Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
File: MSKpKSzJMBUq3lolhIwb3EBEyQI.mft (raw, json)
Hash identifier: L8KTZoubV4pIcKXbmmG2NipUP9TZhAzo3M2+ZsoE/Oo=
Subject key identifier: BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial: 049B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
Manifest number: 0483
Signing time: Sat 29 Mar 2025 09:05:05 +0000
Manifest this update: Sat 29 Mar 2025 09:05:05 +0000
Manifest next update: Mon 31 Mar 2025 09:05:05 +0000
Files and hashes: 1: 8l_rVvK9SoqOKUPUul8XDfBkYYE.roa (hash: Dp3k0D9C/ZdVBHT+I/6Sfw7eVzjnLzuMfFIX2F24nJQ=)
2: MSKpKSzJMBUq3lolhIwb3EBEyQI.crl (hash: m9uSbFlz6s+VVYCCZubUVUeOZMMkCXVET/5qJPHBlBc=)
3: iW4INAAf0Jy669KB99FBP9y3H2w.roa (hash: +JgBYKOPoxj8YhMa/lD+Ln8jK6w8ABb5Rjv87jpf+7o=)
4: pVPyuuIJIIe-Yhq7xIB4Vqelrl0.roa (hash: kb02YdBQgowu9WpB43GVAdWvphBWgRKiWmsK1DJcUTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Validity
Not Before: Mar 29 09:05:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BE084BDBE6B136B303ECD5268B4105DF9E2AD26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:77:a4:70:93:a7:42:98:02:23:a1:cf:87:
c2:31:e5:7d:8c:f9:34:2d:9f:fd:17:0f:9c:0e:b2:
d7:f9:5c:3d:4b:f6:b4:42:ad:51:84:11:14:ae:0f:
e0:4c:65:9f:cc:b8:a1:e4:ba:ea:85:ca:dc:16:2a:
f7:11:5b:b7:40:89:5b:de:82:cf:ea:db:01:18:50:
32:11:22:b5:0e:e1:2d:8e:83:4b:98:62:19:05:83:
c9:e2:3a:fc:61:8e:97:77:c1:a1:ed:56:2d:51:ba:
5f:0f:41:08:2d:65:48:c9:d3:46:90:c6:9f:47:49:
15:5a:a2:19:b9:18:f2:f1:21:e9:85:27:c9:55:15:
eb:0c:fd:46:6c:9e:08:18:9a:c0:33:46:c3:d5:d1:
c1:bf:05:55:49:9a:d8:ed:5b:47:3c:d1:f1:c9:b6:
2b:7a:03:c8:2d:14:80:df:fe:c1:e9:bd:bc:f1:92:
63:6e:20:97:16:16:26:24:2f:99:be:67:c3:e4:6c:
1f:f4:80:40:0d:0d:56:a6:1e:53:b3:a7:12:58:c2:
a2:83:06:eb:40:dd:78:96:c6:a2:1b:c4:35:68:e5:
13:36:ba:19:b0:84:a6:83:af:da:6a:e6:ea:c8:66:
0b:00:d9:eb:af:63:5f:9b:c4:c8:43:e8:cf:73:c8:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A
X509v3 Authority Key Identifier:
keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:a8:09:5a:95:e5:9f:db:c8:95:53:17:f5:26:63:d4:9b:b6:
ac:24:97:60:34:b4:dd:0b:58:20:15:5c:14:5a:ee:0b:71:ff:
ab:b3:d9:f2:05:57:00:0a:f7:4b:71:d1:85:fe:f7:c7:ff:89:
23:cd:55:ef:8e:ec:7b:87:07:a7:3b:29:48:36:86:03:87:ff:
39:56:e7:27:f9:29:2b:79:43:ab:05:d9:25:ff:f3:19:e6:79:
68:5d:66:29:1a:98:8f:dc:28:63:a1:ce:74:1f:ae:ed:b8:e5:
7c:8d:59:6e:a9:4b:4b:37:1c:d9:06:07:17:b5:da:c0:52:35:
05:d7:c2:8a:c6:2b:0a:70:17:79:fe:7d:61:a8:84:f3:34:98:
4d:c5:c6:ec:1a:a2:0c:f5:a1:cb:91:5c:8b:40:03:4a:ac:24:
7d:00:89:8e:1d:3a:97:53:3f:09:1c:8b:4d:26:fb:f6:6a:9f:
0d:b5:c3:aa:99:c3:76:1b:70:e8:cb:f2:9b:6d:6c:cb:76:6a:
60:7b:29:e2:8d:c8:63:c4:ef:4a:3a:79:f6:8c:1e:fa:c6:1e:
a2:47:ae:29:d6:84:3f:65:3a:53:59:3c:18:bc:fd:0d:08:ac:
99:e9:9d:d2:77:89:a7:23:96:06:69:96:84:47:d1:21:0d:83:
03:1c:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:37:54 2025 by rpki-client