Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TLG/5y39j0IkDsmjE7QXjebg1RKos_w.mft
File:                     5y39j0IkDsmjE7QXjebg1RKos_w.mft (raw, json)
Hash identifier:          Qc7O661+ezy9qO+asb/KEvifafvH6TvRUttz2O9jpBc=
Subject key identifier:   BE:47:04:CE:4B:AD:5D:1D:74:0D:FC:84:09:2C:55:97:D6:49:7D:06
Authority key identifier: E7:2D:FD:8F:42:24:0E:C9:A3:13:B4:17:8D:E6:E0:D5:12:A8:B3:FC
Certificate issuer:       /CN=E72DFD8F42240EC9A313B4178DE6E0D512A8B3FC
Certificate serial:       0D93
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5y39j0IkDsmjE7QXjebg1RKos_w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TLG/5y39j0IkDsmjE7QXjebg1RKos_w.mft
Manifest number:          0D93
Signing time:             Tue 02 Mar 2021 04:46:24 +0000
Manifest this update:     Tue 02 Mar 2021 04:46:24 +0000
Manifest next update:     Thu 04 Mar 2021 04:46:24 +0000
Files and hashes:         1: 5y39j0IkDsmjE7QXjebg1RKos_w.crl (hash: eV8bNfKEUTld8a0Zu7J6UGnZgkmpqoCwzOm3X1Kj5TI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72DFD8F42240EC9A313B4178DE6E0D512A8B3FC
        Validity
            Not Before: Mar  2 04:46:24 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE4704CE4BAD5D1D740DFC84092C5597D6497D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:e8:5d:1b:fe:72:d9:89:9b:6c:55:d6:8d:
                    3e:9d:99:43:1b:2a:0e:75:60:02:7d:8a:ab:9f:96:
                    f1:68:6c:d1:1f:aa:95:6f:2d:f6:17:f5:ec:52:68:
                    ea:97:bc:29:51:5b:13:de:6d:46:9f:3e:c6:3a:0b:
                    6e:3f:06:20:ab:c5:d9:19:bb:c7:c7:b4:b1:23:3e:
                    70:e9:4e:c6:92:75:a4:a9:94:f2:48:e4:12:b6:67:
                    72:75:8c:6c:9f:0a:eb:ed:53:5f:c1:76:79:51:53:
                    a0:c3:2d:93:a2:6f:71:a3:ab:05:ef:f1:a7:c1:42:
                    31:9b:e9:7a:ca:19:d5:9c:37:da:27:b6:ae:60:17:
                    7a:87:49:4d:4c:5b:e5:dd:4f:ed:a7:96:db:bd:1d:
                    47:81:d0:ac:f4:3c:09:23:42:ce:9d:51:ff:91:77:
                    eb:26:bb:15:3a:7c:ed:d3:4e:eb:cd:d4:80:47:d9:
                    15:15:4c:ce:a2:42:62:1d:b8:47:81:24:32:0e:ff:
                    90:3a:2a:62:30:30:e9:87:1b:b4:9a:09:d3:9c:82:
                    ad:50:a8:39:98:7f:d4:3c:84:cf:5e:e3:6e:42:29:
                    ec:09:c0:3a:3d:97:5e:74:1b:c5:16:58:5e:3a:d6:
                    48:70:fb:dd:6f:bd:99:6a:55:b6:f2:11:43:a9:8e:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:04:CE:4B:AD:5D:1D:74:0D:FC:84:09:2C:55:97:D6:49:7D:06
            X509v3 Authority Key Identifier:
                keyid:E7:2D:FD:8F:42:24:0E:C9:A3:13:B4:17:8D:E6:E0:D5:12:A8:B3:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TLG/5y39j0IkDsmjE7QXjebg1RKos_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5y39j0IkDsmjE7QXjebg1RKos_w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TLG/5y39j0IkDsmjE7QXjebg1RKos_w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:cc:6a:95:35:28:3c:ac:ce:95:30:1a:f4:55:96:8c:e1:ee:
         ee:f6:1b:4a:44:ef:0b:13:ba:2d:fd:b9:a7:a8:dc:ff:4a:dc:
         49:a0:7f:49:79:91:25:c3:92:79:aa:33:9a:bf:4c:0e:5c:b4:
         f1:a3:1f:20:72:6e:33:e5:a0:e4:45:52:2a:b6:13:56:93:00:
         9e:6e:82:2d:3e:52:8b:8a:0b:6b:be:91:59:af:17:f1:a5:b6:
         34:94:9e:90:b6:81:01:e6:25:2f:bb:f8:1c:7f:50:b7:d6:c1:
         e6:ff:26:7f:9a:f5:9e:7d:2e:9b:e7:6b:4e:f8:9a:de:53:94:
         11:d9:f7:2a:ee:bb:8a:46:c8:86:dc:1a:5f:84:fc:12:98:be:
         09:69:62:0e:93:ae:eb:fe:d0:8f:c9:2a:98:cf:88:d6:4f:f5:
         24:11:0a:93:39:87:3b:cb:2a:b2:f2:d9:4a:14:17:79:f4:96:
         2a:66:ae:24:c9:7c:85:c9:3b:89:c7:83:9a:22:45:cd:0d:24:
         a7:71:6e:bf:a3:da:cb:cf:96:56:2e:59:df:ba:cb:ed:a1:e8:
         33:4a:2f:7e:bf:df:e1:5d:56:f8:94:a2:02:6b:1a:39:08:6a:
         97:5d:41:d9:73:12:6e:97:76:57:36:82:ce:a6:0b:54:df:cb:
         70:ef:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org