Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
File:                     Nf-QMGtHp94DB_DjNbTcfyfepPs.mft (raw, json)
Hash identifier:          NUzRg0314WNU0msnXgXOHZSxz0EL6TgUdwx2ptbAgJM=
Subject key identifier:   E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91
Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB
Certificate issuer:       /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
Certificate serial:       78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
Manifest number:          6F
Signing time:             Sun 02 Jun 2024 08:58:10 +0000
Manifest this update:     Sun 02 Jun 2024 08:58:10 +0000
Manifest next update:     Tue 04 Jun 2024 08:58:10 +0000
Files and hashes:         1: 5sCA5zltGy9Q4IIEs8hLptoF_yA.roa (hash: c3QzH4gnHLQBq/PgjRbMyWRWzyK/xH7oNHRjPLxXHJ4=)
                          2: 74wj6yoZ1QGLVKM9iwkhP0XPeBI.roa (hash: KHKb0AqO7ONwNHBUjYFTG97wvHzm+i5FVL/aOKo1Gjg=)
                          3: I32tMCKLTWsBeTdnspR92dT3Gd8.roa (hash: nM7qEhat2tNXzV8D/3nhyhQPr/E36osHhb3v1ZtJsgY=)
                          4: Nf-QMGtHp94DB_DjNbTcfyfepPs.crl (hash: PBS9RM5fkSBqn4yb160gG8sJBY8SBWoxqq1kpttSVNA=)
                          5: SAasLbgGJkUkYWsyYQ7gMX_ko7s.roa (hash: UllKP7AGv2kidev5LJWeF4l5hXqZHFOwAeVJg7U/xGI=)
                          6: YckWY8X5UP9nXepmNmn4MZXZNoo.roa (hash: bMPgwav1mb7z2xYeU6eu2QayLmCmKQCfMwqqGK/WlZg=)
                          7: jt7kyPGRnAFpm3e2Q7T8AK3oFcA.roa (hash: INyUsuftpjkWaYgboBl4+WFIhFPl7ep1N6P/BiWH3rk=)
                          8: mIAfrXOdUkXxt0le1Du3prhbsA0.roa (hash: W6AqZsvx6eN05A75PDrAkBO3yLJ+7zObeE3F6ZiJ+co=)
                          9: q3KXYwlZOTAo3O-cAwSI3FZ1mkc.roa (hash: afDjRnyRqA3TpZuZheEQS7kjLJ2MpZPoqxw+KcgqNek=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 08:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
        Validity
            Not Before: Jun  2 08:58:10 2024 GMT
            Not After : Dec 25 15:30:21 2024 GMT
        Subject: CN=E45532861649BCA1C67E7545CEB5F894BDFFD091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:e2:59:25:3a:65:d3:1b:58:67:35:c6:95:
                    6d:d9:b4:cf:c6:2d:2f:a9:6f:b5:c0:e1:57:79:27:
                    dc:7f:bf:58:a4:09:08:98:40:53:e2:93:cb:e8:a7:
                    a8:27:c3:a2:99:fc:94:69:37:5d:bb:21:29:27:db:
                    10:55:98:76:0e:de:ac:05:5b:12:02:61:1b:cb:7a:
                    3f:9c:e7:6d:24:03:01:56:56:ac:04:e5:f9:07:0f:
                    ce:fb:c2:e5:e2:12:ba:e4:37:24:3c:f3:44:b8:94:
                    a1:9d:c1:dd:5e:fb:93:93:60:3a:96:f0:1a:52:0e:
                    02:f3:6e:02:41:97:1f:e6:75:89:fa:81:91:fa:15:
                    2c:f3:6d:39:ff:17:d5:7d:4f:60:54:2d:92:9e:d3:
                    5f:a6:e3:a9:73:9d:7f:33:ae:1a:09:4f:8d:3b:9f:
                    96:bb:bc:b3:ff:ba:42:09:27:cf:ff:85:56:19:e3:
                    31:5b:99:6a:ca:61:0a:2e:64:94:9d:8b:a5:fa:58:
                    50:b5:46:51:d2:e7:01:3e:1b:04:fc:4b:37:ff:3e:
                    16:d3:02:e5:e6:24:e7:b1:47:b2:d1:0d:ec:50:ff:
                    13:d7:66:76:a9:fb:5b:a1:00:cc:0d:16:5a:dc:77:
                    d2:e6:d3:a3:1e:1a:8e:7a:b3:f3:69:24:fb:e0:0c:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91
            X509v3 Authority Key Identifier:
                keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a9:bd:91:ba:43:42:9f:c7:cc:8c:d6:50:2a:74:5c:c4:d3:
         8c:35:d2:74:7e:28:01:f1:44:31:84:56:fc:73:9e:66:ba:a1:
         6b:1d:49:e0:51:65:65:28:e7:31:a0:5a:a5:53:70:5b:64:a9:
         2c:32:70:0d:59:a6:f6:9f:e6:40:13:c5:16:e0:e9:90:a3:24:
         23:cb:89:4c:d2:4a:3b:0d:d0:ec:da:56:86:f8:f6:dc:e3:b1:
         88:5c:2e:2c:58:c9:7f:6f:07:5c:0f:74:7e:56:97:e1:62:1a:
         f7:33:01:e7:ef:bd:cf:b6:47:73:83:ac:a1:d9:45:47:93:bc:
         75:3c:10:3b:1b:b0:fa:16:59:a4:6d:bf:c9:9c:52:ac:e8:1a:
         09:38:d5:cd:1a:17:71:c6:7a:a2:54:81:a9:4d:be:15:b4:b9:
         a5:a8:97:5d:f3:e4:74:33:df:76:56:25:4b:50:09:11:a0:a7:
         04:98:47:4c:43:c6:8c:3c:dc:46:e8:08:db:56:e5:f7:6a:14:
         62:40:72:04:a6:2b:2d:e9:b3:07:25:57:bf:d7:2a:ba:cf:5d:
         2e:1c:ca:7f:01:84:f5:22:e6:01:bc:ad:ee:c4:81:73:0b:b8:
         2a:96:ed:ec:c1:bf:71:33:50:09:89:2c:92:83:75:31:30:7e:
         cc:06:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:21:52 2024 by rpki-client on console-ams.rpki-client.org