Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.mft
File:                     wU-s_UXCwCdo6CcvT7g_su2vdDk.mft (raw, json)
Hash identifier:          YbfhF0pHLpEwBZd2+BCqhTy1+qY7nLRBsMMaE7zp04U=
Subject key identifier:   55:02:EE:6C:7E:82:70:64:BF:3A:60:1C:76:B2:3D:67:C3:A7:D6:FE
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Certificate issuer:       /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial:       0F68
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.mft
Manifest number:          0F15
Signing time:             Tue 24 Sep 2024 19:51:02 +0000
Manifest this update:     Tue 24 Sep 2024 19:51:02 +0000
Manifest next update:     Thu 26 Sep 2024 19:51:02 +0000
Files and hashes:         1: wU-s_UXCwCdo6CcvT7g_su2vdDk.crl (hash: OobUykRg6pO7g5sYyflDZeZ17OGqlw9usO7UfkYfNTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3944 (0xf68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
        Validity
            Not Before: Sep 24 19:51:02 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5502EE6C7E827064BF3A601C76B23D67C3A7D6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:3f:d0:2a:1b:4d:80:af:04:a3:28:07:c0:
                    08:fb:35:ff:a4:8f:e9:16:65:7d:57:d9:af:64:c9:
                    ef:05:67:cd:2e:c4:9f:8c:41:6f:58:59:7f:79:cc:
                    34:2f:e4:c3:43:9f:46:1f:af:d9:22:66:e1:e0:38:
                    b8:3e:5d:b5:13:a9:f8:d8:7c:c9:de:5d:bd:d9:a0:
                    69:64:ca:a5:44:a5:b2:7e:00:2d:44:18:03:d3:63:
                    6e:7e:2b:24:aa:bf:d0:7f:91:87:38:81:e7:1f:5e:
                    8a:3f:48:2d:c0:d3:10:fd:e4:76:4d:b0:2d:5f:a4:
                    3d:1d:7c:15:0f:04:a8:25:9c:18:1c:7e:0c:af:ff:
                    2c:8e:db:01:bd:ab:2b:b6:ae:2c:bb:44:e7:dc:04:
                    04:40:01:4a:9d:95:79:29:56:51:51:ea:00:1d:9b:
                    2a:a3:f6:ec:5e:26:b2:9c:7d:f2:1c:f2:3c:ce:89:
                    eb:bb:1f:3f:70:aa:55:4b:52:8f:17:a5:d8:68:85:
                    9b:95:cd:43:88:d5:9d:ce:a5:b0:06:5d:66:26:61:
                    aa:1b:c6:70:a8:0b:a6:84:ee:b5:92:d7:8d:47:04:
                    ef:71:15:ec:06:ab:42:0d:a1:c9:02:71:4f:d4:19:
                    b9:4e:99:a7:72:67:ac:a5:95:b1:57:46:c6:7f:48:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:02:EE:6C:7E:82:70:64:BF:3A:60:1C:76:B2:3D:67:C3:A7:D6:FE
            X509v3 Authority Key Identifier:
                keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:f9:f0:55:ae:af:84:ec:b6:ae:a9:58:ec:32:29:24:e1:
         be:c3:28:6e:7c:98:df:a6:e0:90:b5:71:8d:ce:61:b9:0f:59:
         f2:79:e9:dc:a0:d2:20:2d:31:8d:25:ed:e9:07:cf:81:21:61:
         0a:5f:fa:da:b0:8d:8d:16:92:96:42:13:4d:55:49:fe:f1:d8:
         48:a5:d8:99:0e:d3:96:fe:a1:c0:71:79:98:f6:e8:1f:90:73:
         c9:c7:d8:66:3e:34:fa:6d:9a:bb:79:e0:6f:0f:9d:37:22:e5:
         69:bb:45:04:20:58:e5:a4:d3:9a:be:02:53:6a:b9:b4:45:ab:
         0e:1e:2d:8c:af:0c:98:1d:70:0c:b1:da:14:16:d8:a0:92:1d:
         f9:98:0a:c0:69:6f:c8:e3:34:36:93:12:45:43:eb:ad:22:72:
         9a:4c:cc:1a:c1:d1:6b:29:94:cc:9f:50:59:6c:0b:77:f0:28:
         1b:e7:7d:6b:d4:4d:91:d6:4e:e7:0c:43:49:d5:bf:37:3c:39:
         ed:91:a3:63:c6:ff:f2:cc:55:d5:a7:52:3f:1a:aa:2b:a0:f5:
         5f:90:8e:d0:db:de:38:1f:5a:35:a2:c7:4a:c8:10:ee:07:78:
         3c:e3:69:ae:33:06:ac:b4:e5:8d:e4:52:c1:eb:e4:a3:7c:53:
         40:a8:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 02:30:07 2024 by rpki-client on console-fra.rpki-client.org