Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OCTON/dMDJeRe3KGTsKyPcp5omRApwZok.mft
File:                     dMDJeRe3KGTsKyPcp5omRApwZok.mft (raw, json)
Hash identifier:          gginHNM3dIt1D0vHZ7lxzrvSIB571m6kLWJrhIm7LyM=
Subject key identifier:   B7:C7:D6:ED:CA:F7:31:11:5E:E9:DC:3F:8D:59:17:15:64:C9:5F:F4
Authority key identifier: 74:C0:C9:79:17:B7:28:64:EC:2B:23:DC:A7:9A:26:44:0A:70:66:89
Certificate issuer:       /CN=74C0C97917B72864EC2B23DCA79A26440A706689
Certificate serial:       0B8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dMDJeRe3KGTsKyPcp5omRApwZok.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/OCTON/dMDJeRe3KGTsKyPcp5omRApwZok.mft
Manifest number:          0B8C
Signing time:             Thu 03 Dec 2020 05:16:06 +0000
Manifest this update:     Thu 03 Dec 2020 05:16:06 +0000
Manifest next update:     Sat 05 Dec 2020 05:16:06 +0000
Files and hashes:         1: dMDJeRe3KGTsKyPcp5omRApwZok.crl (hash: CJapIdyiooygqBWQFqleWWNwFYHxIkbzCTsXNcR/aw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2956 (0xb8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74C0C97917B72864EC2B23DCA79A26440A706689
        Validity
            Not Before: Dec  3 05:16:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B7C7D6EDCAF731115EE9DC3F8D59171564C95FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:70:47:49:3b:13:17:48:f0:ca:f3:7a:29:
                    29:73:55:6f:ec:ca:0b:71:ab:b0:f0:db:63:8a:f8:
                    59:7d:97:aa:05:b9:bb:30:e5:d6:d0:bc:d0:22:2a:
                    72:46:1e:74:e1:33:44:7c:21:f2:c8:3f:97:35:b7:
                    1a:9b:38:fd:60:0b:2e:6f:0f:4e:51:e1:7c:bb:96:
                    06:42:e2:4c:5f:45:e4:08:b7:96:89:ba:f0:9d:2d:
                    0d:a5:e5:2f:64:b6:0f:8b:3a:17:c5:c3:00:a8:f0:
                    0c:a9:22:55:5a:55:44:30:24:e2:e5:3f:e6:0c:34:
                    51:b8:d3:f0:f6:37:c8:30:85:ac:98:07:90:ba:23:
                    d6:d0:d8:74:1b:3c:97:a1:78:7e:96:a7:aa:9b:69:
                    2d:9f:9e:73:ce:fd:e2:d5:85:cc:b0:41:aa:46:38:
                    8d:22:1b:da:3e:13:8f:22:31:f9:6d:08:d2:90:6b:
                    25:35:af:f5:38:f5:83:f6:59:2c:70:26:d0:4b:52:
                    c2:8f:88:8a:93:9f:33:0a:5f:86:df:82:0a:75:d8:
                    b1:01:46:28:11:72:d9:82:1c:26:08:38:f5:ba:33:
                    f8:31:dc:96:ac:b1:f6:30:b5:14:56:3f:e1:2e:73:
                    35:6c:4f:26:f0:80:87:2a:d2:bb:2b:ce:16:6e:df:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C7:D6:ED:CA:F7:31:11:5E:E9:DC:3F:8D:59:17:15:64:C9:5F:F4
            X509v3 Authority Key Identifier:
                keyid:74:C0:C9:79:17:B7:28:64:EC:2B:23:DC:A7:9A:26:44:0A:70:66:89

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OCTON/dMDJeRe3KGTsKyPcp5omRApwZok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dMDJeRe3KGTsKyPcp5omRApwZok.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OCTON/dMDJeRe3KGTsKyPcp5omRApwZok.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:31:56:61:33:71:17:1e:fd:d5:34:28:1d:37:6d:30:dd:
         45:d5:a7:29:00:cc:e9:0a:9f:f4:50:28:de:50:df:e1:c8:55:
         29:56:34:a2:b1:3d:a2:f0:f8:e5:ae:4b:ae:0c:8c:ff:19:1f:
         de:6f:3c:15:b4:d7:1e:a5:08:f5:fd:34:e8:42:83:1a:44:5e:
         f5:54:8d:60:21:6b:10:07:35:f3:7d:f8:4a:25:18:8f:b6:ec:
         cb:cf:54:6b:e7:42:6b:d6:74:1e:50:c2:65:43:01:43:41:2f:
         3b:72:fc:ad:fb:c7:bf:e4:5a:db:41:c6:8d:9f:bb:14:ed:fc:
         d5:01:38:ec:5c:bd:67:06:b0:fb:23:55:e7:ab:02:82:c3:37:
         4f:55:c4:9c:4d:7c:86:b6:62:ae:5e:b5:25:2d:45:b6:7f:c3:
         b8:9d:bd:1a:09:f9:6f:95:e5:cb:a1:e3:ef:43:49:56:9f:6f:
         5a:01:23:0a:fe:e8:e7:d2:74:25:73:6e:d1:f7:38:36:6e:b6:
         e4:ea:18:41:e3:20:a0:2b:ab:1d:cd:71:6f:56:73:9b:68:5e:
         86:44:f6:49:97:89:8b:10:4e:8a:41:15:fe:96:2a:30:64:9d:
         98:70:ee:a3:8c:22:49:f1:2f:42:9a:ae:f4:ce:f9:d1:aa:66:
         07:b8:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----