Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SBNET/YBrw6THP90g9-26KMzFdefMrwkg.mft
File:                     YBrw6THP90g9-26KMzFdefMrwkg.mft (raw, json)
Hash identifier:          J8ENB3wHjkfaNDa0QssHva+w5iie3D1nbSGYQLMBoC0=
Subject key identifier:   8E:4F:64:91:03:51:D0:3C:AF:24:AD:AB:39:A1:5F:2E:8E:B5:28:DA
Authority key identifier: 60:1A:F0:E9:31:CF:F7:48:3D:FB:6E:8A:33:31:5D:79:F3:2B:C2:48
Certificate issuer:       /CN=601AF0E931CFF7483DFB6E8A33315D79F32BC248
Certificate serial:       122A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YBrw6THP90g9-26KMzFdefMrwkg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/YBrw6THP90g9-26KMzFdefMrwkg.mft
Manifest number:          1222
Signing time:             Sun 12 Nov 2023 07:31:24 +0000
Manifest this update:     Sun 12 Nov 2023 07:31:24 +0000
Manifest next update:     Tue 14 Nov 2023 07:31:24 +0000
Files and hashes:         1: YBrw6THP90g9-26KMzFdefMrwkg.crl (hash: DASWmcSmofRiyxdj7ax+S/gtLn4xTMeat2PBOxt4duk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4650 (0x122a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AF0E931CFF7483DFB6E8A33315D79F32BC248
        Validity
            Not Before: Nov 12 07:31:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8E4F64910351D03CAF24ADAB39A15F2E8EB528DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:e7:37:39:de:01:95:e6:d8:20:28:60:51:
                    c5:69:61:59:07:4d:29:d3:b5:0b:90:80:0c:88:25:
                    b7:0c:1b:0f:3c:07:c0:41:f3:93:01:de:f9:f3:ad:
                    50:71:41:3c:92:60:d1:ba:b6:97:50:a1:7a:c8:89:
                    a8:ec:a1:92:0a:db:62:3c:c9:86:2c:36:41:e1:54:
                    15:ee:c4:3d:1f:8b:e4:db:3d:23:48:0c:5f:da:e1:
                    3f:b8:1e:cb:ca:79:b4:5f:cc:31:f2:ce:05:29:54:
                    fe:31:4a:7c:cd:1f:79:fb:33:f9:ed:2e:b6:45:36:
                    73:05:ba:94:c1:f5:fb:e4:75:4b:e1:af:cf:ec:69:
                    a6:b3:75:c4:80:e7:39:7f:14:a7:68:db:4f:0b:6a:
                    c4:05:4b:c7:61:17:e6:ed:fd:45:d0:1a:34:eb:72:
                    b1:a6:44:17:92:60:60:18:fb:cc:33:68:09:0f:f7:
                    f3:f4:06:76:d1:1c:5a:1d:03:fa:a2:90:29:bb:d7:
                    65:df:bf:a3:2a:1f:2a:e7:90:27:a8:1a:1e:b8:c6:
                    c9:ca:8e:2b:2d:fb:b3:46:04:35:f6:96:22:bd:84:
                    42:b6:3a:b8:57:bd:77:0f:7a:4b:8a:f2:b2:9a:1a:
                    cc:be:e9:b0:e6:0b:67:af:9b:dc:34:a4:d1:df:7a:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4F:64:91:03:51:D0:3C:AF:24:AD:AB:39:A1:5F:2E:8E:B5:28:DA
            X509v3 Authority Key Identifier:
                keyid:60:1A:F0:E9:31:CF:F7:48:3D:FB:6E:8A:33:31:5D:79:F3:2B:C2:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/YBrw6THP90g9-26KMzFdefMrwkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBrw6THP90g9-26KMzFdefMrwkg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/YBrw6THP90g9-26KMzFdefMrwkg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:11:a1:70:1f:a3:f6:8a:03:b0:58:f8:1e:ae:50:56:57:3b:
         c7:32:6f:56:e8:d3:9c:2b:4f:be:ad:a2:5f:72:8d:46:b5:e2:
         77:0d:22:f1:96:3d:46:8d:c2:e6:17:e2:78:d8:9a:15:fb:05:
         da:a2:0b:a6:6a:6a:7e:f8:fb:37:4c:a7:50:75:7a:87:75:ea:
         cd:9e:76:28:4b:5e:0d:0b:32:b0:e2:46:0f:43:be:7f:11:09:
         08:83:12:18:ce:38:d8:78:18:e1:b9:d5:c3:cd:5d:ee:fe:c0:
         ee:4c:e6:49:3e:f7:7f:ba:54:4c:e5:da:5a:48:05:fa:1c:cf:
         34:e9:5a:cc:cf:c8:fa:c4:3a:5f:b5:13:75:f5:ac:ca:a7:6a:
         25:75:e2:8b:40:4a:71:9b:0b:e2:06:8c:6f:f1:85:1e:6a:c4:
         fd:31:98:eb:ff:04:3d:5f:2c:c1:a1:81:b7:73:3b:66:d6:c4:
         91:30:70:d3:dd:45:39:e9:84:cb:b8:01:7c:71:66:ba:2f:e7:
         84:83:67:26:06:5a:06:2a:82:dc:32:d4:02:d2:a8:2c:99:11:
         59:5d:dd:9e:a4:56:15:d4:05:3a:64:e2:fe:a1:55:45:0f:a8:
         a6:55:9e:14:78:74:77:30:10:19:21:03:76:fa:3e:c8:2b:b8:
         ee:3b:0b:0a
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICEiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAx
QUYwRTkzMUNGRjc0ODNERkI2RThBMzMzMTVENzlGMzJCQzI0ODAeFw0yMzExMTIw
NzMxMjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhFNEY2NDkxMDM1MUQw
M0NBRjI0QURBQjM5QTE1RjJFOEVCNTI4REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA4uc3Od4BlebYIChgUcVpYVkHTSnTtQuQgAyIJbcMGw88B8BB
85MB3vnzrVBxQTySYNG6tpdQoXrIiajsoZIK22I8yYYsNkHhVBXuxD0fi+TbPSNI
DF/a4T+4HsvKebRfzDHyzgUpVP4xSnzNH3n7M/ntLrZFNnMFupTB9fvkdUvhr8/s
aaazdcSA5zl/FKdo208LasQFS8dhF+bt/UXQGjTrcrGmRBeSYGAY+8wzaAkP9/P0
BnbRHFodA/qikCm712Xfv6MqHyrnkCeoGh64xsnKjist+7NGBDX2liK9hEK2OrhX
vXcPekuK8rKaGsy+6bDmC2evm9w0pNHfetaVAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUjk9kkQNR0DyvJK2rOaFfLo61KNowHwYDVR0jBBgwFoAUYBrw6THP90g9+26K
MzFdefMrwkgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0JORVQv
WUJydzZUSFA5MGc5LTI2S016RmRlZk1yd2tnLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ZQnJ3NlRIUDkwZzktMjZLTXpGZGVmTXJ3a2cuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQk5FVC9ZQnJ3NlRIUDkwZzktMjZLTXpG
ZGVmTXJ3a2cubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBGh
cB+j9ooDsFj4Hq5QVlc7xzJvVujTnCtPvq2iX3KNRrXidw0i8ZY9Ro3C5hfieNia
FfsF2qILpmpqfvj7N0ynUHV6h3XqzZ52KEteDQsysOJGD0O+fxEJCIMSGM442HgY
4bnVw81d7v7A7kzmST73f7pUTOXaWkgF+hzPNOlazM/I+sQ6X7UTdfWsyqdqJXXi
i0BKcZsL4gaMb/GFHmrE/TGY6/8EPV8swaGBt3M7ZtbEkTBw091FOemEy7gBfHFm
ui/nhINnJgZaBiqC3DLUAtKoLJkRWV3dnqRWFdQFOmTi/qFVRQ+oplWeFHh0dzAQ
GSEDdvo+yCu47jsLCg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org