Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
File:                     WBiXiy0Iml896uCvAekzX03V1Lw.mft (raw, json)
Hash identifier:          x4SJo2LiQkss3IcuzN8ZbbEpXR8iuHt+tPw947xY/kk=
Subject key identifier:   52:15:ED:98:CD:31:BB:59:F8:44:6F:04:26:20:42:3E:FB:AD:05:FD
Authority key identifier: 58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
Certificate issuer:       /CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Certificate serial:       11EB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
Manifest number:          11E7
Signing time:             Sun 02 Jun 2024 03:43:07 +0000
Manifest this update:     Sun 02 Jun 2024 03:43:07 +0000
Manifest next update:     Tue 04 Jun 2024 03:43:07 +0000
Files and hashes:         1: 446dg9gGKmMiShpqiVfRAdenXNk.roa (hash: aO80Cveq/9ysneuYDGm7Kw0F1c0UXgRlNH8I9VQwgPQ=)
                          2: WBiXiy0Iml896uCvAekzX03V1Lw.crl (hash: 4oAur/YcCxkpW7kJACpjPZD8TR2eBVyen/eXUCWXSZE=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4587 (0x11eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
        Validity
            Not Before: Jun  2 03:43:07 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5215ED98CD31BB59F8446F042620423EFBAD05FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:37:90:1f:00:39:a2:2f:90:c5:8d:74:3f:
                    44:df:2e:7b:c5:22:93:67:84:77:1f:8d:87:74:d7:
                    d9:d1:f9:8e:4d:b5:a5:0d:47:4e:51:ea:6e:15:77:
                    f8:8f:da:43:fa:9a:5d:48:9f:54:42:b3:da:b2:8e:
                    d7:c1:69:c9:f3:c4:10:55:0d:fa:4c:2a:e7:8c:6a:
                    6c:5a:81:be:dd:22:e8:a1:9c:d1:71:ac:68:cd:2b:
                    db:ce:fe:c7:fc:b3:45:ee:10:82:eb:54:b1:0c:f5:
                    7f:1f:fb:64:09:2f:a8:2f:82:22:78:c8:74:bd:d7:
                    87:05:b4:ef:57:6a:d3:d1:bc:dc:c7:21:8f:0b:b1:
                    ea:9e:6e:d0:b6:36:52:f2:7a:64:c0:51:f6:7c:53:
                    70:2d:5b:b5:d1:2d:ee:44:94:f0:f0:b5:7b:09:8e:
                    c9:d9:1c:36:6b:d3:a5:ad:41:95:14:1b:05:d9:c8:
                    ed:25:bd:46:85:00:49:99:ec:09:38:97:04:2b:d2:
                    64:39:b4:17:1c:e6:13:0a:a9:fd:d4:57:c1:3f:ec:
                    7c:ce:2d:76:d1:0c:fc:16:38:bf:df:ae:d8:28:fc:
                    ad:86:4a:c5:7f:4d:9d:c4:df:37:45:1c:8e:c1:94:
                    92:85:85:ed:37:94:0a:27:03:cb:9a:58:a1:1c:b0:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:ED:98:CD:31:BB:59:F8:44:6F:04:26:20:42:3E:FB:AD:05:FD
            X509v3 Authority Key Identifier:
                keyid:58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ae:46:25:f8:c7:fa:41:bf:8f:82:1a:cc:2d:a9:c0:1a:8d:
         a4:eb:6c:c9:32:22:f1:3f:aa:81:c6:86:37:cb:4c:08:e1:be:
         a5:7c:b9:1d:d7:ce:5e:0e:e5:ee:1c:34:be:ff:1c:21:8e:b1:
         bd:c0:66:b8:bc:2a:8c:90:ca:d8:df:37:1f:01:e1:db:36:64:
         85:eb:a6:f2:3c:56:4f:d2:c2:60:99:4a:ab:8b:bb:ce:f9:56:
         2f:b2:24:af:f3:cf:03:5e:10:9f:e6:fd:92:42:2a:86:4e:ad:
         39:c6:45:d1:6c:53:47:8a:df:2d:4f:f7:76:b5:77:fc:79:8c:
         fb:d4:1c:fa:df:6d:85:44:93:da:99:4f:81:55:ee:a9:3b:04:
         35:d1:74:46:62:4a:3b:1c:c9:2e:3b:2c:e7:07:a7:c6:45:ff:
         eb:ad:50:04:0a:dd:b3:a7:b9:b3:98:69:f0:e2:38:18:4b:63:
         a5:42:da:bb:e5:a5:58:94:d6:d1:87:0c:fc:42:27:48:97:48:
         d1:21:f6:02:18:ce:69:d7:01:b4:19:37:0d:35:a0:c8:24:77:
         57:31:45:8f:c4:ae:12:d3:55:2f:2c:82:da:fe:dc:44:66:f6:
         e4:87:dd:be:2b:f8:3f:07:37:79:5a:4d:bd:fd:09:61:58:83:
         45:b0:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org