Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
File:                     8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft (raw, json)
Hash identifier:          Bme3Lgrowyvzxu0gm9bnsaFrzINVlUhJXB8p5jMgetc=
Subject key identifier:   7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
Authority key identifier: F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94
Certificate issuer:       /CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
Certificate serial:       0BFE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
Manifest number:          0BFE
Signing time:             Thu 21 Nov 2024 04:54:24 +0000
Manifest this update:     Thu 21 Nov 2024 04:54:24 +0000
Manifest next update:     Sat 23 Nov 2024 04:54:24 +0000
Files and hashes:         1: 8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl (hash: Q1WYQnb3z3ZHQjL0MZ5oYeNwelrFL07v1L+5pxUjva8=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3070 (0xbfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
        Validity
            Not Before: Nov 21 04:54:24 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7AF7DD841A670383BA74773BAD793872711D1ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:83:9f:7f:46:07:9e:97:a3:c4:cc:14:a4:
                    ff:7c:6a:47:ec:c0:40:ba:78:44:a2:df:54:4e:16:
                    c5:36:a7:76:5b:f9:27:f9:d2:34:c8:09:e4:8a:12:
                    f3:c9:79:a0:b6:40:85:13:a6:c8:cb:37:cf:7a:4b:
                    3c:de:49:fe:f7:7c:85:df:4f:9e:8b:0c:c5:6b:45:
                    da:be:ed:f4:27:33:3a:5a:aa:e1:f8:ea:25:f0:38:
                    34:a7:cf:42:96:80:17:0f:e7:ef:bb:fd:07:ae:97:
                    59:db:7d:f5:41:6a:7e:b5:3f:66:83:e0:2a:dd:0b:
                    58:88:08:2c:d6:9e:ec:a9:13:bc:21:b8:cf:7f:81:
                    c0:c6:21:94:bd:f6:81:56:75:b9:93:87:7e:65:ec:
                    9a:e3:bf:66:e2:26:52:a7:ce:58:5f:d7:5a:c1:0d:
                    cc:e5:f3:07:c9:b0:05:1e:13:a0:82:a4:7d:a6:61:
                    50:d2:04:75:6f:55:b1:96:0f:3c:a5:a8:ff:3a:45:
                    b2:53:87:98:45:0e:16:72:e4:fb:cd:b3:ef:8a:4d:
                    d0:42:1e:d5:33:8b:d6:91:78:8e:6f:75:a4:37:6f:
                    33:6e:73:52:79:7b:3a:7d:71:2e:23:94:04:28:69:
                    43:a8:33:75:dd:4d:f9:cb:e5:cc:3d:43:47:dd:f4:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
            X509v3 Authority Key Identifier:
                keyid:F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:44:a8:64:38:8c:a1:ab:60:80:e9:9b:54:ee:22:f8:bf:de:
         73:3f:a2:a3:a6:96:6c:3d:e0:dd:e0:a0:63:b6:42:e2:06:26:
         49:3e:b0:b0:83:6f:a9:4a:f1:53:c2:da:1f:8d:ab:39:38:a4:
         49:2a:9f:aa:3d:82:1c:ad:b6:92:48:50:82:e8:53:d3:d0:c2:
         e8:a5:22:b2:8d:e3:43:11:70:96:ba:94:92:2d:c3:db:2e:08:
         11:77:90:0f:66:91:54:4b:de:35:88:78:1f:8b:47:99:8d:f9:
         f2:bc:23:82:c6:d5:ed:b9:f4:f1:c5:b6:a2:b8:26:89:3e:31:
         d6:b3:b8:d9:60:5d:fd:3f:da:49:21:cf:c0:0f:6c:bb:e9:10:
         f4:a6:e1:a9:78:b2:7e:24:e0:dc:c5:7d:f4:f1:19:ba:4f:22:
         c7:49:89:f7:c1:ef:87:c3:51:ce:b3:c6:89:94:99:8c:d2:87:
         f8:3d:50:d6:92:27:d6:a7:20:ab:23:40:49:94:b8:ab:68:96:
         1d:66:4d:99:02:89:62:62:f4:68:57:a4:4b:3c:18:6e:52:a0:
         a5:d2:d3:c0:79:ce:22:6a:0d:1c:ab:48:18:4b:b6:90:78:b7:
         bd:c5:cf:7e:c6:49:fa:65:49:a0:d8:36:a6:34:5d:02:14:28:
         5a:4e:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org