Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.mft
File:                     7cBFehQLLUNs5_rmfYSRz_xufz4.mft (raw, json)
Hash identifier:          eXGJS+WSLnRHmF9TMU5bg6fUlS+hYheeaWiiGuPz2Xo=
Subject key identifier:   86:F5:FC:46:E0:78:55:92:0D:D4:7A:D5:1B:9C:1E:59:AC:82:ED:4E
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Certificate issuer:       /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial:       0C05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.mft
Manifest number:          0BE8
Signing time:             Mon 14 Oct 2024 09:32:44 +0000
Manifest this update:     Mon 14 Oct 2024 09:32:44 +0000
Manifest next update:     Wed 16 Oct 2024 09:32:44 +0000
Files and hashes:         1: 7cBFehQLLUNs5_rmfYSRz_xufz4.crl (hash: klrzGR9NewbBG/JSPEtKJwvKkyHY+2mhJdrnri2cRbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
        Validity
            Not Before: Oct 14 09:32:44 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=86F5FC46E07855920DD47AD51B9C1E59AC82ED4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:3e:3e:99:bc:2b:ca:90:62:30:8c:e0:ca:
                    4d:48:99:43:ba:07:4f:96:b1:51:a1:7e:53:6e:3c:
                    00:1a:12:0a:54:c1:81:cd:24:2b:44:74:7e:b8:56:
                    8d:74:81:c2:a7:6f:e9:d7:e3:41:e3:5d:3c:99:d2:
                    38:10:41:e2:29:3d:4b:8b:a5:8f:cf:bb:8e:10:e4:
                    fd:f7:8b:a7:9a:4b:dc:98:e9:29:89:c3:34:a9:8c:
                    ae:ce:be:bf:83:c5:e3:4d:8b:3a:6f:45:43:e6:ac:
                    5e:08:ca:45:61:b7:86:d2:4d:b1:82:6e:82:9b:fd:
                    16:21:10:bf:67:f9:59:f5:13:09:d2:3f:c8:c0:1b:
                    8d:05:11:a0:31:1d:c0:38:13:40:4c:cb:7b:02:42:
                    23:b7:b8:9d:59:e1:83:63:34:60:0b:37:c5:63:66:
                    99:ad:13:4d:7a:b7:f7:f3:7e:d5:5a:13:b4:87:98:
                    5e:ff:fc:89:33:a0:7e:f6:66:4a:53:d2:ff:62:20:
                    4f:82:2d:9c:c5:9e:66:e9:9c:fe:a1:0f:67:83:c6:
                    b5:4a:06:ea:36:02:2f:a2:af:b3:85:00:9d:18:25:
                    b9:92:af:16:57:13:17:76:5a:7b:46:82:e7:bb:d9:
                    b3:d1:c9:2a:1e:6b:2c:3b:cb:d6:c4:25:68:ba:77:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F5:FC:46:E0:78:55:92:0D:D4:7A:D5:1B:9C:1E:59:AC:82:ED:4E
            X509v3 Authority Key Identifier:
                keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:42:6b:16:53:18:ac:c4:1f:00:12:54:9a:a7:f3:82:6e:
         de:e7:21:c1:5d:29:0f:2d:ca:eb:05:e8:4a:b4:3b:d3:02:d1:
         e4:9d:cf:fb:09:40:22:b2:03:d8:a5:ca:58:b8:5c:d2:da:c9:
         fb:ac:39:38:26:d6:37:ea:22:51:3e:4d:20:50:51:cc:46:7c:
         a7:42:ac:57:93:a6:7c:ee:ce:b6:ee:22:c4:07:e8:6e:db:f1:
         2d:96:c6:20:0f:c2:af:98:60:55:cb:c5:a7:9d:65:7c:ae:99:
         fa:2d:cd:66:2f:27:83:90:85:03:f5:4a:fd:f0:3a:d6:c9:21:
         1d:f9:d8:ce:e4:a0:77:17:dd:74:61:19:ed:63:68:ab:2f:3f:
         6b:a3:1a:3d:39:01:1a:cb:03:24:15:8e:bd:39:95:15:02:c9:
         fb:71:02:f0:9f:84:24:d7:9f:98:36:65:5d:84:56:ef:91:6a:
         8c:25:dd:b3:61:64:93:c3:3d:58:0a:0c:0e:5a:e4:69:97:57:
         49:82:c2:cf:3d:94:49:2d:e0:f9:43:85:d4:d2:17:93:14:dd:
         4e:9f:0f:e1:7c:bd:f6:73:36:ca:80:7f:dc:1c:35:b7:c3:93:
         da:21:9c:ce:96:f0:66:93:f9:2d:c8:8d:b4:f0:02:6c:e8:3a:
         28:25:d3:cb
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 15 05:08:28 2024 by rpki-client on console-fra.rpki-client.org