Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.mft
File:                     VE_PyyrJVPJAIqnCanfCOo6OGGg.mft (raw, json)
Hash identifier:          wSjBCRI5rTzJfVpOVYK5vFwWg5sXgF7w5pjG8dhABZo=
Subject key identifier:   65:94:39:89:6B:B0:A3:FC:DC:4C:82:8B:C3:5F:4C:F9:92:F3:BD:87
Authority key identifier: 54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68
Certificate issuer:       /CN=544FCFCB2AC954F24022A9C26A77C23A8E8E1868
Certificate serial:       0B30
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VE_PyyrJVPJAIqnCanfCOo6OGGg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.mft
Manifest number:          0B2C
Signing time:             Tue 02 Mar 2021 01:25:32 +0000
Manifest this update:     Tue 02 Mar 2021 01:25:32 +0000
Manifest next update:     Thu 04 Mar 2021 01:25:32 +0000
Files and hashes:         1: VE_PyyrJVPJAIqnCanfCOo6OGGg.crl (hash: bWWgc4eL/Mm7XjBCCDaJ8Ey1N/mn3VpcZluzE8DV23g=)
                          2: WXlKzUKwZwe7dXX4AhY5uhkTV2o.roa (hash: twktqMWDbU907F3oFxCVwBtO2RE4xGzNfS9x1A5ZkW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2864 (0xb30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544FCFCB2AC954F24022A9C26A77C23A8E8E1868
        Validity
            Not Before: Mar  2 01:25:32 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=659439896BB0A3FCDC4C828BC35F4CF992F3BD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:e3:f4:73:54:64:2a:42:4f:86:10:4a:c9:
                    7c:a0:5c:e9:81:f6:84:19:89:ba:4d:59:27:2b:fc:
                    20:b2:a7:10:1f:77:21:5f:48:7d:b4:0e:49:20:b2:
                    c5:15:4c:75:41:cd:be:d7:ab:c4:e9:2c:57:a3:1b:
                    cb:14:a5:aa:23:67:c7:1d:85:c6:22:20:b2:7a:ce:
                    98:f5:2e:e0:e6:35:85:16:bb:d6:0b:a6:50:7a:c8:
                    4f:63:df:c5:e1:ae:1b:c1:e5:38:3b:11:54:67:76:
                    0b:12:32:c0:5b:be:f7:57:4d:55:23:40:58:ba:1d:
                    10:ed:5a:58:1a:a6:8a:e3:7a:da:f7:9c:71:88:3f:
                    da:5e:35:f9:99:db:54:64:55:1a:cc:8f:e0:4d:6e:
                    bf:1c:8a:57:30:5d:de:f6:ce:4d:e7:e9:9e:52:f1:
                    bd:4e:25:db:79:0a:14:55:d2:36:7a:cb:a9:34:fc:
                    59:99:7d:84:4b:de:47:f9:30:7d:70:fc:2c:fd:ab:
                    be:51:67:01:29:b8:b9:0f:31:68:d4:6a:d5:b9:85:
                    d4:50:20:06:22:7a:56:a0:ae:23:f0:05:17:97:97:
                    ec:c8:b8:9d:db:81:a3:e0:54:1e:47:a2:b2:58:a5:
                    6b:05:20:31:46:70:ab:5f:21:40:98:48:24:81:0d:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:94:39:89:6B:B0:A3:FC:DC:4C:82:8B:C3:5F:4C:F9:92:F3:BD:87
            X509v3 Authority Key Identifier:
                keyid:54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VE_PyyrJVPJAIqnCanfCOo6OGGg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:e3:2f:c3:32:60:a4:06:c0:eb:c6:86:e6:87:8f:84:d8:8f:
         4b:da:e3:c9:63:16:04:cb:a5:d0:93:44:a8:eb:17:3b:1f:1b:
         27:aa:aa:e6:e1:14:3d:3b:97:e9:4f:c3:fc:8a:b3:72:74:53:
         b3:f9:63:c3:68:83:cd:1a:8d:b9:a6:cc:01:04:5d:a1:65:df:
         a2:83:97:a0:ec:0c:91:b3:2f:8a:bd:60:be:c9:0f:f9:24:b2:
         ca:c9:6b:4f:1e:b7:dc:63:be:6f:bb:20:8d:88:27:4e:aa:1e:
         c3:32:27:87:fb:7b:ae:7b:6e:93:db:d8:fe:11:13:ff:87:0b:
         23:2a:04:3e:ef:24:f3:18:26:14:0d:e7:d6:e9:6d:db:65:d0:
         ec:46:16:5a:6d:1b:bb:b0:21:74:73:50:07:50:d5:78:1d:09:
         0c:99:ef:9b:30:fd:36:31:bb:8a:3b:81:19:41:6b:2e:a7:50:
         bc:8e:58:ef:93:f1:d8:14:7d:5a:14:da:1a:48:aa:4d:f8:a6:
         22:c8:9d:fa:0a:69:77:fc:01:94:76:67:cb:6d:38:64:1e:08:
         ff:d5:c1:bd:c1:fc:e1:53:1e:9d:1b:7f:a6:0b:79:1b:6f:ed:
         11:6e:49:23:af:8d:a4:af:bf:2f:49:62:5e:18:cc:49:07:81:
         e3:5b:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----