6e3Ot3wUhA115YZgK9VloHIsdZjRNGcI15I5WkUlYk=)
                          8: FObQ5kmonelVBXupsV3vJJSF9dI.roa (hash: A0ybs+OlwV74Hqbt6CKFPcC77uWMpGEVuUcFK7v9LiQ=)
                          9: HY0TDNVtmOCr1NTIXLxswx-lcjw.roa (hash: d0HB10glckJKPKUMFOXknbsiG+aeCKJ3Djp0MdvEi0w=)
                          10: JX23uZGZdWlzZrcBT4z-KO82TnM.crl (hash: 8K6iEu4KGvCZofgP6iKc0BnTT06jPm2+eRzKcXawjK0=)
                          11: JtJXq7KfSfAzVivBaogtfzHhFOw.roa (hash: 4poF+K4SMH0pwdr5X2bARL/8kH5ZH6GJxnieotExgZQ=)
                          12: LOmiPkoEY3ESLJFkcuMSNt-SOWM.roa (hash: AgAj7qR/jxj25YjzMo1bix9Qb7ZTgBPiN/0qMReIOQk=)
                          13: OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa (hash: Y5O/kRkyDkNoZVGa2YFBu59ETabQeCL6RNbw1+kLBbg=)
                          14: Pta2IDo67GEz0WL2Xr8WxyGXiLo.roa (hash: hEy966rwvWNng5F0BB4APMPtpH6JVqpjwrEglJmBf1M=)
                          15: UA8BtC016ABZu8kbCsHf_-Rjsxs.roa (hash: Edb2t+wSi55cVWBD5fig+z/BsjM516YnVNmAqmahsRo=)
                          16: Vjw92keQNTj9qFADoRU-GelkVQU.roa (hash: cz7WE0IHeN+RMh8Tf7l5mXlJGs4VMwE35XcRBltZwEk=)
                          17: YUxygLnf3DbXvOqijfsmqsBv9TE.roa (hash: 32FwMqKzmI/VPpa1a6G/B47muw/EbIgixGD5mR6wQSQ=)
                          18: ZQsHbK53NiIc00xTfP9uUIMaXak.roa (hash: TdmJmSXgh1/ptU9azGGH9IKivDoiNQTECMCS2bGu5r0=)
                          19: _BKkiOtrPcYDgXsPH1_5JQ226OM.roa (hash: fXvq4SDjz2g03t7EGUR93SJ7kLimxzXkkFNYexBXnzs=)
                          20: dAxn3n4L-m77arOaIgshyPOH8F0.roa (hash: IU58FWAJ5FocumsnnJgO5ZUG6mMlMqiCK/NavrUV6Mk=)
                          21: dp1TzxHJJwfpZIif95e-vCDJk3E.roa (hash: z++fsUAeVNBmEGJ2Ok2NuCrYsVBQvBub3Lx9hnTRaPI=)
                          22: gbGsX62bB2j2eD1OpTlQ4jWt-7w.roa (hash: bqRMXWNacQduCv/eOVr0AKxjA8/neR0bJc4YVxvpOUI=)
                          23: iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa (hash: gcK7vHMcWl1akgykNS4OEN8/D7a9aEmD+Dq/WrnLjl0=)
                          24: ksRACS3hH_wG168ibtuGCAh8A0Y.roa (hash: Tk9oLzFbVDsHTjMWmw2gAepK7SXlzX6i++kTdbqvRDo=)
                          25: lzuCs6TKsS_EbjraDzg7I_Li3vM.roa (hash: yu31k4BWNziN4uwA5b1kfwTeF03clQVPfGAAXPFkE5I=)
                          26: m1GBigR8FgQ_-9XOXJKQjezXwrw.roa (hash: Qx3+ztYHGXb6xwxLl95iVdPv9n18su3lQxCJq6BOlTQ=)
                          27: rkEe_KWlcwB5uUZqlz9ukZj8GPA.roa (hash: F7O6KGfnSgDTXWIMHMshefEwLAEZr95oDl1A6zMHSnI=)
                          28: sJDQKW1oRlZd2p9TRmyuoKxCYeU.roa (hash: Ks0Ptd40z+7RW5VRjAHIosEHsLZv5CZo0TaW4tBnTyg=)
                          29: sweixy4Vr0-xBSCVvUVugk1HnCo.roa (hash: zDb/n9uFWQivQ5DLk426CpWlc4J41FUwqpdZfyPSu/Q=)
                          30: uVWDutr4BhpVCNeAmYZPFfQ7Rl8.roa (hash: +IODSutbSz2xKnXJGhLdenogl4HirX/T1cW8X6UPTrU=)
                          31: ud92Mym_pO_Rp4Ms_uLzSN-qYgw.roa (hash: dV8EimINUaOUf5sq1t4mXcMwE+9abbGa22gOhtPU0z4=)
                          32: ueaG-GePLpyOmDYDoAsY3ZQ2C74.roa (hash: huNj0H4s23rONhMSo+TW566PfxF0LqMbKHJFoLJ2IMQ=)
                          33: vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa (hash: pvHj/Lj5ZFca/VFiXVFMqw2MWgl2q0SpLAq47lHE+gI=)
                          34: yeThpwhYz9dK_ZnKc-djJ3gMQYQ.roa (hash: zAaosOVkVW6xHousWCGLeWUkg52tR7o+TBw/R6RgClQ=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 21:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1606 (0x646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Apr 24 21:33:32 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A67BB601330E55E0318C079016EDDD96F671B476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:ef:4c:a4:e8:ff:a9:11:bb:d1:ba:46:bf:
                    22:5d:54:4e:fe:f5:0e:75:88:c5:c2:8a:ba:53:ca:
                    7a:73:1b:b3:23:f2:39:96:e2:ee:e8:c0:9e:57:52:
                    3c:3c:4d:60:f9:e8:e6:2d:e1:49:41:56:6a:6d:38:
                    76:59:5c:12:e2:93:37:31:e9:5b:b9:aa:9f:fd:80:
                    e4:45:44:3a:1a:70:73:a5:48:66:6a:c7:9e:94:a1:
                    5f:99:e9:ca:16:10:8d:5d:27:7c:ad:82:5f:9d:75:
                    70:c2:37:02:05:f2:86:1e:3a:74:26:76:e3:f2:c2:
                    ba:1c:ea:fe:51:c0:b2:8b:ae:c2:58:bb:14:6c:ac:
                    f8:61:95:6d:05:0b:21:15:61:48:bc:45:77:ab:b8:
                    1d:7f:67:69:df:39:0c:b5:87:1c:5d:58:8a:db:b5:
                    bb:8c:a6:27:4f:07:b6:00:aa:9a:1d:9a:c0:98:8e:
                    0d:f9:20:36:21:43:87:ea:c4:fb:cd:b8:9a:9d:14:
                    1e:bf:5b:4d:56:b2:f7:73:0d:62:e8:8d:78:c3:11:
                    66:b8:a3:ae:93:45:9e:0a:db:62:e6:e3:ec:bf:d6:
                    9e:e2:5e:48:7f:5a:09:c1:01:28:92:eb:65:9b:8c:
                    62:ea:19:09:15:d8:30:82:ec:0d:1b:39:9f:ee:06:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:14:ab:1a:91:a6:0b:0a:ca:19:40:4f:cd:f2:b6:13:54:
         e5:3d:02:8e:f4:04:3e:03:dd:43:fc:07:f6:b3:8a:80:ea:e4:
         f5:16:b2:72:ed:e8:2d:3a:a4:a4:d7:8c:86:71:82:31:3f:35:
         e0:15:7b:07:c2:9f:87:75:c8:95:8a:4f:75:e7:08:53:c9:80:
         3e:db:25:47:af:a1:5a:f4:62:c7:78:33:64:e0:21:cf:a8:6a:
         93:86:85:b2:d3:5c:60:59:ae:99:29:23:d7:ff:68:4d:0a:29:
         94:87:25:11:07:61:46:4f:3e:66:b9:ea:04:a5:74:6d:2f:a3:
         28:48:fb:c6:7f:4b:bf:78:75:63:68:64:9a:23:dc:c8:48:76:
         b5:f1:d5:6d:64:81:33:80:af:b3:a7:83:e0:33:4a:05:1d:53:
         29:77:41:bc:fe:f7:be:d7:73:59:10:be:08:1c:05:76:4d:37:
         63:be:05:d1:f8:4b:fa:f6:68:f7:db:1c:97:c7:ff:8d:82:8f:
         ab:f9:f9:c5:bb:55:27:84:3c:3c:bf:3b:3b:8d:d5:1e:a8:ad:
         be:fe:07:22:ab:5c:72:50:60:ca:a8:f9:cc:ae:8b:7b:ef:4a:
         80:f5:a7:c8:54:64:5e:1f:41:6e:8e:70:79:b1:51:cf:15:c7:
         62:cb:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:54:16 2024 by rpki-client on console-fra.rpki-client.org