Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft
File:                     pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft (raw, json)
Hash identifier:          uaQOnfPQGO6E1pB3TaKyJUXXI/uDqr5JFmThgnGEPX4=
Subject key identifier:   5A:77:88:C7:A2:A5:10:BC:92:39:DD:13:9D:AD:AA:B9:19:20:A3:61
Authority key identifier: A5:C1:C5:A8:F1:0E:AD:48:6C:53:84:0D:75:98:86:58:B1:D2:6C:B6
Certificate issuer:       /CN=A5C1C5A8F10EAD486C53840D75988658B1D26CB6
Certificate serial:       103F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pcHFqPEOrUhsU4QNdZiGWLHSbLY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft
Manifest number:          103F
Signing time:             Sun 21 Jan 2024 18:46:20 +0000
Manifest this update:     Sun 21 Jan 2024 18:46:20 +0000
Manifest next update:     Tue 23 Jan 2024 18:46:20 +0000
Files and hashes:         1: pcHFqPEOrUhsU4QNdZiGWLHSbLY.crl (hash: rtJggBGjjV7GYYhnnC/p9nDTASoZ0RnFjpAgvMzGR10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4159 (0x103f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C1C5A8F10EAD486C53840D75988658B1D26CB6
        Validity
            Not Before: Jan 21 18:46:20 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5A7788C7A2A510BC9239DD139DADAAB91920A361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:bf:97:76:c8:0b:74:36:98:23:ce:be:b7:
                    f7:0b:8d:be:fe:d2:2f:3b:ec:51:b3:e5:7c:c0:f3:
                    44:e4:88:3b:be:3f:85:6a:19:ba:93:bd:d6:38:61:
                    70:b7:f1:b4:0f:9c:74:cd:dd:d7:db:39:9a:05:11:
                    f8:d0:bc:00:e1:de:cd:f9:b9:ba:bd:4d:44:ea:39:
                    9d:d0:25:c1:0a:a0:98:bc:dd:98:c9:4b:1d:1c:66:
                    cb:0a:42:81:e1:64:7d:38:40:e8:12:38:19:0f:2b:
                    65:63:cd:66:0c:a7:f7:2b:81:33:76:55:c4:cb:01:
                    f1:73:32:d2:ed:a5:a2:8c:59:3c:cf:6f:42:70:a5:
                    50:6c:ca:3a:98:fd:d8:77:e6:7d:13:53:d9:14:cf:
                    65:86:d4:aa:42:1e:bb:91:77:23:89:7a:f4:37:ee:
                    5b:82:ac:72:ce:c6:7d:c4:61:96:90:d8:29:8a:98:
                    e5:8b:e7:a5:cf:6e:32:25:84:b1:28:ea:c4:28:14:
                    9e:5c:2d:75:bd:90:8c:21:3f:78:96:c4:40:59:7d:
                    ca:6d:a7:e4:03:6b:ce:bd:54:55:f7:95:7f:eb:51:
                    e4:fe:26:25:8e:9e:9c:50:86:e8:ae:53:cc:d4:21:
                    7d:be:72:19:94:60:76:b7:39:4b:e9:2c:11:e5:fc:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:77:88:C7:A2:A5:10:BC:92:39:DD:13:9D:AD:AA:B9:19:20:A3:61
            X509v3 Authority Key Identifier:
                keyid:A5:C1:C5:A8:F1:0E:AD:48:6C:53:84:0D:75:98:86:58:B1:D2:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pcHFqPEOrUhsU4QNdZiGWLHSbLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:02:7b:3f:ad:e1:46:59:16:be:06:96:e9:ea:5c:33:7a:74:
         eb:d2:cf:fc:8c:a2:6e:0e:4a:61:bc:42:65:78:5e:b2:be:8f:
         ca:20:37:fe:2c:c1:f9:d8:de:74:06:e5:cf:3b:2a:5a:85:3b:
         a5:0e:a4:21:68:88:18:c1:be:48:c6:04:d8:ed:98:85:f5:a0:
         07:0a:25:5e:d6:ca:00:7c:21:ef:88:b7:7f:27:1c:da:84:fb:
         0a:05:d5:fe:5b:27:ba:9b:16:5b:eb:aa:8b:97:67:82:55:47:
         6d:98:8c:bc:ae:07:af:13:0a:65:17:4f:03:8c:43:c1:5a:8b:
         b2:a5:e3:65:4d:eb:6b:5b:6c:77:e9:dd:e3:02:1e:0b:8e:e4:
         9d:b3:41:cc:1d:10:ad:3e:60:b6:40:b9:4c:2c:ae:db:bc:c2:
         ba:95:8d:26:ec:50:6a:31:26:43:a0:6a:24:d0:5c:96:38:0f:
         48:44:bb:db:2b:d8:1a:98:eb:d3:29:09:be:b4:ca:bf:5b:2a:
         dd:e1:87:85:07:4a:f4:a1:b7:a9:11:e3:b6:d0:90:5d:b4:fd:
         a0:15:8d:a1:fb:9f:75:17:04:f2:62:3b:4c:4a:e7:0c:a9:66:
         57:31:66:ed:17:61:49:a6:ed:03:e1:33:40:17:a0:e5:05:39:
         67:46:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org