Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
File:                     mZu-Ex3100bydifMT4-p-1dYGSk.mft (raw, json)
Hash identifier:          1OpluKVdYKW/4sQpy5e+AqhqBeTPEBfmdOCeNdcOPPg=
Subject key identifier:   BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       0CBE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
Manifest number:          0C21
Signing time:             Sun 02 Jun 2024 03:38:20 +0000
Manifest this update:     Sun 02 Jun 2024 03:38:20 +0000
Manifest next update:     Tue 04 Jun 2024 03:38:20 +0000
Files and hashes:         1: 9qHLOwOiWtpKU6EbXFjpAleQafA.roa (hash: UQFOmptZMLWSh96plGtzbhFEybdIQNW66LY5fcrozjQ=)
                          2: ALaZeUTmW9iA9ZhEQ1VGNaFswQk.roa (hash: +zOJoXRdw+KsLlcDn2VT3KSjcSsaeouCsVEqItXUiTI=)
                          3: C1xsjZNfSuuP8PnmaQqBhAmp5A4.roa (hash: DdnJnTl/QTDDCw5/MvJ/0ILjGmB+SwWKUFvrsy1icUA=)
                          4: CpEYD2pqIMO-O93Wz9PnaxlSxkg.roa (hash: LzJC7sDZ3GDIw6Y7bFwPRxRdvTwZdfX5hej1GcxfPuo=)
                          5: J7x_8MdconCF9SxoW7v8FIHbXZc.roa (hash: F3msCZ4oiG8QKE+PTgXtlToZiTl9zRJa1gaIo9yYmuA=)
                          6: NDdFndGB_INXYfGfZcsS2MXe8Ok.roa (hash: k/1gISUCCbrHGqqqvn32bwmwlfzi7FJ63Q9877SLQ08=)
                          7: OjIUIQTkaRBNVYUSRmFPFKxEZ34.roa (hash: uPTd2VBMXChkO9FxvOMLhipFoACOxzwtbsvG0UA+rJg=)
                          8: Pgj9iRrCHhXIVknJobAzjA-MPvE.roa (hash: lpNrFtWB4pA+KUCDFZmDw9icu+3hf++aHptj7cD8kjQ=)
                          9: PsMBHwCsA0t3zuS6c_sBym4Bgn4.roa (hash: Bej8XQWLKhvqGv9vA1Q+a93lRVaU7dK+Kgh/m9ih9Y8=)
                          10: QOrNaoXfbHAjzVQDSZCJp1BI1tM.roa (hash: 5Aqk3v6IEYgKlOOv1Cse5b24m6HdPke/DLw7cmbrrQQ=)
                          11: QlP-zITuspjzRiFIaTEtuOz1Kaw.roa (hash: UM09Nz+WDnLUMGruSDNs4q/bDYv3+yo1rcgX9hMOoBU=)
                          12: TSRUI8mopENxMsVhTdrLhZy64N4.roa (hash: 0DWRqeaRpqcIZ1AQeuce5cYmzsvhwZuzyHW46JGJiqE=)
                          13: _mQaAKK8erNk5lQ5_Xb8s9CEW5A.roa (hash: R/0ZJAv+/uXvG44f2RH5j5cuekmyRL0AglDpFWfJx4Y=)
                          14: b4ckK-d3hUnMwtdtiY8N3Km4geM.roa (hash: Cu9n+K+0aAStEGbJ2LUXRf8FOPJMfVNlV9OGFMO/VAM=)
                          15: ePtWISL1BBCh-1zEj1b3tA5gGZg.roa (hash: mHDz/sCE2/6EQNDCQxPVCij8mpHVFxiYEym49NPm6+s=)
                          16: gZnpC1NjsAEfHmwXw3eZmtAaY_w.roa (hash: EMNAJubxveXvUqbtqI5wcFGmzxh3ObobH7fmBLUbfwE=)
                          17: hSmUpZzzmJ-rzPYDIxpKOIZyWUA.roa (hash: HtoZJkhFHG05/fqVdkvjb1RHYvE+PdBTcKwHYLQzfx8=)
                          18: kXy2V6DD3tFUQR94QhQeLifsQC4.roa (hash: PzOE9nizAAibhz3jdWzPAzi0NIZlj9bHqY3xcXDe/iQ=)
                          19: mZu-Ex3100bydifMT4-p-1dYGSk.crl (hash: 0McfeBonFZayWDfmp0ld8PSVyfKVDikclQVw4uo0hX0=)
                          20: nr0VPX76A8-aKKqjTXqTmxjVdLc.roa (hash: x5OdPP/AVE/LIZjm0r/Mk88OAo7NQrVR+2OYzriFj2Q=)
                          21: onOreep0lcx9DRJn1FSrFTMHXXk.roa (hash: 1Y5lNfKyxrmswuuyjx0ZUB/bdo3fJsJahrTxwLrN+RQ=)
                          22: pNyfPTXuEPPKIl0jr6TvAsR9Dxc.roa (hash: VcgsvhCw9NhKAJS75Jne1/0hpRWkIM2NprKpw3mwP6U=)
                          23: pS1cHPLmyichtxBRKg7sPwNhwrI.roa (hash: oUKuhcGauypR3Ioj5pEtqzZWDU0wP8/1HPCem/JznR4=)
                          24: qJFm5RU5oxDpp4uZiybcBhLO5Cs.roa (hash: Rbktk/0LJJJwYU4+W3xS/WeIiTXYFjF5mpFaP86NkWI=)
                          25: tZCxScrfotlOU0b9ApZHDw4Sezo.roa (hash: JRA5FwQ7xA+QVXcLBKSuuU04tRCKhqQB/drXu5T7Qz8=)
                          26: x9yTAQIl-Bvxlvb_dnsRxzugy6s.roa (hash: DgC1/S+sAjYhqffwGsj0VPvIAvTc4O/5l2g541S4EX4=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Jun  2 03:38:20 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BD55C9E63657E8A51D91B8ACF7F844527B32BF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:c1:63:32:01:c5:b1:de:eb:56:8d:fe:89:
                    56:57:71:a0:b2:43:6d:70:89:1a:3b:7c:3f:e7:3a:
                    5c:07:36:16:dd:d3:f3:f0:a7:a9:9a:5c:11:4a:73:
                    28:69:8c:42:f7:f0:60:bc:34:62:39:39:f7:41:38:
                    7f:b0:30:72:26:00:0a:8e:0c:42:35:54:b1:a6:db:
                    61:4e:47:bf:8f:27:b9:ef:6e:1d:e9:c1:af:e3:04:
                    15:69:65:8a:d8:58:f5:13:de:d0:19:05:5c:56:36:
                    c6:be:54:61:98:a0:f5:1b:37:12:f7:af:7b:c3:92:
                    b5:f7:34:14:1e:4c:ca:70:10:b9:0a:32:01:b2:62:
                    42:3f:95:a5:ed:8b:91:08:84:aa:3a:98:c4:79:9a:
                    2e:69:26:78:86:33:9f:4e:7e:33:8d:84:69:a8:d6:
                    d0:95:7d:ef:35:fa:57:ee:1a:56:5f:c6:6a:1a:d8:
                    4a:d3:71:4c:40:6a:e8:b1:08:04:5c:b5:e5:fa:51:
                    5e:5a:4d:03:48:84:9f:63:78:59:4e:c2:ee:4f:76:
                    37:bf:2d:1e:46:14:7b:94:e4:93:24:e7:02:10:6e:
                    22:96:70:30:c4:4f:55:3e:12:b2:79:3e:50:dc:7c:
                    7a:e5:65:ba:a0:b4:f5:ec:f6:dc:f0:7a:a8:7a:fe:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:bc:96:97:94:cc:af:cc:18:5f:bb:9d:f0:7c:ad:1e:65:
         2f:3a:6b:d9:d7:8e:bf:54:2a:5d:19:01:be:ee:4b:02:c0:74:
         e8:db:de:2e:df:17:5e:20:be:9a:c9:30:95:de:c8:fd:c7:a8:
         b4:08:d3:a8:82:0a:14:25:f8:4e:6e:3b:81:f3:88:31:5a:a8:
         02:00:01:3e:43:fe:a4:d4:42:38:48:06:a0:b6:7b:1d:57:20:
         04:3e:71:9f:93:87:b5:4a:70:95:1a:89:95:23:fd:33:7e:9f:
         ee:f4:45:fd:f3:70:38:c3:90:bf:82:37:77:e4:58:f4:28:a9:
         e3:49:32:7b:34:57:29:0f:6d:6b:71:ba:08:f2:fe:d2:9f:d3:
         5d:fb:c9:98:e2:d2:9e:86:9c:5c:9e:b9:8b:d3:0f:8c:09:ea:
         a3:cd:62:1c:f3:87:97:ee:2d:3c:43:c4:d8:7f:9f:d8:ae:ef:
         22:22:e3:a1:bd:24:4b:00:d0:86:b1:69:b9:04:f8:22:00:29:
         f2:08:bf:2a:4e:f3:df:9f:11:65:52:f2:2d:b8:bc:fe:5e:48:
         ba:a5:3d:6d:83:b7:6a:78:35:f4:8a:2c:54:2d:66:ac:d3:0b:
         ed:73:59:21:a6:49:18:4e:0d:52:57:a0:e5:84:25:2f:ba:e3:
         5f:0f:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:21:46 2024 by rpki-client on console-ams.rpki-client.org