Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JMC/Ha0eTscVpJU-dsA6WxSAY2zsar0.mft
File:                     Ha0eTscVpJU-dsA6WxSAY2zsar0.mft (raw, json)
Hash identifier:          5Ep32VmuQ3StXDj1RdiF34OhfI6pDQ93AfoBeKdTUVY=
Subject key identifier:   D8:3D:B0:57:07:42:9B:8C:AB:19:C0:8E:4D:F9:59:C2:BE:78:DC:3A
Authority key identifier: 1D:AD:1E:4E:C7:15:A4:95:3E:76:C0:3A:5B:14:80:63:6C:EC:6A:BD
Certificate issuer:       /CN=1DAD1E4EC715A4953E76C03A5B1480636CEC6ABD
Certificate serial:       0EC0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Ha0eTscVpJU-dsA6WxSAY2zsar0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JMC/Ha0eTscVpJU-dsA6WxSAY2zsar0.mft
Manifest number:          0EC0
Signing time:             Wed 02 Dec 2020 19:05:53 +0000
Manifest this update:     Wed 02 Dec 2020 19:05:53 +0000
Manifest next update:     Fri 04 Dec 2020 19:05:53 +0000
Files and hashes:         1: Ha0eTscVpJU-dsA6WxSAY2zsar0.crl (hash: A5k6pJHSmoMxx0ec92jerQAGIdyoedf6G7hNcijRx+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3776 (0xec0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DAD1E4EC715A4953E76C03A5B1480636CEC6ABD
        Validity
            Not Before: Dec  2 19:05:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D83DB05707429B8CAB19C08E4DF959C2BE78DC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:9d:02:e2:60:07:3e:eb:57:6e:fd:12:1f:
                    dd:e6:a2:fc:56:c0:96:a0:18:23:40:b6:67:68:9a:
                    69:e3:64:d4:71:a6:b4:2d:81:b5:c4:11:89:9c:7f:
                    42:0d:ae:86:ae:cc:68:0d:19:67:b1:a0:2c:3a:c3:
                    72:6e:0c:91:63:f7:65:3b:88:ce:58:25:25:26:97:
                    e8:86:6e:cd:27:7d:05:37:fd:e5:57:ec:80:3e:1a:
                    82:d3:60:0e:2f:66:e4:0c:5c:2b:0b:4e:53:d8:9f:
                    44:88:a4:00:b5:7b:68:cd:df:8d:a6:db:4d:d0:84:
                    e2:4a:19:56:d5:8e:07:bb:14:38:97:52:a5:49:02:
                    7d:ba:09:38:dd:c7:5b:ae:db:05:ca:ef:d4:67:ba:
                    7b:e4:90:e3:cb:3e:28:6f:94:df:24:5e:d0:ea:e5:
                    91:db:0f:8f:ee:49:4d:a7:ee:d9:58:13:81:51:87:
                    9c:3c:48:8c:99:4a:14:5d:61:c9:d8:82:3b:c6:29:
                    88:b9:fe:1f:6f:34:05:f3:32:23:17:2c:ec:d3:76:
                    ff:93:b2:eb:35:35:e1:e3:27:d6:7d:9c:a6:a7:ca:
                    53:e4:bc:7c:31:ed:09:db:5b:04:51:77:9d:33:15:
                    17:2b:69:40:6a:27:76:5d:79:21:d2:e6:65:43:28:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3D:B0:57:07:42:9B:8C:AB:19:C0:8E:4D:F9:59:C2:BE:78:DC:3A
            X509v3 Authority Key Identifier:
                keyid:1D:AD:1E:4E:C7:15:A4:95:3E:76:C0:3A:5B:14:80:63:6C:EC:6A:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JMC/Ha0eTscVpJU-dsA6WxSAY2zsar0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Ha0eTscVpJU-dsA6WxSAY2zsar0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JMC/Ha0eTscVpJU-dsA6WxSAY2zsar0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:f1:d2:9e:46:4a:71:34:48:99:d6:6d:be:82:df:57:0b:
         93:be:ef:5b:4b:07:cc:83:30:ce:af:88:dc:a2:90:9e:f7:a3:
         2f:ea:ee:6c:f8:d8:76:f3:03:26:cb:11:fc:cf:e1:f5:fd:e7:
         97:43:67:14:1b:65:49:88:d2:9a:a8:91:83:1b:cb:7f:2c:28:
         8d:8a:ec:74:50:9f:c5:7c:e2:3b:56:02:f6:27:b8:86:17:e0:
         c6:98:90:5f:4e:ae:8c:4f:63:8a:10:e3:df:54:a0:7b:62:c7:
         4f:60:dd:cd:3c:63:32:37:4e:16:3e:d8:db:1d:c6:89:f0:c7:
         8f:4b:df:a5:2e:6b:62:6e:ff:1c:a6:a9:4f:ca:53:27:f6:94:
         00:d4:79:97:0a:42:53:23:fc:9d:1e:60:af:52:4e:8b:9e:0d:
         1f:57:93:be:f6:58:80:75:8f:91:a4:c5:5a:e3:73:04:a4:33:
         4e:0b:e4:d1:12:75:1b:95:0b:bc:be:88:2a:d4:46:4a:da:ff:
         90:1d:dc:db:36:bb:8c:ef:4a:14:2d:0b:16:bb:76:1e:78:de:
         c0:8e:c5:3d:4d:2a:d1:1b:ca:49:a9:27:f9:50:70:3a:8a:01:
         47:c4:15:e9:f9:5c:74:35:c7:03:2f:87:06:a6:ed:2a:a1:7e:
         5c:5b:5a:e1
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgICDsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMURB
RDFFNEVDNzE1QTQ5NTNFNzZDMDNBNUIxNDgwNjM2Q0VDNkFCRDAeFw0yMDEyMDIx
OTA1NTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ4M0RCMDU3MDc0MjlC
OENBQjE5QzA4RTRERjk1OUMyQkU3OERDM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDieZ0C4mAHPutXbv0SH93movxWwJagGCNAtmdommnjZNRxprQt
gbXEEYmcf0INroauzGgNGWexoCw6w3JuDJFj92U7iM5YJSUml+iGbs0nfQU3/eVX
7IA+GoLTYA4vZuQMXCsLTlPYn0SIpAC1e2jN342m203QhOJKGVbVjge7FDiXUqVJ
An26CTjdx1uu2wXK79RnunvkkOPLPihvlN8kXtDq5ZHbD4/uSU2n7tlYE4FRh5w8
SIyZShRdYcnYgjvGKYi5/h9vNAXzMiMXLOzTdv+Tsus1NeHjJ9Z9nKanylPkvHwx
7QnbWwRRd50zFRcraUBqJ3ZdeSHS5mVDKClzAgMBAAGjggIBMIIB/TAdBgNVHQ4E
FgQU2D2wVwdCm4yrGcCOTflZwr543DowHwYDVR0jBBgwFoAUHa0eTscVpJU+dsA6
WxSAY2zsar0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSk1DL0hh
MGVUc2NWcEpVLWRzQTZXeFNBWTJ6c2FyMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
SGEwZVRzY1ZwSlUtZHNBNld4U0FZMnpzYXIwLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvSk1DL0hhMGVUc2NWcEpVLWRzQTZXeFNBWTJ6
c2FyMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUTPHSnkZK
cTRImdZtvoLfVwuTvu9bSwfMgzDOr4jcopCe96Mv6u5s+Nh28wMmyxH8z+H1/eeX
Q2cUG2VJiNKaqJGDG8t/LCiNiux0UJ/FfOI7VgL2J7iGF+DGmJBfTq6MT2OKEOPf
VKB7YsdPYN3NPGMyN04WPtjbHcaJ8MePS9+lLmtibv8cpqlPylMn9pQA1HmXCkJT
I/ydHmCvUk6Lng0fV5O+9liAdY+RpMVa43MEpDNOC+TREnUblQu8vogq1EZK2v+Q
HdzbNruM70oULQsWu3YeeN7AjsU9TSrRG8pJqSf5UHA6igFHxBXp+Vx0NccDL4cG
pu0qoX5cW1rh
-----END CERTIFICATE-----