Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
File:                     WBiXiy0Iml896uCvAekzX03V1Lw.mft (raw, json)
Hash identifier:          GiIwzOzdP/6ym3PQlNirhqOsjWMwvOqklCNf6CNOEQ4=
Subject key identifier:   52:15:ED:98:CD:31:BB:59:F8:44:6F:04:26:20:42:3E:FB:AD:05:FD
Authority key identifier: 58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
Certificate issuer:       /CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Certificate serial:       1262
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
Manifest number:          125C
Signing time:             Thu 21 Nov 2024 06:53:34 +0000
Manifest this update:     Thu 21 Nov 2024 06:53:34 +0000
Manifest next update:     Sat 23 Nov 2024 06:53:34 +0000
Files and hashes:         1: Rttgi0m_ViNZHPdLmFW2sCE4FoE.roa (hash: tccf1mdTGFufHuuFG3XIqI2JO0JA76FCLfxa5ZJI8Yg=)
                          2: WBiXiy0Iml896uCvAekzX03V1Lw.crl (hash: r7oiLQO3UnTNasLVHjGKuu9dTbbxA7KxnxTxnoUzgZo=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4706 (0x1262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
        Validity
            Not Before: Nov 21 06:53:34 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5215ED98CD31BB59F8446F042620423EFBAD05FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:37:90:1f:00:39:a2:2f:90:c5:8d:74:3f:
                    44:df:2e:7b:c5:22:93:67:84:77:1f:8d:87:74:d7:
                    d9:d1:f9:8e:4d:b5:a5:0d:47:4e:51:ea:6e:15:77:
                    f8:8f:da:43:fa:9a:5d:48:9f:54:42:b3:da:b2:8e:
                    d7:c1:69:c9:f3:c4:10:55:0d:fa:4c:2a:e7:8c:6a:
                    6c:5a:81:be:dd:22:e8:a1:9c:d1:71:ac:68:cd:2b:
                    db:ce:fe:c7:fc:b3:45:ee:10:82:eb:54:b1:0c:f5:
                    7f:1f:fb:64:09:2f:a8:2f:82:22:78:c8:74:bd:d7:
                    87:05:b4:ef:57:6a:d3:d1:bc:dc:c7:21:8f:0b:b1:
                    ea:9e:6e:d0:b6:36:52:f2:7a:64:c0:51:f6:7c:53:
                    70:2d:5b:b5:d1:2d:ee:44:94:f0:f0:b5:7b:09:8e:
                    c9:d9:1c:36:6b:d3:a5:ad:41:95:14:1b:05:d9:c8:
                    ed:25:bd:46:85:00:49:99:ec:09:38:97:04:2b:d2:
                    64:39:b4:17:1c:e6:13:0a:a9:fd:d4:57:c1:3f:ec:
                    7c:ce:2d:76:d1:0c:fc:16:38:bf:df:ae:d8:28:fc:
                    ad:86:4a:c5:7f:4d:9d:c4:df:37:45:1c:8e:c1:94:
                    92:85:85:ed:37:94:0a:27:03:cb:9a:58:a1:1c:b0:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:ED:98:CD:31:BB:59:F8:44:6F:04:26:20:42:3E:FB:AD:05:FD
            X509v3 Authority Key Identifier:
                keyid:58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:91:98:21:da:61:ec:76:db:5f:35:9b:6d:c6:ce:24:4b:9b:
         56:a8:ea:a1:3c:77:dd:b1:40:45:b6:b5:9c:a0:77:91:93:7a:
         84:a6:93:e4:f6:80:da:1c:5f:84:17:86:dd:6b:fe:0f:99:be:
         77:f2:68:ba:26:39:85:a0:c5:d8:f4:7f:96:ef:04:eb:dd:fb:
         90:de:43:43:8b:c1:65:d3:f1:3d:43:5a:49:ac:97:ef:3f:19:
         b4:d1:76:ca:0d:34:93:34:fb:0a:c7:5f:b0:14:52:27:f1:01:
         b7:b9:36:d3:8f:c0:51:1c:3a:5a:2d:4d:0e:ac:f3:f3:b5:5c:
         19:0d:51:8a:c6:f8:61:13:d4:27:00:ba:91:4a:e9:d1:50:94:
         e6:f7:6b:eb:d5:7e:68:2a:b6:9d:99:ef:12:67:49:fb:1e:83:
         0d:38:31:19:1b:ad:d0:7e:f9:e7:93:53:30:ba:72:52:d7:a5:
         a9:ff:fb:e4:cf:12:5f:c7:b3:94:aa:f0:1e:fd:b7:08:dc:5a:
         b3:ab:00:ce:da:d0:00:11:cb:4e:27:36:b5:28:b6:36:d9:ca:
         52:6d:00:68:17:79:4e:c3:d0:31:30:18:ff:d3:d3:85:31:f2:
         23:53:48:af:ec:85:a5:46:df:b2:38:16:68:bc:18:41:37:b3:
         49:c8:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org