Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.mft
File:                     yHaVxrSPE91Wp2spndVNjx6zadU.mft (raw, json)
Hash identifier:          yLx4TuWtNEoYiCXc+25uxoicBoRtb3K3g6M/hVQoxN0=
Subject key identifier:   A1:92:AC:9F:43:30:6C:06:BA:31:B5:02:45:48:3B:C5:14:9E:E7:F5
Authority key identifier: C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5
Certificate issuer:       /CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
Certificate serial:       0F49
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.mft
Manifest number:          0F3F
Signing time:             Wed 02 Dec 2020 23:45:29 +0000
Manifest this update:     Wed 02 Dec 2020 23:45:29 +0000
Manifest next update:     Fri 04 Dec 2020 23:45:29 +0000
Files and hashes:         1: 3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa (hash: rakLdUcEbckxMUq5OY2IB9IVMaCmqWPd6aLKqf4TLlY=)
                          2: K0uCFxNWoFgYHURkfgZfFyJfBSU.roa (hash: XvjOGeRPyurvFl2AhRGYU6VssPlPhdPMMSPLv3AzGXE=)
                          3: SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa (hash: TjfQ/ugwGGVlPp6GlmcV/2wP0528JuaDNnxw3gXurdM=)
                          4: k9xFJxRfkSqe2ID7E5Zvxq9iqOM.roa (hash: BtAINMbYcTWkrB5u2HEojETqhbWG9zk9d53RU9igtlw=)
                          5: yHaVxrSPE91Wp2spndVNjx6zadU.crl (hash: bHrkaEc4h/zznxaEdCYsKNPS4xfvhVx0KBwZuDFktUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3913 (0xf49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
        Validity
            Not Before: Dec  2 23:45:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A192AC9F43306C06BA31B50245483BC5149EE7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:78:72:41:df:ea:f6:15:a2:70:7a:4d:af:
                    ea:90:b0:7e:69:78:3c:8f:a7:72:76:1c:45:cf:ff:
                    eb:86:d5:c2:65:2e:7f:44:1e:ad:9d:2a:fb:74:d7:
                    ad:17:55:69:4a:54:98:8b:9d:f7:9d:e8:76:c5:4b:
                    58:32:fa:90:2e:ef:3f:1d:5b:9c:06:d1:81:37:8f:
                    74:69:f4:d7:8c:32:e5:19:63:48:9d:31:67:32:cb:
                    32:3d:3a:9e:90:5a:a2:d2:ed:78:59:91:84:37:13:
                    8a:4e:0c:41:c6:e0:45:52:1a:36:0c:79:93:b6:79:
                    02:df:bd:8a:b5:22:ff:d2:44:fe:b4:a3:76:02:90:
                    32:b8:e7:b8:53:0c:6b:28:06:45:06:9d:0c:a8:31:
                    d0:fe:cb:0d:27:e6:51:a1:23:db:4a:f1:21:cb:03:
                    92:ed:ea:ed:01:2f:22:f7:33:0f:81:75:a6:7c:fe:
                    36:f5:dc:6a:4d:7a:8c:f8:da:27:40:f6:e7:b2:13:
                    6e:0e:2d:05:cb:01:0d:29:31:fa:b1:be:a6:f5:f2:
                    1f:52:14:f7:25:1d:c2:4f:bd:db:26:8d:88:b1:93:
                    dd:a4:ee:b7:1d:f4:b1:bc:dd:ec:44:34:31:40:cd:
                    66:af:73:38:57:a0:9d:06:4f:ef:10:28:1b:57:9a:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:92:AC:9F:43:30:6C:06:BA:31:B5:02:45:48:3B:C5:14:9E:E7:F5
            X509v3 Authority Key Identifier:
                keyid:C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bb:63:7f:26:e6:cc:3e:b1:c8:28:76:76:e2:40:0b:ef:0d:
         5d:88:9f:f6:65:0f:04:8a:83:fb:dc:af:a9:f0:a9:5c:3c:5a:
         65:bc:98:69:9b:17:4d:61:fb:33:50:aa:aa:6c:f7:85:3c:c9:
         49:e6:d8:80:b2:c1:63:97:a3:09:37:67:e3:b0:ed:93:59:13:
         9f:e1:f2:16:1b:a2:b3:24:72:6c:a2:22:6c:43:fd:ea:34:94:
         e5:fc:bf:64:90:c1:48:4b:58:f2:e0:f4:c9:fd:4b:32:7b:3e:
         b9:65:8e:71:9f:ae:17:69:ca:47:2a:48:ef:29:e6:1c:0f:4d:
         42:af:b2:5d:fb:ec:f8:81:2a:e4:75:e7:d3:84:05:ac:3d:7d:
         70:49:58:7a:4b:da:bc:62:a5:fe:90:2d:8f:a9:5c:16:3d:f3:
         6d:e3:73:98:4c:b1:64:e8:b1:a0:9f:17:96:38:3a:98:69:b8:
         28:c9:03:a8:50:f1:7a:d0:f3:65:2b:50:1d:a5:77:88:f8:97:
         3a:67:ef:38:a8:c9:72:e9:1f:bb:0a:4b:ee:e7:41:ce:07:a6:
         81:94:39:28:31:8a:cb:57:68:37:76:a5:0e:ec:1b:63:c0:64:
         e9:38:4c:0e:8d:27:62:e6:ac:a8:9f:5a:ff:a3:b5:fc:1c:81:
         b2:40:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org