Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.mft
File:                     pVqvXtxylqkxqO56YkI0XZ7GjR0.mft (raw, json)
Hash identifier:          5GKu1MuGb0HKHGM+ho+adop42jfs6xb44idjCFMkNT4=
Subject key identifier:   02:10:D9:17:DA:32:DA:92:1B:3B:AF:F7:5B:E6:13:E1:EC:9E:23:BC
Authority key identifier: A5:5A:AF:5E:DC:72:96:A9:31:A8:EE:7A:62:42:34:5D:9E:C6:8D:1D
Certificate issuer:       /CN=A55AAF5EDC7296A931A8EE7A6242345D9EC68D1D
Certificate serial:       0EA7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pVqvXtxylqkxqO56YkI0XZ7GjR0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.mft
Manifest number:          0EA7
Signing time:             Thu 03 Dec 2020 10:36:47 +0000
Manifest this update:     Thu 03 Dec 2020 10:36:47 +0000
Manifest next update:     Sat 05 Dec 2020 10:36:47 +0000
Files and hashes:         1: pVqvXtxylqkxqO56YkI0XZ7GjR0.crl (hash: 86FqFnBSuiilzccn0vHUVS7CKwYdRkwqN+sQRh2YteY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3751 (0xea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55AAF5EDC7296A931A8EE7A6242345D9EC68D1D
        Validity
            Not Before: Dec  3 10:36:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0210D917DA32DA921B3BAFF75BE613E1EC9E23BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:e7:e4:95:b4:19:27:51:75:f4:73:c2:3c:
                    66:4c:b3:c5:5e:75:e5:02:1d:25:42:50:64:c4:ee:
                    20:0e:c8:f3:c7:46:5c:ab:95:27:8c:99:d1:13:b2:
                    b9:78:3a:76:73:6d:91:a5:b3:15:bb:2e:60:7c:7e:
                    1e:21:60:b4:9d:e1:bd:19:ed:0b:ba:1a:e5:ef:9f:
                    d1:00:8c:cf:32:e4:09:ad:aa:2f:a0:87:69:02:8a:
                    71:cb:74:d6:6c:f7:e8:55:11:9d:24:df:b3:b6:0f:
                    a4:c7:94:b4:36:c0:d9:4d:c9:58:7d:97:36:95:a6:
                    4c:f6:b1:57:28:b0:55:1a:b6:d3:86:20:31:bb:2d:
                    a9:df:b6:14:58:e1:b6:16:69:1d:b9:ea:5f:58:a3:
                    77:b6:5b:22:18:b6:32:07:cd:00:03:6e:7d:ab:01:
                    2f:ff:58:5d:43:c7:a3:10:cb:26:37:b3:7c:bc:58:
                    9b:10:a7:6c:e8:75:76:4e:8a:07:bd:2e:08:cd:79:
                    9e:6d:07:3d:ee:e2:55:68:f0:54:0c:0a:a8:8e:da:
                    af:1d:81:21:8b:33:83:be:53:2f:e2:5c:59:1a:7d:
                    c6:b1:c8:0d:a4:12:2f:c9:75:75:7b:a8:ab:f4:70:
                    db:27:d9:0d:6b:66:4f:f8:ef:06:a2:24:78:aa:74:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:10:D9:17:DA:32:DA:92:1B:3B:AF:F7:5B:E6:13:E1:EC:9E:23:BC
            X509v3 Authority Key Identifier:
                keyid:A5:5A:AF:5E:DC:72:96:A9:31:A8:EE:7A:62:42:34:5D:9E:C6:8D:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pVqvXtxylqkxqO56YkI0XZ7GjR0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:59:1f:b4:00:83:fc:7a:f5:ab:c6:74:99:e5:50:9a:a7:
         3c:a2:81:c3:c0:02:b5:71:e3:4c:53:07:d4:9a:42:6e:3b:fd:
         15:b4:13:56:a8:ed:40:3a:17:c6:06:9a:3e:d7:b0:6e:63:24:
         a9:b3:84:80:b2:ad:a1:18:1d:4d:b5:b5:11:94:87:59:68:5d:
         af:fc:0e:f3:8b:a8:ca:d4:3f:ae:73:da:6c:62:cf:0f:41:12:
         5a:39:a0:c9:00:03:b7:05:51:a9:8d:54:56:2b:82:5d:f0:4b:
         e1:10:1d:a4:32:0a:e7:9d:04:ff:2a:78:88:c7:da:1b:75:24:
         8f:0a:c9:61:e5:4a:7e:ff:9f:4e:86:c9:27:e7:3d:e5:22:19:
         6e:11:f1:ad:85:d0:d4:b8:ea:f1:38:62:26:13:3b:32:17:34:
         2d:a6:3e:7f:fe:d0:26:de:f2:d2:39:16:71:69:9f:e6:89:f7:
         8e:a6:76:f7:a0:65:cc:1b:5d:ea:45:82:7d:5f:f9:31:f9:ae:
         76:03:9f:13:83:17:10:57:12:48:6d:98:9a:9b:6a:1e:9a:65:
         fd:6b:2e:8e:64:00:55:d1:c0:9b:71:bf:c3:1a:76:99:72:83:
         b4:c0:78:ea:cb:e5:77:9e:0b:20:3d:7d:98:74:bb:f4:89:a4:
         01:4c:a1:1a
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTU1
QUFGNUVEQzcyOTZBOTMxQThFRTdBNjI0MjM0NUQ5RUM2OEQxRDAeFw0yMDEyMDMx
MDM2NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAyMTBEOTE3REEzMkRB
OTIxQjNCQUZGNzVCRTYxM0UxRUM5RTIzQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlV+fklbQZJ1F19HPCPGZMs8VedeUCHSVCUGTE7iAOyPPHRlyr
lSeMmdETsrl4OnZzbZGlsxW7LmB8fh4hYLSd4b0Z7Qu6GuXvn9EAjM8y5Amtqi+g
h2kCinHLdNZs9+hVEZ0k37O2D6THlLQ2wNlNyVh9lzaVpkz2sVcosFUattOGIDG7
LanfthRY4bYWaR256l9Yo3e2WyIYtjIHzQADbn2rAS//WF1Dx6MQyyY3s3y8WJsQ
p2zodXZOige9LgjNeZ5tBz3u4lVo8FQMCqiO2q8dgSGLM4O+Uy/iXFkafcaxyA2k
Ei/JdXV7qKv0cNsn2Q1rZk/47waiJHiqdGgjAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUAhDZF9oy2pIbO6/3W+YT4eyeI7wwHwYDVR0jBBgwFoAUpVqvXtxylqkxqO56
YkI0XZ7GjR0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lOQ0VJ
RS9wVnF2WHR4eWxxa3hxTzU2WWtJMFhaN0dqUjAuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3BWcXZYdHh5bHFreHFPNTZZa0kwWFo3R2pSMC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJTkNFSUUvcFZxdlh0eHlscWt4cU81
NllrSTBYWjdHalIwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
ADltWR+0AIP8evWrxnSZ5VCapzyigcPAArVx40xTB9SaQm47/RW0E1ao7UA6F8YG
mj7XsG5jJKmzhICyraEYHU21tRGUh1loXa/8DvOLqMrUP65z2mxizw9BElo5oMkA
A7cFUamNVFYrgl3wS+EQHaQyCuedBP8qeIjH2ht1JI8KyWHlSn7/n06GySfnPeUi
GW4R8a2F0NS46vE4YiYTOzIXNC2mPn/+0Cbe8tI5FnFpn+aJ946mdvegZcwbXepF
gn1f+TH5rnYDnxODFxBXEkhtmJqbah6aZf1rLo5kAFXRwJtxv8Madplyg7TAeOrL
5XeeCyA9fZh0u/SJpAFMoRo=
-----END CERTIFICATE-----