Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NEWAY/MJ8EMTBBTDNKgr65IG-Hi59YvXQ.mft
File:                     MJ8EMTBBTDNKgr65IG-Hi59YvXQ.mft (raw, json)
Hash identifier:          upMt6IyQkNb7kaWs2ykLJg+rcahxCmoHzR/mqCBOG3A=
Subject key identifier:   72:63:D0:06:F2:27:BC:04:07:BE:D0:8E:BE:51:B4:F9:63:5B:24:50
Authority key identifier: 30:9F:04:31:30:41:4C:33:4A:82:BE:B9:20:6F:87:8B:9F:58:BD:74
Certificate issuer:       /CN=309F043130414C334A82BEB9206F878B9F58BD74
Certificate serial:       0850
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MJ8EMTBBTDNKgr65IG-Hi59YvXQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NEWAY/MJ8EMTBBTDNKgr65IG-Hi59YvXQ.mft
Manifest number:          0850
Signing time:             Thu 03 Dec 2020 03:15:43 +0000
Manifest this update:     Thu 03 Dec 2020 03:15:43 +0000
Manifest next update:     Sat 05 Dec 2020 03:15:43 +0000
Files and hashes:         1: MJ8EMTBBTDNKgr65IG-Hi59YvXQ.crl (hash: anZokC8C7i/awCX79tStN+mMbMnP1N8ImEHbwE6KRPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F043130414C334A82BEB9206F878B9F58BD74
        Validity
            Not Before: Dec  3 03:15:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7263D006F227BC0407BED08EBE51B4F9635B2450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:c0:b9:c3:a6:e6:fa:1d:47:03:84:ca:95:
                    4f:b0:21:fd:d2:9f:71:fd:cd:41:51:2c:d8:e9:a6:
                    eb:bf:82:66:57:ce:ea:d4:44:3b:8b:be:1e:47:26:
                    c5:0d:dd:d2:89:84:e0:8e:dd:ae:e4:48:f2:28:b6:
                    81:f7:b5:5b:f5:9f:44:27:93:c4:f5:8a:98:c9:82:
                    5b:99:5f:f0:5f:a9:af:3f:35:33:26:99:8f:ab:78:
                    b7:73:a3:77:c4:b6:0a:a1:e8:0f:df:2c:61:ce:09:
                    aa:a6:bb:2b:cb:7b:c1:0f:9b:4b:46:18:cb:f2:76:
                    b9:59:04:c5:19:7f:45:99:a3:dc:0e:17:0e:47:72:
                    bd:b3:5b:1e:8f:3c:14:ad:e3:8b:ee:d3:29:2d:3b:
                    4b:a6:fc:08:f9:61:df:82:92:da:57:67:f3:ee:e7:
                    fb:59:3d:c5:71:29:29:1b:74:ac:03:c8:f3:55:a6:
                    b4:3a:c0:3d:59:63:36:f9:53:c5:a5:ae:29:e7:93:
                    db:d3:4e:b2:3a:90:6d:ff:d8:7a:3e:a4:d3:b5:68:
                    ea:4a:2b:8a:2c:dc:98:ab:0d:c4:98:63:18:bd:47:
                    a3:db:40:52:7a:56:bf:0e:21:d2:56:e4:43:6a:f2:
                    01:7b:33:ca:96:a3:ad:1b:ad:a8:2a:86:55:5c:00:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:D0:06:F2:27:BC:04:07:BE:D0:8E:BE:51:B4:F9:63:5B:24:50
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:31:30:41:4C:33:4A:82:BE:B9:20:6F:87:8B:9F:58:BD:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEWAY/MJ8EMTBBTDNKgr65IG-Hi59YvXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MJ8EMTBBTDNKgr65IG-Hi59YvXQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEWAY/MJ8EMTBBTDNKgr65IG-Hi59YvXQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cc:2e:74:2b:a3:17:37:2b:f8:ff:52:d6:f6:36:85:9f:c5:
         ef:48:13:16:25:b9:8a:76:4d:6c:a5:ff:e0:d9:aa:3a:0d:d0:
         b0:51:94:72:76:aa:cf:af:45:58:81:96:dc:24:8e:8c:4e:90:
         0c:83:0b:9b:ef:28:ee:1f:f5:0a:81:a2:f3:40:de:ca:f1:16:
         2b:8d:06:03:66:fa:16:cf:de:79:60:6c:ed:b3:65:b4:e8:c9:
         85:7a:af:6b:d2:bd:b0:17:8e:b5:aa:9f:55:af:85:be:38:56:
         8f:18:5c:04:0b:b6:e0:86:95:d8:e4:5b:97:76:b4:fd:e4:e1:
         87:c2:92:b5:26:12:b4:38:c4:12:fd:f0:b0:18:3b:c0:18:f0:
         ee:0b:01:6d:d9:82:e7:5e:f6:15:a9:6a:ed:eb:0a:d6:3b:23:
         36:90:4f:72:60:ad:ef:16:13:15:a8:7f:2e:6a:1d:bd:be:3a:
         c5:0d:bb:06:6a:ca:91:d9:de:d3:e5:c9:7d:71:25:47:d9:cb:
         47:e4:2c:f4:52:b7:de:85:5f:d3:8b:0b:bb:66:ad:35:d0:5b:
         04:7e:16:2e:d3:a7:11:0e:16:3c:d8:92:07:5d:4c:bf:21:ef:
         8e:15:4c:58:df:71:3e:e5:f9:0b:23:89:f4:92:a4:95:79:6f:
         21:98:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----