Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
File:                     RXsQNypobj_3Nla-tc0968kyNxo.mft (raw, json)
Hash identifier:          iGkI5mZH5AUPSaZffbXlQ//eCVV5uHNv31CebKH1cu8=
Subject key identifier:   F4:AF:DC:44:CE:1F:43:D4:72:81:BB:30:6C:1F:7F:3C:E6:5F:E2:D2
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       0D7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
Manifest number:          0C94
Signing time:             Sun 02 Jun 2024 06:13:32 +0000
Manifest this update:     Sun 02 Jun 2024 06:13:32 +0000
Manifest next update:     Tue 04 Jun 2024 06:13:32 +0000
Files and hashes:         1: 5FtrFml6PjstVHcR4qQ4efAyaf0.roa (hash: MLePbgjW9/dlhtAynci6sykUHQiVpDlE3e8GqE0EdRQ=)
                          2: 6oGZMjF-oI26M38Fxb9VD-J1Za8.roa (hash: SF5mQIu7/E4hjmNaDvU/AQSmOGgUwL8iVMnuobZ3D08=)
                          3: 7dYShPK2DT-KyFnkCb6fNw6H56E.roa (hash: CUwaA2jfWI1R+5p1YV/JxsMTUIz8cCb0WNIXdxzxSjw=)
                          4: 8-yvkdyhq2tbuxRk8roVS2RfunQ.roa (hash: 6nKHRoFaI8TxqGVokwKWwv6jA8cg3//F8pRwGekbTUM=)
                          5: 8vPftNaQZXdrmw-oWBLtVDJy1vc.roa (hash: lSTquo34ii8hJmBNtFzo+CyEKTClDDpmfBQhg7tDT0s=)
                          6: AZED6SR-ECu1Ro6GJ1a1p5qm5VA.roa (hash: qIm3HLfPNt9TpER764tICWJ7e2ui3D92cd7NoyjXW3Q=)
                          7: AeekmbV9qi9qpWJ6Ij2SjUQFI2c.roa (hash: xf6N7HFmQTpU+Edik24uvFKklgnyUTUTaXXG1M8taZ4=)
                          8: Bo-L_zOX1AgazADM2Vf0oTf31lk.roa (hash: AbVdcaXbEaIC5N9M/7FDh+/GAnUYyEpbvBFIhwD2TiU=)
                          9: ENizDRk1eriI1r2VtUgGiUZB7l0.roa (hash: BjFRWYi+JPv+DWZcNVsXEJ5RvB6JPfcURkz5L9e5lWU=)
                          10: FfQ4cTFfAOnjhYw96c8DaeGjiZA.roa (hash: X1Be3Z2UhNzPKysDK23z1/nGGbUlRX4gec8fQyggl+o=)
                          11: GjTaMfZYVF0cLwcx8-iGHdv35xI.roa (hash: gD/NB9EnQ1CHAUk2hPKBK+rezbS4Qbj9qHGaqzi7Zu8=)
                          12: GsYqNsq2gVt_pC8ISLuhCyW7AUU.roa (hash: 7pLV9NylgeYiuMFvQaHC7SPsY/si8UXW1v5YBYvky3k=)
                          13: Gv57ynwl93_n8gy0HaQD9hiOKj0.roa (hash: QkH9VY0RNmnDgtclKYrdjN/woh/sZFf0HqVijoz/SrQ=)
                          14: KVSZJI5JetPJnKf9DIvafnmrXnc.roa (hash: 8Cv4NidfpoLYTCus1L9bd2SB0+V8rT8P5VOQR95GFKM=)
                          15: Q1xTSWWUIbSeSvRles1yenhrn20.roa (hash: ToXEhn34QgFnUcntMwyNtaGaJtUXcMCl5Nwwtf43ZU4=)
                          16: R3mTwf-jeEVbSf4UmycnGPnG7PE.roa (hash: qfb5G/rtycNSR/9vXjE/21PXCHvFkYaKbBz+47dhVmw=)
                          17: RXsQNypobj_3Nla-tc0968kyNxo.crl (hash: MB2TsARN2+w8FmrLKV3QbaV1TXN119EyufvXR/g92fM=)
                          18: U7VB5mZnKpgvaCNgkoQ7QBcyPxc.roa (hash: tRYyxHEwG3jzRHf2YjgYrx8Ud3MOJIKjgWeORxiT7sI=)
                          19: WXQYNKmzi0jVa7aDH3A4DFtneyw.roa (hash: j/djxvrvc9HZi/XRxJ1hY+0E8AVuOFuJztNthjwhcMA=)
                          20: Z2_fgWx68PxMFffsfKgtwM8mZKw.roa (hash: JwnG3nfxMLRjahYxS5T9ZaGNxgzHWq5cwZnhgiPsISs=)
                          21: _2jkNhtcZEjEov2XgTXnn2wo3v8.roa (hash: 7Ga0LUpoz9V8bf1xxX0u4RRUxaH92v9ZQ19dDWRn89A=)
                          22: bMDl4RoefYabAys4hJA6wTgbmpo.roa (hash: GwLZdPmzOR1jXrtBwYBHuliN2As17c1JesR8V4s/JVs=)
                          23: cK_UzdPsGznQ3gpjye1vvdzh-98.roa (hash: mRen2CSa8ePrr7aGte7rxeLSs0+yGbbelZDNyenLS4A=)
                          24: dXhsK5lE2jO-Qm1jf4WTUHv2BHs.roa (hash: SAdX8i8hoiDG5hWqYuoF9EqtVQv5OpTpzL3m8KKQyUs=)
                          25: ijifF_F4vrSJS6QJFY_ouu3NpjM.roa (hash: kIz294wLC6jBLr1FTsAHW1a3Uzbyp/SqOU1IAURJwVY=)
                          26: lClT2wqvS_du79Cr4ukkI0zbAc4.roa (hash: fWHdzIwKLNTD/voIn+/+iAIDC/x5esLYmYDO0s50Duo=)
                          27: pKYWtm2cvaR9viWlfY_dHM5asG4.roa (hash: INUKqlIEpV/h3vJhAsGQIzz/dlwEJTAdPCNoUiAu6JY=)
                          28: pfc_lhH5g_A2Wop0Dy3EHWC2hT4.roa (hash: lI4bI3Ufq/z0xUJ4EMWnYku+eLvKxytkNHZz4dEefkE=)
                          29: qbIzXggCjdQS9scq9hMt3RDGsqA.roa (hash: oWMGlKHQHwTWc/YJ2JCOj0OWSp62Kp8GOVC0W3WaPIE=)
                          30: svR58pzf2SPKaJe3zEjpzULzyG4.roa (hash: i9LFYYMikmx1JAJnX6rMlUVxoywSmGLGIEteLUxl48Q=)
                          31: vOnEZD2StL2EvIuIjNO_pCoNlLc.roa (hash: YqEnpkL4NDkb3NAGV6bwHcl5+tRDqTdRmCpgABhT1v8=)
                          32: wgvpD8YgIeddmMRsH-jd9ym7N28.roa (hash: eIJ+Kx8t6PklFvSBnVrqrfnUlj+NRRqQxxYFKy6F4DE=)
                          33: whK2yoRyEjqkJ6Lhlp5-UwtyYhs.roa (hash: P7oQFchB0QS4E/xHzbFPlzpCKJZGokFUP4llOjwCnE8=)
                          34: x4PIU4txdfD0OqwLA4543KxCaSQ.roa (hash: QKgp+vUfrOTSRehMfafYM+tOYZsSGhU5WyqMgyWTHGA=)
                          35: ylSLVbGvXBrw0Xghp-UIN39BYVY.roa (hash: OCQ/Jdnggu2vH7fbqpFDbmD763vB7unyfZIskMu4lKw=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3450 (0xd7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Jun  2 06:13:32 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F4AFDC44CE1F43D47281BB306C1F7F3CE65FE2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:24:c4:78:01:25:42:66:e7:d5:e3:1a:12:b0:
                    28:a1:50:89:96:c6:c9:77:17:36:f3:4d:67:43:7f:
                    14:cc:30:28:70:2e:da:86:85:df:1d:58:19:bd:6f:
                    ca:9b:57:b0:5c:db:4c:93:0b:2c:5b:a0:1b:25:2e:
                    e6:b5:2d:cf:5a:bf:0b:64:7e:b3:8d:24:40:98:96:
                    58:34:02:06:8a:c1:c8:e1:c9:ad:1a:c0:e4:fc:dc:
                    87:67:b3:11:dd:92:db:42:3c:97:85:f0:b4:b7:ca:
                    64:78:d2:ac:e4:dd:c6:be:b0:5b:d4:fd:7b:14:4a:
                    a0:d7:be:f2:2c:3d:fc:51:fc:bb:28:b2:18:9f:f2:
                    bb:dc:11:b8:14:35:ba:8f:78:0f:34:37:fd:46:fa:
                    e6:32:21:02:0d:2e:40:42:e5:0c:14:60:a3:06:23:
                    e2:49:45:3f:7f:8e:9e:9e:95:c8:da:2e:86:7c:4c:
                    be:15:b8:f1:64:9e:68:d9:01:19:c6:d2:eb:dd:01:
                    28:96:84:fd:63:d6:f4:33:db:76:ee:35:7e:a3:c1:
                    87:42:f1:a7:d3:41:48:38:80:a1:b1:8a:a8:36:8e:
                    61:70:f2:e1:e0:aa:77:57:3f:23:83:c7:70:6c:a9:
                    f5:f2:00:0e:b8:ce:fb:d9:04:41:7b:29:3b:18:29:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:DC:44:CE:1F:43:D4:72:81:BB:30:6C:1F:7F:3C:E6:5F:E2:D2
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:6b:ef:01:3a:59:4c:20:eb:35:16:64:bd:de:6c:c1:7f:
         80:02:4c:84:55:a4:18:35:76:a9:23:bd:eb:8c:56:09:fb:69:
         c3:2e:61:cc:ef:6b:7a:d4:3e:a4:95:da:ca:4d:68:70:24:24:
         92:b6:34:e9:be:4f:4a:8f:06:1e:ce:ee:6a:dd:47:00:3e:99:
         42:f6:08:73:b4:cc:56:ab:ec:4e:da:1e:95:06:c7:ef:e2:c8:
         96:c0:6c:d2:c7:46:55:5f:65:b9:27:4d:59:ec:e9:75:16:4d:
         90:14:ec:38:1c:bf:68:2d:ff:ab:ca:bb:b1:f2:7f:f5:c4:02:
         a6:bb:bf:db:1e:16:33:f5:d3:d1:14:ea:39:92:14:b9:34:c4:
         65:ba:0e:18:37:8e:28:ef:c6:57:30:b0:1d:48:ac:ec:36:eb:
         e1:a1:2d:be:fd:57:07:b7:71:d4:56:ed:69:79:6e:3f:32:56:
         c6:9e:b9:9d:8d:19:8d:55:f7:66:a7:63:53:f0:9b:db:f6:4d:
         1a:c0:5b:73:59:dc:b8:ac:eb:1d:2e:e7:33:29:94:03:9a:57:
         06:80:4a:15:14:df:7b:f3:4a:6b:d7:51:f2:a5:39:f3:57:f0:
         8d:bf:10:33:4b:d7:30:6e:3e:04:77:d0:a3:71:31:7e:f4:6c:
         9f:b9:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org