Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMYKL/a4hh85SbhfETv_s2vUm9wWEpsfM.mft
File:                     a4hh85SbhfETv_s2vUm9wWEpsfM.mft (raw, json)
Hash identifier:          SkABQEI17AilOhdTNYk5CfyOSE8KVgXBB/o2cay2p8c=
Subject key identifier:   F0:BB:8A:19:86:0A:7D:06:60:8E:4F:18:2B:BD:3D:44:77:8E:F4:AF
Authority key identifier: 6B:88:61:F3:94:9B:85:F1:13:BF:FB:36:BD:49:BD:C1:61:29:B1:F3
Certificate issuer:       /CN=6B8861F3949B85F113BFFB36BD49BDC16129B1F3
Certificate serial:       01E0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/a4hh85SbhfETv_s2vUm9wWEpsfM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/a4hh85SbhfETv_s2vUm9wWEpsfM.mft
Manifest number:          01E0
Signing time:             Mon 13 Jan 2025 03:03:47 +0000
Manifest this update:     Mon 13 Jan 2025 03:03:47 +0000
Manifest next update:     Mon 13 Jan 2025 09:03:47 +0000
Files and hashes:         1: a4hh85SbhfETv_s2vUm9wWEpsfM.crl (hash: MpA0kuHVKRTeGeZXUAxjI4w5o1M3IWJCDwtKYspaKLQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B8861F3949B85F113BFFB36BD49BDC16129B1F3
        Validity
            Not Before: Jan 13 03:03:47 2025 GMT
            Not After : Oct 14 15:30:23 2025 GMT
        Subject: CN=F0BB8A19860A7D06608E4F182BBD3D44778EF4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:ed:22:74:af:cd:96:91:2f:3f:20:7a:8f:
                    15:52:90:91:e7:d3:72:cc:ee:27:9e:92:19:df:28:
                    db:32:87:c7:e8:17:7b:f5:e6:76:5d:d4:01:f3:49:
                    78:ff:49:0f:e8:93:25:be:fd:5f:a1:38:52:40:a9:
                    75:f1:ac:05:91:f7:37:83:f8:48:c7:12:f4:e8:31:
                    8a:64:33:77:6c:e8:fc:ab:97:76:8c:da:fc:fd:9b:
                    dc:43:93:f3:bd:3d:81:c2:e6:7e:94:59:1c:c5:fc:
                    5a:79:23:6c:61:e2:c8:81:84:c7:66:c0:32:17:ef:
                    5c:a8:2d:01:7b:60:53:ad:28:39:00:dd:3d:c2:f2:
                    48:b0:e3:a3:65:a0:2b:a0:b4:1d:d9:e8:2e:f2:78:
                    7d:bb:a0:4d:b8:33:63:72:11:98:bf:05:d7:40:9e:
                    69:dd:3a:86:e0:d9:e1:8e:7a:5c:3d:8d:43:f4:d4:
                    3d:ae:77:d9:56:de:cd:b4:b4:27:f0:5e:d7:7d:76:
                    e3:17:82:12:ea:ca:78:ec:a3:44:64:89:b9:4e:bb:
                    6c:d6:1c:99:dc:74:29:e5:d7:cb:23:55:8b:5a:96:
                    d8:ec:d8:eb:a0:7a:5a:70:be:fa:fd:3f:69:64:73:
                    64:95:69:6e:1a:0d:e5:45:c1:50:56:f8:ef:f1:98:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:8A:19:86:0A:7D:06:60:8E:4F:18:2B:BD:3D:44:77:8E:F4:AF
            X509v3 Authority Key Identifier:
                keyid:6B:88:61:F3:94:9B:85:F1:13:BF:FB:36:BD:49:BD:C1:61:29:B1:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/a4hh85SbhfETv_s2vUm9wWEpsfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/a4hh85SbhfETv_s2vUm9wWEpsfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/a4hh85SbhfETv_s2vUm9wWEpsfM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:51:1c:9b:11:0f:3f:e1:08:86:99:01:64:72:21:b1:ff:ff:
         d4:f2:3e:a4:17:fd:68:56:fc:cb:24:82:9b:d0:7e:3e:30:eb:
         f6:7f:d8:7d:39:4d:bb:f4:5d:da:05:1d:3d:40:de:cd:06:7e:
         f1:38:42:aa:38:6a:81:04:8c:df:0d:15:3b:e7:22:68:4b:c2:
         26:ce:4f:17:cd:cf:9b:e7:7c:f0:b2:52:5e:e5:04:f4:c3:57:
         56:7d:fa:18:5d:8e:12:03:ac:d2:94:4f:86:4c:a5:a3:11:81:
         3f:97:ff:9e:fa:58:17:bd:8c:74:0b:dc:aa:8d:52:9f:51:a3:
         6f:00:e4:8c:a6:77:c4:5f:93:e8:df:f1:de:1c:1c:1f:18:07:
         f5:6c:04:3a:82:2c:d7:f8:8a:4c:3d:9f:4f:1b:ad:44:f6:5c:
         ac:88:73:98:91:8d:14:9d:0e:7e:6e:71:a0:59:1f:49:3c:6b:
         fe:e8:2e:c0:2d:3b:fe:a3:a9:ee:b7:c7:6f:56:6c:31:f2:f8:
         07:b2:72:c0:06:4c:21:85:7b:ca:ff:84:ab:b5:2f:5c:d9:3c:
         21:09:79:e7:a5:51:0b:90:bf:a5:f4:7b:0d:d1:dc:a4:15:c6:
         6f:24:3d:95:b8:ce:92:ed:ee:3a:11:1c:c6:92:ee:8e:38:47:
         c1:d3:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:04:07 2025 by rpki-client