Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft
File:                     nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft (raw, json)
Hash identifier:          pr4r91d/CWusfSi9zM83p7C/bYTfu7k0Oqb+AQGJ0ZU=
Subject key identifier:   C5:EB:6C:94:B3:01:61:42:0D:24:69:27:AB:70:98:D8:69:AF:ED:7D
Authority key identifier: 9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
Certificate issuer:       /CN=9EEBB531831504906C0086DB42969683D64BBAC8
Certificate serial:       1230
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft
Manifest number:          122B
Signing time:             Sun 12 Nov 2023 07:31:10 +0000
Manifest this update:     Sun 12 Nov 2023 07:31:10 +0000
Manifest next update:     Tue 14 Nov 2023 07:31:10 +0000
Files and hashes:         1: nuu1MYMVBJBsAIbbQpaWg9ZLusg.crl (hash: mL0HtGlKDIrZLbF6oeF3BWd8py1xkcJCN01P16lxhU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4656 (0x1230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EEBB531831504906C0086DB42969683D64BBAC8
        Validity
            Not Before: Nov 12 07:31:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C5EB6C94B30161420D246927AB7098D869AFED7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:af:9f:fc:12:e0:ae:de:86:0f:84:ee:ab:e6:
                    d2:e4:d5:3c:8f:a0:f3:8b:7b:86:ea:20:5c:cc:dc:
                    3d:8a:d0:50:43:49:3c:2c:f1:71:6c:e1:73:19:97:
                    c2:00:3e:c0:16:93:e9:8c:5e:91:3f:fb:63:99:22:
                    e4:bf:ab:9a:8e:19:79:05:16:c6:1d:39:c0:58:42:
                    4e:9d:7f:d1:3e:c4:7d:9a:25:73:ca:46:7e:1e:93:
                    cc:ea:6d:59:c5:2f:86:de:89:39:ef:67:11:b9:45:
                    d7:ca:7a:e7:21:a2:1a:46:af:16:e0:be:54:f4:ca:
                    1d:6f:e9:bc:94:74:31:0f:77:74:06:df:c7:ef:f5:
                    75:c0:10:bb:7d:ee:33:20:e2:6c:de:b0:68:81:75:
                    2a:81:87:d3:99:43:11:e0:e5:d4:19:9f:b5:74:7e:
                    1f:e8:ff:1c:bb:8e:99:f1:f0:bb:c2:30:24:4e:af:
                    a9:ce:03:21:0c:6c:70:31:25:2a:8f:3b:0d:a0:54:
                    c7:e8:44:43:28:82:21:56:2a:22:6c:64:aa:83:f6:
                    48:dd:fe:8a:8b:a9:fe:76:e1:ac:1b:3b:e7:d3:c9:
                    c9:3c:9e:a4:d3:be:e6:60:8c:13:63:19:09:c3:b9:
                    5d:ed:c7:b0:b1:92:86:8d:01:f6:61:7a:8d:ae:9a:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:6C:94:B3:01:61:42:0D:24:69:27:AB:70:98:D8:69:AF:ED:7D
            X509v3 Authority Key Identifier:
                keyid:9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3b:c9:58:fb:c8:8e:f2:fe:96:94:ef:58:5f:10:c7:74:30:
         3f:d4:d2:8c:87:fd:c2:71:a2:4e:97:c6:80:de:ed:80:54:13:
         a4:87:d9:04:34:9f:45:25:a5:dc:7a:60:62:ad:55:91:ff:3b:
         57:37:b7:b0:72:64:85:3e:23:32:f5:42:ae:6c:3b:1a:f9:e2:
         a4:17:a3:d6:49:7b:a8:de:93:5f:a1:c7:ea:97:22:2f:44:0c:
         df:34:d0:68:f2:58:d1:8e:cf:14:36:32:35:79:fb:56:5c:8d:
         4f:63:dc:11:c6:14:5d:7a:97:25:d5:9f:c6:4e:70:9a:cc:6a:
         4f:46:3f:50:d1:13:70:ac:ad:10:64:72:5b:3f:88:e6:bd:57:
         77:ba:3b:7e:e4:7e:47:7c:01:e4:c8:23:8e:7a:d7:3d:f4:4f:
         e9:c0:ac:90:7b:03:8f:a9:d2:87:e2:35:f9:d5:12:23:ae:35:
         00:79:b6:8e:0f:ba:59:1d:fa:b3:d6:de:aa:d1:ce:23:8a:5b:
         1b:26:0c:84:9d:3b:72:28:66:03:47:3a:e2:f3:25:80:99:c3:
         7d:28:8f:5a:36:0a:f9:8d:35:1f:4e:4c:9e:cf:65:c3:93:c7:
         3f:ae:da:03:b7:95:0d:7a:53:b1:aa:1a:29:3d:a8:19:27:d3:
         d1:de:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org