Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLECLOU/-Ux3Lpkm1RoyegtOUGCYE0AKXWg.mft
File:                     -Ux3Lpkm1RoyegtOUGCYE0AKXWg.mft (raw, json)
Hash identifier:          Ghngg2HQBKK/oEAbwMm7/xSQ5cHi21P/Lhday7aJbKk=
Subject key identifier:   8F:6D:90:F3:18:49:43:C5:03:E4:A8:DC:DF:04:B2:CA:68:1D:08:7A
Authority key identifier: F9:4C:77:2E:99:26:D5:1A:32:7A:0B:4E:50:60:98:13:40:0A:5D:68
Certificate issuer:       /CN=F94C772E9926D51A327A0B4E50609813400A5D68
Certificate serial:       0173
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-Ux3Lpkm1RoyegtOUGCYE0AKXWg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLECLOU/-Ux3Lpkm1RoyegtOUGCYE0AKXWg.mft
Manifest number:          0173
Signing time:             Sat 29 Mar 2025 09:06:43 +0000
Manifest this update:     Sat 29 Mar 2025 09:06:43 +0000
Manifest next update:     Mon 31 Mar 2025 09:06:43 +0000
Files and hashes:         1: -Ux3Lpkm1RoyegtOUGCYE0AKXWg.crl (hash: UCvHMNeeabqS2KtwZmM4RybSxshgnqPC7cPF3yQooB4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94C772E9926D51A327A0B4E50609813400A5D68
        Validity
            Not Before: Mar 29 09:06:43 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8F6D90F3184943C503E4A8DCDF04B2CA681D087A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6d:c3:6c:b0:58:8f:b7:5b:7b:ad:ec:5f:37:
                    a1:a1:f5:47:92:f0:46:7a:de:1a:16:61:34:10:a6:
                    03:a7:04:67:e1:33:b7:89:ac:d1:0e:0b:14:4e:89:
                    fb:0d:85:e3:13:31:5d:b8:fe:4a:62:0d:b6:ed:76:
                    a6:80:a4:84:31:fd:2b:80:55:12:61:6f:21:3b:b7:
                    22:12:9f:4d:7d:6a:db:c1:a4:ce:fa:8a:6b:b4:f5:
                    91:f4:70:bc:54:78:7d:bc:8d:55:d9:e7:10:af:d3:
                    46:49:5e:6a:81:ba:d9:c6:29:03:e4:07:4d:7c:26:
                    6a:dd:b0:a0:f5:da:e0:7c:0e:c8:76:18:d3:4f:d7:
                    11:9d:39:09:46:1b:00:a3:0c:04:38:fc:d4:e4:e4:
                    08:df:12:6a:41:b4:c6:88:92:ae:78:6d:f8:cf:6f:
                    29:f0:3d:44:cf:38:98:b6:10:a9:03:2a:f3:41:dc:
                    fb:a7:9e:0a:43:71:92:c9:5c:20:e3:3f:6a:aa:f3:
                    df:b9:22:c0:6c:f6:11:dc:81:60:bf:39:cc:32:cb:
                    6c:5a:c9:03:fe:b0:32:07:74:b1:79:6b:e2:bc:b8:
                    4c:5c:fb:49:84:7c:57:70:c3:b2:bc:4b:22:79:5b:
                    aa:f7:51:fc:a7:2a:93:48:93:53:3a:bb:f8:d5:be:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:90:F3:18:49:43:C5:03:E4:A8:DC:DF:04:B2:CA:68:1D:08:7A
            X509v3 Authority Key Identifier:
                keyid:F9:4C:77:2E:99:26:D5:1A:32:7A:0B:4E:50:60:98:13:40:0A:5D:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLECLOU/-Ux3Lpkm1RoyegtOUGCYE0AKXWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-Ux3Lpkm1RoyegtOUGCYE0AKXWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLECLOU/-Ux3Lpkm1RoyegtOUGCYE0AKXWg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:78:66:66:68:83:1f:86:b8:1c:51:ba:7c:f1:8b:d2:9b:63:
         a9:a2:9c:97:1f:28:1b:5e:c2:46:1c:f0:ab:ec:e5:45:49:83:
         2c:4b:d1:ed:72:79:a2:35:10:79:a6:69:02:d1:14:17:6e:c9:
         6a:ec:7c:8e:cf:b8:a5:47:11:e0:98:71:76:d6:45:90:23:d7:
         b6:a5:a4:01:9c:4d:64:c0:60:e8:cf:90:e8:49:28:84:0b:a9:
         13:3b:44:8b:f6:36:b2:97:a6:db:f7:11:c2:68:e9:67:b0:28:
         0f:77:25:c8:8c:5d:b9:7b:d3:bc:f0:76:b9:4b:a7:04:eb:98:
         73:90:65:69:2c:10:f4:7b:2a:4b:1e:c9:b9:55:36:be:d3:aa:
         47:6a:87:0f:57:29:c7:b0:2b:ae:34:7c:e8:43:68:20:63:bf:
         03:14:ae:0f:97:db:7e:9a:25:cf:bb:68:1b:b4:19:69:41:6d:
         be:27:d0:ef:6e:2d:f5:b9:49:5e:c3:86:30:dc:99:ae:08:3d:
         68:b1:7f:b6:ed:f8:4c:8e:e2:8e:cc:88:d4:1c:be:f2:3c:06:
         87:05:ce:43:58:05:87:ff:f6:7a:9f:3e:b7:ac:5a:20:b5:1a:
         16:41:d9:4e:ea:d5:9c:bf:ed:13:5c:1f:b4:8a:5e:7e:19:2b:
         23:d2:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:56:11 2025 by rpki-client