Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/RSRakK7HUmertXm7_50HRHxwvpA.mft
File:                     RSRakK7HUmertXm7_50HRHxwvpA.mft (raw, json)
Hash identifier:          WZTwDpe+lHwNBSJH19GpbxCkwDTSvEk705IuRliF8wI=
Subject key identifier:   97:AF:8D:75:36:37:B9:C8:AE:05:04:4D:D6:09:95:54:29:35:52:76
Authority key identifier: 45:24:5A:90:AE:C7:52:67:AB:B5:79:BB:FF:9D:07:44:7C:70:BE:90
Certificate issuer:       /CN=45245A90AEC75267ABB579BBFF9D07447C70BE90
Certificate serial:       0B2F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RSRakK7HUmertXm7_50HRHxwvpA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/RSRakK7HUmertXm7_50HRHxwvpA.mft
Manifest number:          0B2F
Signing time:             Wed 04 Oct 2023 04:01:35 +0000
Manifest this update:     Wed 04 Oct 2023 04:01:35 +0000
Manifest next update:     Fri 06 Oct 2023 04:01:35 +0000
Files and hashes:         1: RSRakK7HUmertXm7_50HRHxwvpA.crl (hash: 5XE45Ks89Yj7qIeUpuGLFvsYMs8dcMKa+yYWvoUd1uY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45245A90AEC75267ABB579BBFF9D07447C70BE90
        Validity
            Not Before: Oct  4 04:01:35 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=97AF8D753637B9C8AE05044DD609955429355276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:29:76:43:75:bc:c7:72:76:11:11:5f:e5:
                    bc:bc:43:f5:39:d3:7e:29:8e:1e:a7:be:e4:ad:cb:
                    8a:44:67:8f:1b:ed:26:12:dc:bc:aa:3e:4e:ae:43:
                    9f:09:d0:fa:a0:8a:e0:d6:7a:66:31:ba:00:30:09:
                    d0:ef:86:ef:b1:a7:68:bf:9f:9d:00:f5:93:82:bf:
                    53:68:73:45:6d:5e:f0:91:5c:80:ce:6a:08:4d:3f:
                    6f:7c:40:08:4d:46:e9:27:72:65:1e:47:71:91:b4:
                    7e:68:f1:6f:15:86:ec:f4:aa:03:d7:6d:5b:ae:b0:
                    fe:e6:f9:e2:ef:ad:ef:3f:94:1c:30:22:39:9a:da:
                    12:fb:5e:a0:2e:c2:77:92:a6:74:d7:6c:d1:0f:7b:
                    ed:e7:ee:83:b3:96:db:20:d0:64:97:da:ac:43:61:
                    8b:a2:e9:c0:2f:b3:63:1a:57:d6:c5:ec:86:7e:16:
                    62:e5:03:ba:28:f9:f8:23:69:fb:2d:17:fd:cc:b4:
                    a6:19:69:fe:88:e1:d5:73:3b:80:52:c4:2b:27:f0:
                    52:10:8b:68:2b:fd:3b:33:c3:1b:26:5a:7c:f2:74:
                    ae:14:58:0a:f2:5d:84:8a:a3:17:7a:e9:89:1d:54:
                    d4:65:9e:48:97:df:58:f8:58:04:53:8f:84:52:de:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AF:8D:75:36:37:B9:C8:AE:05:04:4D:D6:09:95:54:29:35:52:76
            X509v3 Authority Key Identifier:
                keyid:45:24:5A:90:AE:C7:52:67:AB:B5:79:BB:FF:9D:07:44:7C:70:BE:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/RSRakK7HUmertXm7_50HRHxwvpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RSRakK7HUmertXm7_50HRHxwvpA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/RSRakK7HUmertXm7_50HRHxwvpA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:25:49:ac:85:0c:c4:20:1b:d6:1d:c9:07:5f:85:e3:04:d6:
         32:e5:4d:53:a4:f9:b1:8c:45:1f:05:f7:4e:db:a5:27:a9:d5:
         38:8c:29:91:72:6a:1b:75:8b:ab:de:78:18:0d:f3:8a:b0:92:
         06:e7:a3:69:9f:b9:40:9d:98:08:b1:68:8d:7d:70:1d:eb:1b:
         8b:4f:02:b4:09:12:9e:fc:bf:1e:f1:75:1e:d2:bc:20:ba:08:
         ab:85:ca:5c:6e:13:fe:93:a4:93:44:62:ba:d0:ff:1c:f3:0e:
         b8:47:bf:9e:55:c2:7d:a2:29:57:a1:24:80:12:80:7d:da:c1:
         91:98:b9:63:3b:25:7e:26:8c:5a:eb:fe:cb:32:11:62:c0:a3:
         cc:09:10:b0:9d:f5:51:b6:6e:62:58:50:24:25:3e:89:93:38:
         58:6d:e5:9d:52:af:7c:a7:f8:5e:d9:00:2d:52:93:4b:ed:02:
         84:97:a3:a7:69:35:d5:aa:e4:8d:a5:98:fb:9e:e0:70:d1:d9:
         38:d9:31:40:1a:b6:d8:d2:ca:46:47:f3:2e:55:d2:49:d2:26:
         64:09:bc:5d:ce:06:2c:3e:c4:78:8e:5b:81:2c:11:f2:20:16:
         ad:f5:cd:40:73:6c:21:d2:72:05:7a:1f:7e:bb:0d:81:ed:83:
         ed:8a:81:d3
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDUy
NDVBOTBBRUM3NTI2N0FCQjU3OUJCRkY5RDA3NDQ3QzcwQkU5MDAeFw0yMzEwMDQw
NDAxMzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk3QUY4RDc1MzYzN0I5
QzhBRTA1MDQ0REQ2MDk5NTU0MjkzNTUyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnxil2Q3W8x3J2ERFf5by8Q/U5034pjh6nvuSty4pEZ48b7SYS
3LyqPk6uQ58J0PqgiuDWemYxugAwCdDvhu+xp2i/n50A9ZOCv1Noc0VtXvCRXIDO
aghNP298QAhNRukncmUeR3GRtH5o8W8Vhuz0qgPXbVuusP7m+eLvre8/lBwwIjma
2hL7XqAuwneSpnTXbNEPe+3n7oOzltsg0GSX2qxDYYui6cAvs2MaV9bF7IZ+FmLl
A7oo+fgjafstF/3MtKYZaf6I4dVzO4BSxCsn8FIQi2gr/TszwxsmWnzydK4UWAry
XYSKoxd66YkdVNRlnkiX31j4WARTj4RS3m+TAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUl6+NdTY3uciuBQRN1gmVVCk1UnYwHwYDVR0jBBgwFoAURSRakK7HUmertXm7
/50HRHxwvpAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL
RVJBL1JTUmFrSzdIVW1lcnRYbTdfNTBIUkh4d3ZwQS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvUlNSYWtLN0hVbWVydFhtN181MEhSSHh3dnBBLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL1JTUmFrSzdIVW1l
cnRYbTdfNTBIUkh4d3ZwQS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBGJUmshQzEIBvWHckHX4XjBNYy5U1TpPmxjEUfBfdO26UnqdU4jCmRcmob
dYur3ngYDfOKsJIG56Npn7lAnZgIsWiNfXAd6xuLTwK0CRKe/L8e8XUe0rwgugir
hcpcbhP+k6STRGK60P8c8w64R7+eVcJ9oilXoSSAEoB92sGRmLljOyV+Joxa6/7L
MhFiwKPMCRCwnfVRtm5iWFAkJT6JkzhYbeWdUq98p/he2QAtUpNL7QKEl6OnaTXV
quSNpZj7nuBw0dk42TFAGrbY0spGR/MuVdJJ0iZkCbxdzgYsPsR4jluBLBHyIBat
9c1Ac2wh0nIFeh9+uw2B7YPtioHT
Generated at Wed Oct 4 09:12:11 2023 by rpki-client on console-fra.rpki-client.org