Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft
File:                     Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft (raw, json)
Hash identifier:          2NBW1rCqSHIzAXilXTdkWWsKnqJ8jAECZjxt8bDDBSY=
Subject key identifier:   2B:03:D5:B2:71:46:0C:28:9E:91:60:F7:B4:B1:D8:36:0F:5F:48:C6
Authority key identifier: 62:3B:77:14:A0:38:27:FD:E7:D2:32:BD:8F:4E:01:A2:9F:B4:71:DE
Certificate issuer:       /CN=623B7714A03827FDE7D232BD8F4E01A29FB471DE
Certificate serial:       0C2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Yjt3FKA4J_3n0jK9j04Bop-0cd4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft
Manifest number:          0C26
Signing time:             Thu 02 Jan 2025 01:09:35 +0000
Manifest this update:     Thu 02 Jan 2025 01:09:35 +0000
Manifest next update:     Sat 04 Jan 2025 01:09:35 +0000
Files and hashes:         1: Yjt3FKA4J_3n0jK9j04Bop-0cd4.crl (hash: mEqiDCiCQLavog8UjSK3AMhf/RAdrGIgF1qaGwyv0qQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3115 (0xc2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623B7714A03827FDE7D232BD8F4E01A29FB471DE
        Validity
            Not Before: Jan  2 01:09:35 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=2B03D5B271460C289E9160F7B4B1D8360F5F48C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:2c:f1:d9:da:91:43:d8:35:1e:08:c0:cc:
                    d6:db:f1:0c:31:e4:d2:63:6e:c6:22:8d:57:46:50:
                    f6:5e:12:96:a6:5c:15:6f:d5:0f:3f:32:cd:3f:23:
                    30:db:37:6f:34:07:ef:c5:80:ab:bd:98:59:78:e6:
                    f0:17:58:b6:45:b1:df:c5:c2:ad:43:e5:b5:f1:a9:
                    54:fb:45:92:83:ce:b7:30:1b:d5:41:b6:cc:b7:bc:
                    2d:1f:63:0b:83:61:b4:e1:ca:7e:94:b5:04:d9:a2:
                    f4:75:7f:40:05:e3:37:5f:61:b4:3f:46:f3:1c:2c:
                    ea:cb:a7:a2:08:66:6d:1a:e2:a7:e2:25:ff:fc:88:
                    3d:56:f1:74:6a:fe:13:75:75:5f:28:79:cd:8d:f2:
                    89:79:5a:76:2d:1a:7e:d2:d1:de:09:7e:06:ef:55:
                    7c:53:54:36:42:b1:c9:5d:a7:ba:97:0e:6b:b4:7f:
                    02:e2:7d:c1:68:b6:af:cb:5a:bc:1c:5f:47:ec:a2:
                    99:9a:1a:8e:64:62:35:cc:f0:9f:9c:2d:d6:a0:1d:
                    8c:7f:f7:73:47:d6:52:09:24:fc:f4:19:59:6c:8d:
                    ed:75:81:b2:be:7e:4a:eb:96:aa:34:84:ed:b5:6b:
                    67:6c:e3:0e:cc:c7:8c:de:8f:47:bb:80:81:f0:ce:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:D5:B2:71:46:0C:28:9E:91:60:F7:B4:B1:D8:36:0F:5F:48:C6
            X509v3 Authority Key Identifier:
                keyid:62:3B:77:14:A0:38:27:FD:E7:D2:32:BD:8F:4E:01:A2:9F:B4:71:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yjt3FKA4J_3n0jK9j04Bop-0cd4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:72:97:7b:41:4b:22:ed:aa:0e:42:0a:e9:5a:01:92:83:
         4d:d6:01:ff:61:cd:55:5e:4f:2c:a5:16:b0:ea:16:56:d1:0c:
         3e:17:99:5b:81:96:ee:92:fb:50:9d:ec:ff:cc:3b:9c:65:59:
         1c:58:5e:3f:7f:ea:0e:42:d9:59:39:25:50:45:e1:e0:0e:d9:
         99:de:ba:fc:1a:72:b8:99:16:13:90:fe:30:ba:4b:e6:a8:49:
         35:f6:90:d0:94:37:02:90:10:5e:47:e4:98:5f:33:b8:c8:89:
         2d:7a:45:81:7c:df:cf:1a:22:c6:d1:06:36:84:80:68:1e:44:
         41:38:dc:1f:25:fd:ad:3b:74:64:e3:9f:95:57:8e:62:a5:9f:
         c6:c6:31:ed:91:c4:fe:8d:47:e7:49:fa:fc:ee:17:72:76:d1:
         06:7a:7f:b9:5d:90:2d:d6:a0:45:cb:d7:ba:ad:12:7d:e1:de:
         02:bf:d1:33:70:34:37:7b:15:83:b1:7b:13:a8:a2:fb:78:5b:
         0f:77:f9:e3:85:52:f9:f1:78:d4:d7:91:bc:f7:bf:25:35:c8:
         35:1b:ea:f0:52:54:33:ff:9b:55:d9:90:87:16:6e:22:3d:01:
         64:fc:17:4e:2b:16:3e:4f:d5:bc:37:1b:3d:f1:df:f0:73:d0:
         50:4a:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:07 2025 by rpki-client