Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SILKERA/sz9r6qSxf-N5Sp-wSzX43yHXV_Q.mft
File:                     sz9r6qSxf-N5Sp-wSzX43yHXV_Q.mft (raw, json)
Hash identifier:          VTWFnCxNaE5rcHawrfe6ZGx57VMWUY8NALN1aEjaLmo=
Subject key identifier:   52:A1:3B:4C:49:2A:6F:7D:DD:D9:D9:06:87:5F:C0:6D:FF:8D:C5:8A
Authority key identifier: B3:3F:6B:EA:A4:B1:7F:E3:79:4A:9F:B0:4B:35:F8:DF:21:D7:57:F4
Certificate issuer:       /CN=B33F6BEAA4B17FE3794A9FB04B35F8DF21D757F4
Certificate serial:       02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sz9r6qSxf-N5Sp-wSzX43yHXV_Q.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SILKERA/sz9r6qSxf-N5Sp-wSzX43yHXV_Q.mft
Manifest number:          02
Signing time:             Wed 04 Oct 2023 08:38:21 +0000
Manifest this update:     Wed 04 Oct 2023 08:38:21 +0000
Manifest next update:     Fri 06 Oct 2023 08:38:21 +0000
Files and hashes:         1: sz9r6qSxf-N5Sp-wSzX43yHXV_Q.crl (hash: i4MzPcm1BV72tZXKJeNVpSOAG6AOYOmXtnB6sYrDnrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33F6BEAA4B17FE3794A9FB04B35F8DF21D757F4
        Validity
            Not Before: Oct  4 08:38:21 2023 GMT
            Not After : Oct  3 08:32:04 2024 GMT
        Subject: CN=52A13B4C492A6F7DDDD9D906875FC06DFF8DC58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:19:e7:32:75:62:44:ae:1e:6f:87:36:90:
                    cf:ce:d2:22:f0:24:b1:6c:b7:f4:1c:af:cf:dc:2b:
                    d7:9b:7c:d0:54:f5:08:7f:bc:77:98:6e:8b:62:47:
                    54:8e:e9:e0:df:2a:89:4d:4a:9c:6b:9f:5f:c1:77:
                    f5:4a:ed:8f:a0:9b:19:48:b2:2f:e7:dc:a1:3c:85:
                    1d:ae:1e:70:b6:18:7d:33:c5:d7:eb:b4:fb:1f:36:
                    92:34:e6:4c:41:ae:b1:d2:a8:3f:f4:91:4f:4f:f2:
                    81:a9:a0:d9:62:98:43:03:f5:06:bd:c6:95:08:37:
                    80:b5:12:29:f5:11:75:99:64:54:dd:bd:2b:81:e2:
                    10:5c:01:85:df:dd:ad:cc:f8:bf:23:14:b6:28:0b:
                    2e:a9:ed:53:12:bd:5b:df:82:20:d1:d8:45:a7:1b:
                    e6:d8:44:cf:a9:b7:c0:1e:5e:cf:f9:7a:f1:dd:ea:
                    72:a3:68:40:dc:a1:90:cd:d3:8b:b8:a7:25:78:e4:
                    d3:4a:9a:39:b5:45:c1:26:cd:9e:c7:43:1b:ff:f4:
                    d8:8e:51:0e:33:58:9b:02:29:6c:63:06:6f:bb:ab:
                    e1:66:74:c4:c9:0d:6c:3a:59:dc:34:7d:15:44:0a:
                    4e:f3:ee:8f:62:fb:d5:ad:ef:4c:02:1f:34:18:06:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A1:3B:4C:49:2A:6F:7D:DD:D9:D9:06:87:5F:C0:6D:FF:8D:C5:8A
            X509v3 Authority Key Identifier:
                keyid:B3:3F:6B:EA:A4:B1:7F:E3:79:4A:9F:B0:4B:35:F8:DF:21:D7:57:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SILKERA/sz9r6qSxf-N5Sp-wSzX43yHXV_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sz9r6qSxf-N5Sp-wSzX43yHXV_Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SILKERA/sz9r6qSxf-N5Sp-wSzX43yHXV_Q.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:01:2a:94:37:8e:fa:27:b1:d2:b6:02:af:8c:f8:00:45:
         77:c3:91:9b:db:ba:b7:87:45:76:90:50:23:8a:f6:ba:3a:50:
         1f:89:6f:0d:71:8e:02:d8:8f:78:86:aa:38:1b:61:07:29:fd:
         2a:50:f3:f3:6f:6e:33:b2:e2:a9:91:73:e9:78:13:a3:e5:a1:
         1b:4e:ed:1f:b6:60:56:71:11:e1:bc:e3:e2:20:0d:18:dd:d2:
         ef:db:4c:37:3d:29:82:04:b5:6d:2d:66:f3:19:35:93:7a:73:
         a7:b1:59:9f:e2:f3:06:eb:1e:e3:19:9f:82:b9:a5:c1:8a:64:
         fa:16:8d:ec:22:96:83:82:fc:d0:58:2b:3f:3d:f6:ca:62:38:
         62:d7:6b:8d:7f:cb:2c:74:e4:5d:b9:eb:98:20:4a:c1:83:a3:
         ca:7f:9b:d1:99:57:ad:ba:9f:ba:a4:d1:40:14:a6:07:78:19:
         3e:05:3c:a1:44:c1:f5:2f:d4:c6:9b:66:30:15:b6:f9:ac:ca:
         42:05:d1:ee:66:fa:fd:d9:b3:41:db:8e:23:0d:19:22:96:65:
         ce:ee:93:83:68:a6:8f:35:f9:c1:a5:3f:d2:6d:e1:ee:f4:64:
         8a:ef:f3:a7:74:d7:dd:ec:03:ee:04:c5:9f:16:cf:77:35:53:
         b2:91:43:33
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzNG
NkJFQUE0QjE3RkUzNzk0QTlGQjA0QjM1RjhERjIxRDc1N0Y0MB4XDTIzMTAwNDA4
MzgyMVoXDTI0MTAwMzA4MzIwNFowMzExMC8GA1UEAxMoNTJBMTNCNEM0OTJBNkY3
RERERDlEOTA2ODc1RkMwNkRGRjhEQzU4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL31GecydWJErh5vhzaQz87SIvAksWy39Byvz9wr15t80FT1CH+8
d5hui2JHVI7p4N8qiU1KnGufX8F39Urtj6CbGUiyL+fcoTyFHa4ecLYYfTPF1+u0
+x82kjTmTEGusdKoP/SRT0/ygamg2WKYQwP1Br3GlQg3gLUSKfURdZlkVN29K4Hi
EFwBhd/drcz4vyMUtigLLqntUxK9W9+CINHYRacb5thEz6m3wB5ez/l68d3qcqNo
QNyhkM3Ti7inJXjk00qaObVFwSbNnsdDG//02I5RDjNYmwIpbGMGb7ur4WZ0xMkN
bDpZ3DR9FUQKTvPuj2L71a3vTAIfNBgGeicCAwEAAaOCAgkwggIFMB0GA1UdDgQW
BBRSoTtMSSpvfd3Z2QaHX8Bt/43FijAfBgNVHSMEGDAWgBSzP2vqpLF/43lKn7BL
NfjfIddX9DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUxLRVJB
L3N6OXI2cVN4Zi1ONVNwLXdTelg0M3lIWFZfUS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0Evc3o5cjZxU3hmLU41U3Atd1N6WDQzeUhYVl9RLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lMS0VSQS9zejlyNnFTeGYtTjVTcC13
U3pYNDN5SFhWX1EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu
dHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
nWMBKpQ3jvonsdK2Aq+M+ABFd8ORm9u6t4dFdpBQI4r2ujpQH4lvDXGOAtiPeIaq
OBthByn9KlDz829uM7LiqZFz6XgTo+WhG07tH7ZgVnER4bzj4iANGN3S79tMNz0p
ggS1bS1m8xk1k3pzp7FZn+LzBuse4xmfgrmlwYpk+haN7CKWg4L80FgrPz32ymI4
YtdrjX/LLHTkXbnrmCBKwYOjyn+b0ZlXrbqfuqTRQBSmB3gZPgU8oUTB9S/Uxptm
MBW2+azKQgXR7mb6/dmzQduOIw0ZIpZlzu6Tg2imjzX5waU/0m3h7vRkiu/zp3TX
3ewD7gTFnxbPdzVTspFDMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org