Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGPF/Jq2V1NoEioTVQt3wfdrHmK_qsjw.mft
File:                     Jq2V1NoEioTVQt3wfdrHmK_qsjw.mft (raw, json)
Hash identifier:          nuE5FF4e/e32HbKrjkKGXlxJBfZt/7OrtipWcxGcziI=
Subject key identifier:   89:A0:B7:AB:87:B1:20:1C:CA:AD:0D:CE:C4:9F:C7:45:0D:35:87:59
Authority key identifier: 26:AD:95:D4:DA:04:8A:84:D5:42:DD:F0:7D:DA:C7:98:AF:EA:B2:3C
Certificate issuer:       /CN=26AD95D4DA048A84D542DDF07DDAC798AFEAB23C
Certificate serial:       0853
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Jq2V1NoEioTVQt3wfdrHmK_qsjw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TGPF/Jq2V1NoEioTVQt3wfdrHmK_qsjw.mft
Manifest number:          0853
Signing time:             Thu 03 Dec 2020 14:25:55 +0000
Manifest this update:     Thu 03 Dec 2020 14:25:55 +0000
Manifest next update:     Sat 05 Dec 2020 14:25:55 +0000
Files and hashes:         1: Jq2V1NoEioTVQt3wfdrHmK_qsjw.crl (hash: fE7s1xRUi9RLCIVWeKBJTYXJgDLE+4d+5TCyIF9hv5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AD95D4DA048A84D542DDF07DDAC798AFEAB23C
        Validity
            Not Before: Dec  3 14:25:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=89A0B7AB87B1201CCAAD0DCEC49FC7450D358759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:e8:b0:57:bd:b9:71:a1:a0:4a:e6:f3:07:
                    c9:52:dd:5f:61:8b:a4:3c:31:63:03:9e:d6:1f:b5:
                    2a:87:5a:c0:75:9e:e6:a1:63:2d:36:90:cd:10:89:
                    e0:48:6a:bb:56:a3:a5:2f:e3:fc:d2:be:aa:33:47:
                    f4:1c:8b:0f:86:be:fc:e8:79:fa:ba:64:48:93:1f:
                    77:bb:dc:01:46:85:5b:fc:e8:a1:dd:55:8a:52:e6:
                    70:68:91:69:6c:f1:61:a1:21:79:3f:c3:43:9d:4b:
                    92:38:5c:ab:99:e6:25:22:90:5b:7b:f6:33:ab:8f:
                    e1:78:27:62:48:de:55:18:96:58:c9:67:9e:63:59:
                    8e:aa:9a:5f:85:6c:71:40:05:22:04:83:79:5a:3d:
                    d9:30:53:1d:e1:fe:01:51:c7:99:b7:c1:ef:b9:22:
                    38:d5:de:b1:ae:2d:29:47:ec:03:09:b8:21:7d:71:
                    98:09:71:cc:35:82:c4:b3:0a:db:2d:cf:73:4a:16:
                    93:5e:0b:de:f0:89:b9:b1:7a:47:ca:c2:37:b6:3d:
                    35:af:6c:44:c3:a5:7d:3d:5b:fb:4b:40:4a:7d:df:
                    3a:7d:4d:cc:f3:32:2d:8f:ae:c8:cc:91:46:65:d7:
                    fb:50:b4:43:e3:01:f8:8c:d9:91:73:81:73:b9:c0:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A0:B7:AB:87:B1:20:1C:CA:AD:0D:CE:C4:9F:C7:45:0D:35:87:59
            X509v3 Authority Key Identifier:
                keyid:26:AD:95:D4:DA:04:8A:84:D5:42:DD:F0:7D:DA:C7:98:AF:EA:B2:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGPF/Jq2V1NoEioTVQt3wfdrHmK_qsjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Jq2V1NoEioTVQt3wfdrHmK_qsjw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGPF/Jq2V1NoEioTVQt3wfdrHmK_qsjw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:67:06:27:0d:7b:b9:ad:fe:5a:57:44:ad:c5:92:2a:f4:2a:
         31:7e:3d:d6:01:dd:81:f9:8b:61:1d:91:3c:a4:28:f3:b2:ab:
         cb:55:2c:02:cc:a2:00:bf:6a:0d:c1:72:5a:9c:4b:b0:84:69:
         b3:c3:3c:3c:71:0e:4a:48:27:98:a3:1c:47:33:92:c4:cc:76:
         0c:d4:84:88:3d:c2:75:31:2e:45:6a:6b:48:f7:26:09:d2:e6:
         b7:c8:dd:7e:6d:1a:82:40:b7:c8:f6:78:a3:93:fa:5c:1f:28:
         20:76:f6:4a:18:2b:2a:3c:de:b4:1f:78:cd:0c:f6:a8:75:ab:
         70:67:15:e3:a9:b0:31:0b:33:73:d2:69:f5:60:78:8c:81:3b:
         a1:8b:23:5a:4e:b9:5e:1e:2a:a2:2b:fd:7c:9d:d6:f9:76:22:
         75:04:97:8e:76:0f:7c:c0:2e:76:4b:ff:0d:3c:e0:61:f6:48:
         cd:01:8a:b9:7e:36:e0:93:ef:9f:e4:d0:a9:b3:7f:31:1c:88:
         e8:36:10:eb:90:e5:e0:20:67:8a:8e:0f:18:d2:00:15:5d:c6:
         82:29:ae:99:33:3a:6b:52:b0:80:50:aa:80:df:ea:79:7c:68:
         05:5f:0b:99:42:2b:0b:51:16:e0:75:91:34:df:ae:1f:b7:a2:
         33:6d:9a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org