Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
File:                     7jijaSKsEYQNtLsn0bA0l2BZh2E.mft (raw, json)
Hash identifier:          rXJL5M8hoV3tfqJPPhsl0KBPaFPu9oUHdLgGmyQKHpQ=
Subject key identifier:   07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
Authority key identifier: EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61
Certificate issuer:       /CN=EE38A36922AC11840DB4BB27D1B0349760598761
Certificate serial:       01ED
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
Manifest number:          01ED
Signing time:             Thu 21 Nov 2024 03:53:30 +0000
Manifest this update:     Thu 21 Nov 2024 03:53:30 +0000
Manifest next update:     Sat 23 Nov 2024 03:53:30 +0000
Files and hashes:         1: 7jijaSKsEYQNtLsn0bA0l2BZh2E.crl (hash: v6afhzBAeqnUHzJUlUW4lLWT4l7YuGknbG29e4u/2IQ=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE38A36922AC11840DB4BB27D1B0349760598761
        Validity
            Not Before: Nov 21 03:53:30 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0759044FCBCE4A69EFFF074B474F0707BD9438C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:06:3e:5e:ed:bc:45:7c:dc:c6:87:c5:77:
                    59:83:fc:c7:cc:33:45:ac:92:83:fd:b8:7b:b8:e2:
                    c7:a8:2b:f1:46:c0:87:4c:e2:a3:e3:9f:b0:8e:38:
                    ac:c5:0a:f7:2c:77:0e:a8:9d:3f:88:b3:a5:fa:81:
                    4b:17:2f:da:29:3f:60:8d:fb:a0:e5:97:9a:fd:14:
                    fa:7d:c0:fb:75:e3:6c:84:6f:71:35:4b:dd:de:64:
                    1c:2f:af:75:93:48:88:64:0f:25:3b:6e:73:8a:43:
                    ba:22:ab:75:42:3e:1c:6f:b9:01:e2:a0:58:fb:f2:
                    87:f9:fa:e2:dd:f3:7c:d9:52:4c:c3:0f:55:9f:38:
                    87:b8:b0:66:89:bb:36:d8:04:e4:bf:6f:62:a7:ca:
                    07:04:dc:96:ed:21:35:79:d1:55:b4:d1:d0:b3:b5:
                    15:dc:33:8c:6e:fd:bc:fb:6c:dd:94:37:b3:c1:0c:
                    df:0c:59:d7:e8:fd:c6:0b:d7:3a:27:19:92:af:f0:
                    78:75:09:a5:46:11:73:88:c8:1f:e4:06:21:91:43:
                    5c:65:ce:b5:d5:b5:e6:bc:6b:aa:fe:14:cb:ec:5b:
                    95:bc:98:85:a3:ae:d4:01:c3:07:47:5b:e0:54:da:
                    2d:63:e8:e1:b4:1e:50:61:ec:df:bc:74:7e:2b:df:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
            X509v3 Authority Key Identifier:
                keyid:EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7c:55:8e:39:92:64:34:24:a8:79:af:55:b4:fc:87:f9:f8:
         78:0d:95:e0:3c:71:ff:1a:39:6c:23:3b:1e:8d:4b:ad:ab:0c:
         fa:90:16:f8:66:0a:1e:24:54:64:b2:ca:12:4c:20:a6:73:21:
         eb:b9:32:b3:1d:9f:18:46:8d:52:b1:49:d7:67:e5:3e:ca:2b:
         90:5c:ef:82:64:5a:a5:25:0f:07:b3:07:8d:a0:fe:63:64:b8:
         b5:6e:3a:5a:b0:8f:13:e4:e8:1d:ad:19:94:59:e5:ef:79:4b:
         99:7e:bf:a6:83:e2:8a:61:1c:6f:50:f3:2a:12:33:c7:27:1d:
         8e:e1:1b:e1:05:3a:df:2a:21:70:3a:86:3a:b8:9d:ed:9f:0a:
         92:a4:ce:cd:e0:47:4b:03:e9:8b:1f:96:b8:56:d7:12:00:90:
         9a:02:5e:10:dd:6e:de:a9:d5:ec:cf:ea:69:c5:03:c3:a5:6b:
         1c:1e:a7:06:f6:42:f9:92:f1:76:7e:9e:07:e8:0e:a9:29:60:
         17:2c:0f:6e:55:27:b7:97:1c:1c:1a:7c:c9:35:17:2b:cc:0e:
         e0:61:88:44:3e:40:df:2e:34:e5:50:17:d7:44:51:73:4b:24:
         05:fa:2c:5e:af:c0:2a:c2:23:0d:2d:6b:c3:73:a2:c1:38:61:
         4d:1c:56:aa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUUz
OEEzNjkyMkFDMTE4NDBEQjRCQjI3RDFCMDM0OTc2MDU5ODc2MTAeFw0yNDExMjEw
MzUzMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3NTkwNDRGQ0JDRTRB
NjlFRkZGMDc0QjQ3NEYwNzA3QkQ5NDM4QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiXwY+Xu28RXzcxofFd1mD/MfMM0WskoP9uHu44seoK/FGwIdM
4qPjn7COOKzFCvcsdw6onT+Is6X6gUsXL9opP2CN+6Dll5r9FPp9wPt142yEb3E1
S93eZBwvr3WTSIhkDyU7bnOKQ7oiq3VCPhxvuQHioFj78of5+uLd83zZUkzDD1Wf
OIe4sGaJuzbYBOS/b2KnygcE3JbtITV50VW00dCztRXcM4xu/bz7bN2UN7PBDN8M
Wdfo/cYL1zonGZKv8Hh1CaVGEXOIyB/kBiGRQ1xlzrXVtea8a6r+FMvsW5W8mIWj
rtQBwwdHW+BU2i1j6OG0HlBh7N+8dH4r30VjAgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUB1kET8vOSmnv/wdLR08HB72UOMUwHwYDVR0jBBgwFoAU7jijaSKsEYQNtLsn
0bA0l2BZh2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5JVFJJ
U0UvN2ppamFTS3NFWVFOdExzbjBiQTBsMkJaaDJFLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS83amlqYVNLc0VZUU50THNuMGJBMGwyQlpoMkUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTklUUklTRS83amlqYVNLc0VZUU50
THNuMGJBMGwyQlpoMkUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVXxVjjmSZDQkqHmvVbT8h/n4eA2V4Dxx/xo5bCM7Ho1LrasM+pAW+GYKHiRU
ZLLKEkwgpnMh67kysx2fGEaNUrFJ12flPsorkFzvgmRapSUPB7MHjaD+Y2S4tW46
WrCPE+ToHa0ZlFnl73lLmX6/poPiimEcb1DzKhIzxycdjuEb4QU63yohcDqGOrid
7Z8KkqTOzeBHSwPpix+WuFbXEgCQmgJeEN1u3qnV7M/qacUDw6VrHB6nBvZC+ZLx
dn6eB+gOqSlgFywPblUnt5ccHBp8yTUXK8wO4GGIRD5A3y405VAX10RRc0skBfos
Xq/AKsIjDS1rw3OiwThhTRxWqg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org