Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
File:                     4aiMNNJG73wqfBrF_peyYrxIF44.mft (raw, json)
Hash identifier:          9gSEterTOkVZBh0IuaIAPHU64ChzNtR05pDVh7McpYE=
Subject key identifier:   44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0EAA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
Manifest number:          0D08
Signing time:             Thu 21 Nov 2024 06:53:38 +0000
Manifest this update:     Thu 21 Nov 2024 06:53:38 +0000
Manifest next update:     Sat 23 Nov 2024 06:53:38 +0000
Files and hashes:         1: 0nTqZdMSt9ORo4r2TZMoYEehKr4.roa (hash: 3uBrD60FdXzmuB6S57dy/UHW4K+2Zx6770sTJYkK0+E=)
                          2: 0yH6gMacB1tXPfgZCoUIS7Z49vA.roa (hash: HkCYqhGR9QQmcL+c+93wG+FxcVDsJqI9gh0hQAvVgEk=)
                          3: 35XOfFmKnBwzR7fQJCaSXprmDO0.roa (hash: M4jXwBvpKWVAPjiosZBlkLjFLadtKabGRaSOTnZNwVI=)
                          4: 3juHypy3c-g41GThb-ns04LIdI4.roa (hash: odO7EHdAK0afS1isPx+P72vzB2ZXpkCJXjkekPHtrtM=)
                          5: 3tj7DrdlnZXPYsAg5DG0S-mjDN4.roa (hash: piCinX8xxuGtdBZjpIEUsS0WUduUBD+4ceEl2YGje50=)
                          6: 4HMlLYuJ-hy2pNzvofRLmXuYKQ8.roa (hash: WUdoN6yWCaDh2+P6kqKkJz7VpKzt04MxOU6OO1lFEnQ=)
                          7: 4aiMNNJG73wqfBrF_peyYrxIF44.crl (hash: pdlvUBnCHlji0ZwHLGHG32txhjRF2DNf7iMUz/y6q8o=)
                          8: 5gDIYw1XVhkzXFJmoqRSbWoUX5g.roa (hash: csvRdZbbRRkFyo07usRqylmO9whixUXBYrayKomvKJU=)
                          9: 6z9OrOvILjugeNuCY2ksmMDwZq4.roa (hash: ySSpNDMZ0NboJOA0NPBWwTLhHe+vWQ91sayH7KOUWyo=)
                          10: 7yVJjJKBChnDiq_BefncZVu3NJc.roa (hash: f7yZm8FmCAazsmVZgrdGOnKn1I9vP25Sz7rXgqR68hw=)
                          11: 8cD602ib3SdQDQ96GauEso6lY3E.roa (hash: Kk0dnbCLrpqZg9ZnVGq499DYVXpq697UscyYFgWM0Ho=)
                          12: 8s-MZc8TTa7JiE3P6D_u6WVtTb4.roa (hash: lOntXVhcF20tyQFmNWGjx/KT1a2WD/XhujukuSg25OE=)
                          13: AaPuXLIJJWysNC3MUJpWP6J14Sw.roa (hash: FrOZq0JvwaE517Dli8Vx8+Br6I8RfIY8WqM+qLGD/Gs=)
                          14: BFpXnfwWbYs0yhx71SfNhIbKByI.roa (hash: qmH/A+O585L4zlh36EUv1s2Nc+q0mF5hzBFVC9r0HTE=)
                          15: CWB7Ubc3l4Ry6Luu_mGTbyxCNs8.roa (hash: OUv6tfFdW3/HY3fSt3nLKvsmofYHDFz18DoMP6P8rvk=)
                          16: G1uzYtUteR0R9mJ42WmYo7MhfGI.roa (hash: Ug366dCfHcyVTBK5DzybLtSuxGAshGhgtU7q1PM7/WM=)
                          17: GDSsx4V3ihb0NLOXgtvSCW9FpUk.roa (hash: KG6ZwINA8yQN6tYCEgM9CpuvrU/FspDi+w7F4kdUJxA=)
                          18: GhtCwbaztntRPtk1PH8pxuKuE5Y.roa (hash: Zf60pysLnA9c02xY/Q5LOw2STCAM/gMjtPl8cLnyJ4w=)
                          19: ONXBKw_vTxjAvD7gRjte9zOpAi4.roa (hash: +afVerGtwSucvTfYLH8ChpjX+2pTJs8bPjx8NkNcmpU=)
                          20: OzNaqY_Q_m4jp7mMlgHY1fUJrto.roa (hash: SB7DjxvPqtV2/g7vZwX+XJmnREMbs6zAFKFOzhKUGzo=)
                          21: P1OMzwAkV5LP56rcX04voZxSl-U.roa (hash: D+u443XBESRAptWzg+6amQ9LyQyTxCkUctJT1OI1ILo=)
                          22: Q2-plPZn31WvWySjQjl6V0Xukuo.roa (hash: 5Q1xdtTZ1WRgrzObTfywU0QJ4uK2FdLhEDFOhTfri50=)
                          23: QGDGNW8dbIwuyCBhhYiGxEfsY9w.roa (hash: 4xSnxP7l7eAocfQrrhaDBq2duer8r8evRexI9Wqevc8=)
                          24: UtCV5o13cygopIDqNqZRBA9yQjI.roa (hash: ly0HgKxYvJjcmYhC8FV1l0RcLr4JfT6jsIZXiLHkshs=)
                          25: V2aQlBbJZGa2s2aElz-vjIvjX0Y.roa (hash: MqRw4VxkNlfVvE4wBWONuKJc4Bv+GEeY+dPi1yENXP8=)
                          26: V9wrrnjwM547ensBnkRBLbZRmos.roa (hash: bIij4wszmCHHDrH/4oH4NcUytqZQV7LpmQtAHxN8Jww=)
                          27: X_ohQUnXXg08LaBm5BNYT4G5pqg.roa (hash: aKJ6/81tx1YbOcfuIYLYeP44pCCaJyCNAK5IOG4c+8k=)
                          28: YfP8aZEQNnWiyqL4vKAc8kQyrKQ.roa (hash: LKLJjw0eq9eFTRH/2Z/mvvkIWeFx9CF8bFqPJaJv90g=)
                          29: ZK6TM1QGAc0DXccjFKa_HDEAoJU.roa (hash: bDOjF+K2zd9uOf/63rSoq6Kk3BbYimeSwEGZPbSnylE=)
                          30: ZpHGx6ucfe5-H64sWlwSwB6EQ1E.roa (hash: S6rx8Ru38JtsCc4t62iYOZZ88VJGusGJbb5m9FbM32w=)
                          31: a_myp3uGL31PUw1wlJV5sPnRpjI.roa (hash: zyXHG+/yrRGxjlc8BRmx2K7n/lRoshRowC/vbMvwfMo=)
                          32: dmlcw3CjhK8pzlpMJHcDnFG5rug.roa (hash: 3fSpiY1rj33HVrn+ocGtdzmoRLmnwWtorQyH5MAnBRg=)
                          33: f8_3M_x4l7aZqEVHPcnNdD_XvRU.roa (hash: wgY0TqzdCDlNPV0gpBNkTgKpxvmgTr6qaqPYDJ2U/1E=)
                          34: fzL5lNlEhdqV6I4td_uVsaF_dAc.roa (hash: UPWTFJKcFPDChnqf1A2Q/AH79Rj28yXQtp6z1yRHcTU=)
                          35: gRrsLplGGkc_T4-paC4sORh6htI.roa (hash: Da95YK7BrxF2T+d7jyTZEPMpBXqd5+DqCmvNckYTmWw=)
                          36: gl66Sa4CtExqU6U9CUmUm8-favU.roa (hash: mnKScoqCWKP77LQjMukvIZYpSEp2gMqQCXvW8Rg7kO4=)
                          37: iWx8W6FgEU4RY1QqPa8ONaegMOA.roa (hash: 8jp5kC0rC0Q4d3fTca8BxqQMDUR04v3mDu/D0szFB58=)
                          38: l2tDURp2k15M1LJfv_8eq8uWJVw.roa (hash: uaLr2OmcfxObPqNkpNJ74OAsCXTYYMLtlC+GNE6LAEo=)
                          39: lCTSyqDDzXHoCfC7JBrXgRVYda4.roa (hash: XfoZm9xWlFSwMKhxXY5gvtzoJbbOHJFwTvyX1GETK6s=)
                          40: m1-ylTLqUpS3OelxHUtEmYTlcmc.roa (hash: ZK5MTs7vqt/D7mHLWQdYucIlbxnXuGrvGn2hyxYq6VM=)
                          41: nFtJRlKALSh2OfaNmt8Q_Hzohw4.roa (hash: DxckC06zBFfiQRswv5X2IHSPVbRzs97iK+Ybzbmy0EI=)
                          42: rAfjhvsaULG8ClHVEKmHM5Ry-jg.roa (hash: UfofaNSax+/0Ooi6iGUonR535Kq9LiGbjHtlCjVvNVQ=)
                          43: rJYQ57AxsXjsz4lvaRCDlihsnKM.roa (hash: k7Y9e0atMiLU43iCYujm4G+QZ60nHBUHsRxsrpNkuAs=)
                          44: uksCHO7B8KlHaIjqGK4byZ_4j4U.roa (hash: TJBGdKElEQPrE3Ci7kdjHxOEK4prHhrmDAXs4AwjJuk=)
                          45: wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa (hash: yZF63z6ohbGtAwtmuzOgxyUcGIa0I4paanlHiuijYCk=)
                          46: yheAmdWWekdqGWEDjQN1Ze1T6HU.roa (hash: 2CyJ0LdVamgGw/mk+KrROmbRm480h1wc30J+qRkaSQ0=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3754 (0xeaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Nov 21 06:53:38 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=44D5A98A822C973366C197E758A744F3038278C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:b6:95:b6:4c:61:91:69:75:17:90:97:b1:
                    45:51:4c:eb:c2:b5:b7:40:78:d2:78:42:f3:1f:50:
                    89:fe:af:a3:07:52:ba:2a:a1:95:6b:05:f7:4a:34:
                    88:bf:d0:67:32:e5:fb:c5:60:85:5e:f3:32:a9:4f:
                    9a:17:c4:c0:fa:52:9c:1c:b0:c8:dd:6e:25:32:3a:
                    fa:59:28:1b:16:4c:e1:56:52:a6:d9:c2:00:39:3d:
                    a0:73:68:d6:a6:ac:1d:e5:b3:21:e7:84:61:67:f7:
                    57:ff:1e:d8:d6:88:c1:66:39:60:8a:92:cc:3c:c3:
                    ed:a8:42:28:01:ac:be:af:aa:82:54:11:e8:a9:39:
                    b3:80:33:94:18:22:ee:a6:b1:0d:8b:bf:77:eb:38:
                    e5:a5:d4:a8:79:79:e7:22:b7:d7:ca:81:03:95:05:
                    e1:b3:f3:57:81:a8:c1:bf:b0:cd:e7:62:43:2e:72:
                    6a:d0:00:95:54:1f:53:69:e2:2f:b2:6b:49:52:37:
                    86:8e:e9:a6:1f:b3:ef:a4:29:a1:0a:43:34:a4:99:
                    f1:90:32:a0:b2:a4:f7:65:0a:5e:91:70:8d:6d:ab:
                    a5:b8:38:d5:f0:5d:9a:bf:57:a5:c6:a3:85:7e:19:
                    15:f1:cc:ce:fe:72:9b:57:f3:05:5f:b3:24:bb:74:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:cf:3a:68:72:3f:ec:6f:76:0c:3c:3e:19:e0:93:e6:43:
         5a:f0:7a:cc:0c:1d:8c:16:48:d6:89:1c:72:b8:dc:08:62:77:
         2c:59:44:4e:c1:17:05:0c:58:75:ec:a6:f2:79:92:4a:dc:f2:
         2e:0e:70:bf:8e:7d:cd:40:af:1f:37:17:0a:75:06:7c:5c:47:
         9e:1a:6d:69:bc:6a:71:83:e7:0e:9f:91:fd:a7:52:e4:77:4d:
         4c:c0:5d:60:d0:d6:de:84:6b:1d:48:74:c9:3b:da:9e:f6:a6:
         99:51:13:2d:ab:ac:85:1a:2d:ae:ff:d3:e1:b9:9c:1f:12:7e:
         15:6c:21:ad:e9:10:59:4f:f6:e8:68:14:fa:ed:21:c1:29:1c:
         b3:08:32:ec:3c:d4:18:52:79:1c:9b:34:55:94:fd:d0:00:bd:
         08:cb:e4:74:90:af:40:41:ee:33:89:e9:8b:da:f5:a9:aa:73:
         c1:76:e2:18:0c:22:f8:9e:31:d1:4d:59:85:0f:1d:fe:53:bb:
         a5:9d:7b:97:05:59:70:4e:2f:1d:7d:cb:3f:ce:f1:f8:07:7e:
         b8:75:ff:85:e1:7c:92:18:c4:df:d1:86:75:5f:5a:d8:41:6e:
         e1:2d:da:f4:ee:29:da:11:67:7d:79:5c:55:1d:b0:8b:4a:02:
         d4:07:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----