Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft
File:                     8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft (raw, json)
Hash identifier:          R7xAG/6v1891W5yAEzRQn8WTW4y9WgQ7H667+Y73lj0=
Subject key identifier:   6F:89:D2:68:6D:F1:FD:2F:29:FF:5C:09:97:6A:1C:AB:40:47:0D:16
Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Certificate issuer:       /CN=F33A72AAF798105BB277F094458E464B4659F803
Certificate serial:       50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft
Manifest number:          44
Signing time:             Sat 01 Jun 2024 20:57:50 +0000
Manifest this update:     Sat 01 Jun 2024 20:57:50 +0000
Manifest next update:     Mon 03 Jun 2024 20:57:50 +0000
Files and hashes:         1: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl (hash: MDGNrKo7tE6ZfzTFOodJuUk8d92gVlh0yc3BGsjtgNU=)
                          2: _PkrdeQ5IU2SfLFdtmIptA7FVqM.roa (hash: vWyv653uLUOoVboQvZH7bDh5EdQFuQyj+cjh6+VtbCM=)
                          3: wfDmLZNzKc3BpqRQK2GSG9ev8bg.roa (hash: 0Xbp8UmmkY707PAXUTC01OqsmlPZH0bUHncwvAdHras=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 20:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803
        Validity
            Not Before: Jun  1 20:57:50 2024 GMT
            Not After : Mar 21 15:30:27 2025 GMT
        Subject: CN=6F89D2686DF1FD2F29FF5C09976A1CAB40470D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:e0:1d:ba:02:05:85:10:a9:24:cb:35:fd:
                    a8:46:f9:84:2d:c1:5d:58:bf:e6:32:d5:5b:b0:44:
                    41:1d:43:5e:04:e3:98:7d:0e:95:10:07:fb:86:06:
                    fe:ab:87:f5:a7:d1:4d:36:a1:af:e2:13:dc:81:13:
                    b3:36:4a:2f:ab:25:b3:e7:de:23:28:37:f9:48:b7:
                    8a:40:16:48:7f:a7:d1:28:06:ee:36:75:31:5c:01:
                    14:94:73:1b:a6:f4:88:e1:a8:32:25:a2:5e:7b:39:
                    39:f7:1d:da:93:27:ac:2d:15:d4:e0:5a:e5:81:bd:
                    d6:29:6b:4e:7c:42:49:18:e2:25:d3:15:05:0d:25:
                    f5:75:c4:82:80:44:fc:96:a5:b6:66:2e:52:95:a4:
                    82:95:26:a0:89:fe:96:12:71:05:94:af:a7:5a:bb:
                    c7:dd:6a:4f:98:76:36:e4:6f:c5:a0:5e:1b:e4:5a:
                    c6:a2:5e:18:07:8b:a9:2a:87:aa:bb:c8:29:db:a2:
                    d8:17:a6:fd:8a:28:02:27:09:3c:d5:77:d4:41:b8:
                    11:64:09:e4:39:0a:8e:3c:4d:ac:91:4f:14:df:d7:
                    46:cf:6d:77:d2:38:14:f1:39:12:6a:8b:fa:9b:90:
                    89:4f:eb:58:ef:99:2b:83:78:42:e7:77:49:6c:19:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:89:D2:68:6D:F1:FD:2F:29:FF:5C:09:97:6A:1C:AB:40:47:0D:16
            X509v3 Authority Key Identifier:
                keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:72:7d:c5:c1:55:12:0a:75:b2:29:d5:f8:c1:4d:df:a4:ff:
         57:5f:a8:64:67:b3:23:e9:97:99:ab:35:29:84:16:13:0d:44:
         8f:f3:d4:c0:b8:b4:25:69:1a:a0:46:fb:c3:a1:4c:ba:2b:42:
         20:f0:de:f9:4e:b8:fb:d6:5e:e7:0e:2f:da:e7:4b:7a:d1:87:
         fc:93:91:92:64:26:ed:7f:6b:5b:d3:64:95:68:81:64:76:67:
         2d:fb:46:b0:2c:ff:1c:1f:89:44:dd:f7:28:4f:71:65:2d:45:
         c3:f3:9d:73:94:db:fd:de:1d:75:64:7c:92:87:9d:17:8a:90:
         0e:5d:15:2d:79:76:6d:60:dd:97:af:e0:2f:71:4f:1b:17:89:
         00:e3:96:b4:50:b9:6c:e4:30:98:26:80:0a:b9:79:6c:70:08:
         93:fd:66:4c:e3:b3:ac:cf:1a:33:a6:55:bf:89:15:dc:73:d5:
         73:2b:b7:c4:ff:d7:5b:3a:a9:c1:65:c9:f2:61:51:6c:4a:9c:
         59:ac:2e:e9:ad:ab:e6:06:aa:10:4d:b1:0c:c7:89:30:4b:18:
         e1:2e:88:6a:07:d0:dc:0a:a5:0f:50:37:df:80:fe:88:86:65:
         d6:41:20:42:d8:c9:7f:89:65:04:4d:07:54:54:44:e5:f2:ca:
         a2:e9:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:57:40 2024 by rpki-client on console-fra.rpki-client.org