Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.mft
File:                     n-Jq5eDaVuxJ7JmGuciU1biYoVM.mft (raw, json)
Hash identifier:          ocYc1EBmlB/tXjgZ+FjARcs+3RqSVtQA9Ji5OpgRmz4=
Subject key identifier:   7D:FF:B9:BE:22:F9:4D:64:53:87:BF:62:95:CF:EE:61:52:34:21:93
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Certificate issuer:       /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial:       08A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.mft
Manifest number:          0890
Signing time:             Sun 22 Nov 2020 14:08:21 +0000
Manifest this update:     Sun 22 Nov 2020 14:08:21 +0000
Manifest next update:     Tue 24 Nov 2020 14:08:21 +0000
Files and hashes:         1: n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl (hash: dOtUSjEXshxqIIpbvyXRz0RNOGS67AwhigpMUTjLQiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
        Validity
            Not Before: Nov 22 14:08:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7DFFB9BE22F94D645387BF6295CFEE6152342193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:ef:eb:cb:17:fe:5c:cc:8d:3f:05:c2:7a:
                    aa:ef:3e:82:9e:b7:60:83:2f:5b:1b:18:5a:49:0a:
                    d2:2c:60:cf:55:58:18:8d:72:de:c2:44:7e:33:60:
                    10:54:f7:14:ed:24:70:d3:ed:ff:67:9b:1f:06:7f:
                    07:c3:47:96:0a:86:fd:c1:9c:50:4b:09:77:41:13:
                    90:13:11:c8:3e:2f:c5:44:02:b1:78:70:74:fe:a3:
                    07:61:56:80:5b:3a:7c:89:34:d7:0e:42:1e:76:2a:
                    b9:30:1a:ed:c1:51:74:71:78:05:2a:15:65:56:3d:
                    05:6d:3f:57:f8:be:55:83:9f:47:dc:e7:72:51:1c:
                    59:03:d7:87:2d:cb:47:08:81:f6:73:2c:35:70:5c:
                    19:f2:79:d6:03:58:1b:a7:a0:a4:1d:02:2e:2c:11:
                    5f:f0:7d:bd:57:f4:82:7a:7a:09:be:22:9b:3f:46:
                    fb:15:5f:54:d8:4c:df:89:99:cf:c8:0f:3f:ee:75:
                    cc:a3:38:88:37:de:68:be:22:62:b9:b5:a6:0a:c2:
                    ec:df:47:b5:2a:56:ed:49:8e:2e:83:1d:7c:bd:be:
                    da:27:ed:a0:07:0e:74:42:44:75:d1:12:a2:00:37:
                    34:94:18:ab:fe:37:7c:ae:bc:99:ce:04:24:fe:af:
                    fa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:B9:BE:22:F9:4D:64:53:87:BF:62:95:CF:EE:61:52:34:21:93
            X509v3 Authority Key Identifier:
                keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c8:34:6c:9f:be:d1:47:df:df:ca:82:95:be:70:8a:75:8b:
         04:45:c8:ad:65:9f:11:d8:c0:33:17:56:62:92:d6:95:22:ee:
         f2:75:43:3f:a6:c5:6d:e4:1f:62:1a:7f:fb:e1:58:10:df:a9:
         98:83:85:b8:0e:2e:f7:3f:2f:1c:51:94:8e:ac:37:73:cc:84:
         4f:f3:45:87:93:bb:2d:f4:81:18:28:7d:79:ba:f6:87:e8:84:
         dd:23:03:b2:a8:da:6d:2d:ae:63:52:fb:c1:61:42:a7:d4:d0:
         39:99:1f:8e:19:b0:f3:56:1e:5d:c3:0d:79:c3:98:c2:4a:7b:
         40:5d:be:34:78:30:d7:c7:2c:a7:4e:92:38:d4:6e:5d:6e:0f:
         53:3a:4b:64:9b:a5:e3:a5:ec:0e:c0:f6:8e:0f:66:da:f9:b5:
         3b:38:84:34:19:6f:e1:db:35:6f:47:3a:89:00:16:e8:ee:2a:
         ff:57:01:d6:b3:4f:7a:d9:f9:a8:bb:74:76:ca:a1:39:64:f0:
         d0:52:0d:59:a3:1f:1b:32:8e:7b:71:2a:19:fe:9e:57:e7:55:
         c1:f8:94:72:6b:9f:97:6d:51:d2:97:64:fc:38:55:6f:f2:da:
         6a:52:c1:2e:b6:46:79:65:c0:18:65:d3:87:ff:5a:cd:32:82:
         52:1f:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----