Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.mft
File:                     kO5pmEhA0eAyXowBPf-3soQQR-Q.mft (raw, json)
Hash identifier:          DMMCeH1R0hqLVXPwxB3DFxUQqSnDlFHiap9MZMQyf24=
Subject key identifier:   7B:C8:BA:F9:0A:4F:AE:86:8A:4D:84:95:F2:A1:C0:4D:0F:46:56:A6
Authority key identifier: 90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
Certificate issuer:       /CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Certificate serial:       0C63
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.mft
Manifest number:          0C56
Signing time:             Mon 06 Nov 2023 01:14:50 +0000
Manifest this update:     Mon 06 Nov 2023 01:14:50 +0000
Manifest next update:     Wed 08 Nov 2023 01:14:50 +0000
Files and hashes:         1: kO5pmEhA0eAyXowBPf-3soQQR-Q.crl (hash: HeBjAydWownn4bOefZkVAEZ153DRyuJKZh1h5Y3LpX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
        Validity
            Not Before: Nov  6 01:14:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7BC8BAF90A4FAE868A4D8495F2A1C04D0F4656A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:b2:7b:bf:bb:e5:a2:70:84:f0:49:64:97:
                    42:f8:03:bd:98:5e:67:7c:22:12:94:e1:7a:cc:b8:
                    f4:96:c1:1c:6e:8d:9e:30:10:21:ca:e2:ae:71:23:
                    58:c3:54:e4:91:0c:2a:94:a7:12:55:86:f9:53:16:
                    b4:6c:71:49:0a:38:1f:58:73:99:99:5e:f4:df:ed:
                    46:c1:10:34:ac:48:32:46:9f:50:bd:c6:13:5a:71:
                    3d:86:a9:8b:ba:56:e9:12:d7:fa:9d:a8:53:dc:e6:
                    41:c0:d6:6c:ef:03:85:48:e7:18:96:b3:f5:4d:48:
                    fa:d4:38:47:18:48:5a:ec:ff:3d:3f:b8:e5:0e:3b:
                    8d:2a:dc:d3:ac:85:bb:90:15:b1:8f:97:23:7a:d7:
                    d4:eb:11:d7:80:28:5a:c4:0e:1a:ef:ad:15:41:f7:
                    8a:80:40:0e:44:71:60:9f:a3:3e:8e:65:3f:82:e6:
                    82:f2:6c:6b:f8:e1:96:97:e0:05:45:f2:8c:1b:49:
                    46:02:02:50:f8:93:4e:90:95:19:2c:6c:4f:f0:4d:
                    af:cc:70:2a:5e:ff:2e:86:6c:56:c9:e8:2c:19:6a:
                    f0:8c:dd:4b:f8:e5:fd:1f:1e:5f:e0:d9:d4:b3:37:
                    75:a8:92:ac:71:5c:1e:02:7e:07:fe:ef:ec:39:5c:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C8:BA:F9:0A:4F:AE:86:8A:4D:84:95:F2:A1:C0:4D:0F:46:56:A6
            X509v3 Authority Key Identifier:
                keyid:90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:1c:06:e1:aa:ba:c2:1b:66:07:8b:69:ad:af:d6:0b:7c:ce:
         c4:f1:22:ca:7c:a7:3f:08:a1:e3:23:3a:90:2e:22:64:09:01:
         dc:f4:8b:f4:66:84:43:4c:ef:4c:3b:47:0a:4a:d1:fa:c0:f7:
         e4:b1:b3:c6:04:aa:62:49:1c:e8:20:b0:20:70:77:fb:b0:da:
         c7:3e:24:74:cf:17:6b:dd:b4:40:98:e2:7b:7e:23:48:19:38:
         0e:eb:4c:94:9c:06:e8:86:b3:7d:76:e3:6c:8b:1f:4c:10:c1:
         79:df:c2:62:26:09:7f:4a:e6:26:ad:6b:f2:2b:17:c9:9e:ed:
         99:7b:95:f8:e2:bc:44:be:b3:cb:07:5d:b7:71:f3:2d:cc:15:
         48:ff:d8:22:ae:15:0c:9f:18:f5:bd:19:1a:b3:7c:e4:ed:df:
         ef:4e:17:f5:a8:bc:0e:b9:e8:2f:a5:28:12:e3:17:b7:be:ad:
         7e:8a:b4:a6:30:e1:56:8c:7b:4e:3f:dc:ed:55:b8:65:0f:d8:
         cb:9d:de:91:a1:ac:cf:84:33:fc:d8:ca:a6:32:4d:f1:80:6c:
         e2:8a:37:eb:f1:67:b7:f6:a9:08:6c:23:46:a5:22:d0:f1:a4:
         b1:e0:4d:f8:ac:4f:f6:66:49:b9:e9:fe:ff:1a:4f:0f:e1:7e:
         ed:18:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 07:37:08 2023 by rpki-client on console-fra.rpki-client.org