Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft
File:                     TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft (raw, json)
Hash identifier:          YxtRmCQ2bkBQchUhpxmRr75UZ/0gkKtpPDH6PlGcShQ=
Subject key identifier:   D5:21:71:B0:2D:2F:22:02:93:D9:B3:11:77:FD:9F:88:42:7B:55:CA
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       124C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft
Manifest number:          121C
Signing time:             Sat 29 Mar 2025 08:34:45 +0000
Manifest this update:     Sat 29 Mar 2025 08:34:45 +0000
Manifest next update:     Mon 31 Mar 2025 08:34:45 +0000
Files and hashes:         1: B6-7b2vyA_m0Y4fJha4nJYdxyeo.roa (hash: fWyih3OXI0E6Up4wQSUSA3Numlw8RP/QBypT/u4AKEY=)
                          2: BzZYZSsmJK-lVd4SvcVD32bXg_o.roa (hash: DuueiO7O09uVPzfPZiDQiYAyQXQ5Z8WB1rvv/3cIaVM=)
                          3: NUlGKjVejfT1qS7vtvHZYNndkmk.roa (hash: 3N9yzBjKHotsLzOpj2ux5n8b13YYCtmB3VvuKh2hPTs=)
                          4: TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl (hash: Y++ed2rGX1C2tYD4J0ClipNRT0x2Mnejd9g1QAC3F2g=)
                          5: h5ZVqSf_oxIZJC40ChTaeyDVxD8.roa (hash: jYGA7KUeFJNTWWe2FkYMOGVgpo412g34yttfBfVCtxs=)
                          6: hG2neDrcv1LF4A0Khg1dAE3RoMA.roa (hash: IGi/Jv4BfTEx8U1u+dKYyQVZ7p4QCIlyaULHo14LJN4=)
                          7: iKB6FcneCu56KcBOvKyd2_It6dU.roa (hash: V2Teo5YAqQVItHeZMEGg98X1swMluqCFL7C/2a7MY4Y=)
                          8: pOPTGUR2BaA6FC4ItAdqDAzLFuw.roa (hash: PQzrkFmKKjWqBePyQZepDHLXdGGiCivdODka4nyF0SY=)
                          9: qSyUn3u0K9LQeDH1e3-q90rqSZM.roa (hash: oy+HcfAOaSTXtUN0icoFSul8Y2vZ4pjpjjU7ZwPlI3w=)
                          10: xrHONL2INmzA_DTb-Im7YYMMVEc.roa (hash: XxRqbWEa91D1J7Eejt/eIFNPUzp3FAJ4vaeKxcwCpWo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4684 (0x124c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Mar 29 08:34:45 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D52171B02D2F220293D9B31177FD9F88427B55CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:40:5f:2f:b4:77:bb:75:11:7d:4a:1c:bc:
                    51:0a:b4:78:c7:a0:b7:df:bf:af:c3:d5:72:aa:49:
                    44:0e:27:46:d1:70:b2:cc:81:b2:07:7e:58:ee:3c:
                    7a:0b:4a:aa:4f:7b:a8:e8:83:25:9d:ab:60:72:b6:
                    cb:42:66:71:3e:2d:f2:fe:f6:02:c6:02:a2:7d:89:
                    e7:33:3d:39:44:e6:78:b6:66:a4:b4:31:43:aa:de:
                    f2:2e:b9:80:be:4a:b7:4f:b9:53:12:64:f5:28:82:
                    1a:32:1a:9f:f4:92:d2:61:7d:fe:94:ef:d2:50:2a:
                    fe:73:fb:6c:3b:bf:98:52:49:b1:97:ae:a0:1b:fb:
                    07:25:14:3c:0a:e2:f6:b3:8f:95:cc:86:36:5e:bd:
                    a7:5e:48:9f:95:e5:b9:bf:d7:4e:a5:11:03:03:95:
                    72:6b:1f:88:2d:89:d7:c1:b8:5d:21:2b:5e:72:15:
                    2d:b4:80:05:37:4b:74:f0:21:4c:1b:4e:80:1d:39:
                    99:3b:82:6e:35:bc:a8:e9:b8:85:de:34:ce:e2:03:
                    b9:6d:16:fa:16:77:40:f8:59:9b:ac:e9:b1:e1:0e:
                    68:17:3c:5d:ba:81:e0:a0:73:0e:f4:8a:78:db:5e:
                    2f:04:f3:76:58:f3:41:d7:52:9d:f0:f1:7e:02:0d:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:71:B0:2D:2F:22:02:93:D9:B3:11:77:FD:9F:88:42:7B:55:CA
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a9:c9:00:92:0e:22:84:b6:16:97:58:75:a9:3b:3e:4e:6a:
         0d:f7:40:5c:b3:8d:4d:0f:df:32:14:96:58:c8:f4:1e:96:ba:
         d2:cc:ea:6f:14:1b:73:03:b0:70:d7:7a:0c:e8:e3:95:06:2f:
         4b:d0:9b:f2:3c:8b:04:ed:27:45:40:88:03:9b:79:32:dc:af:
         6e:4e:83:ca:64:45:bc:1b:40:75:f5:f0:24:c7:56:43:4f:18:
         ce:55:12:d7:e4:7d:cf:61:0f:f9:60:05:ea:2d:90:50:7f:9a:
         8e:ec:b8:6d:72:1d:51:68:66:85:c4:77:42:06:d1:e4:db:0c:
         cf:a9:f4:47:e2:87:d3:bd:05:25:65:c7:93:09:df:5a:8f:26:
         ff:a4:a3:14:79:50:55:5b:62:06:e7:1d:6a:b7:1f:e4:01:3d:
         87:c2:05:4e:99:10:f4:63:97:04:0f:d4:34:a6:dd:5c:85:30:
         e8:16:ce:3a:74:10:5b:3f:a1:12:d7:77:ae:61:1a:f7:68:ec:
         fd:ab:34:9d:57:5f:d5:e2:61:7d:76:19:72:a6:31:d4:ba:f7:
         7d:f6:0c:1c:95:1e:81:cf:90:ec:aa:5e:a8:0f:ab:90:7b:dd:
         93:79:4d:59:61:61:d9:11:8e:35:d5:05:dd:7c:b9:7c:ae:15:
         01:51:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:17 2025 by rpki-client