Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
File:                     36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json)
Hash identifier:          EZ4u9TsjG0p2IIO4w5084QvoXmKsUw1np+euzX8hS+c=
Subject key identifier:   E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       1268
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
Manifest number:          1007
Signing time:             Tue 14 May 2024 11:46:32 +0000
Manifest this update:     Tue 14 May 2024 11:46:32 +0000
Manifest next update:     Thu 16 May 2024 11:46:32 +0000
Files and hashes:         1: -_3z9YneTh9_VPXotPLwiW8Tnio.roa (hash: wt63Jl83G2N3TQXeLK9GPFOpcPPTqr87zoZl1TT7Vs4=)
                          2: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: qtHg1Wm937zHWmc9f/ADjaaGc5C2fVsnW98dw59B7eY=)
                          3: Aqo46VYZ2ya5g5iuDzZeP5cY_cU.roa (hash: OSOOs3+NLBUVRPFlg0k1PVaAcdHh09k/LlURgKB36hU=)
                          4: IfydskpK4D-mYauvBpRNEEsgVqQ.roa (hash: fogPRD0bhXJ6Un6XHYo7V9gqJss54c6rZEvL+lC1D58=)
                          5: KMHgg4R6govtme_q7NYfC-RytJI.roa (hash: kEYZMo5m88U2uMhfPoxFh1yWIv1g84jTshANowTEPFI=)
                          6: RYbibPGce7MqcrdeYg2srOSusQM.roa (hash: ///Lw+0iSBuRw1gG1JLxvEenEZlVg2oU9BRzkNYgHks=)
                          7: SEHK8gyIw14id1261JYPcPzqSko.roa (hash: m8XuEHZu4bYbuKaBFnrymsalKZL1OpJdv974yEazidU=)
                          8: UGwiUtsxMD98w7VaxyefXJw-uxw.roa (hash: 0PYqmnIdHOJ5yJYLkZ7PWOaB5gSvS5+bZudC28tKlLs=)
                          9: Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa (hash: G6LAvVVeemPfca9YNhEWfwcNZ0YMCCvdm+3msIWgQgk=)
                          10: XDA7aWo6QcCCw_Lg_qAE8rUDk18.roa (hash: QO3oJjY0poRjF5+b4oURsbEJNVscKwyOGeRAPqb3oFo=)
                          11: Y05D41Y7OLRALfjti54rQ6k1Pm8.roa (hash: F+oVL81Y8HrLrM6vtlnoNVrCjv2I1Tc3j+Lk22pm1ys=)
                          12: Ye1JRRrrcMGd0uYAhE-A9et-zAs.roa (hash: t7Y22yrovi7pEgF+pA4wnsdF5XhlcUjZ3DReGBF7/Gg=)
                          13: _yQIV9_-eRWeYvfag4gv2rH7rZQ.roa (hash: BeiB9pX6qQ0X5FdYg0kZbVdpjMpa0S9RfMrXDzgQ/5M=)
                          14: aQJuLVVz_A7ZzhH_EPn2oW2Ze5c.roa (hash: oJHkgosxQIPJvdpeT+y33M6yfRPBlaTj6AiRUee1PGY=)
                          15: dTE6wk1Hcdtace_pA_3Z_aI8d-Y.roa (hash: ySrvrw7h5TsfVUZ3ZiC3UilQFTKqJllBncHSKrx8y3g=)
                          16: f2AeDS6u6mxZ1R2vgmIw2SW29A8.roa (hash: nrz0cVZPTzHIIpe6f8XU0J7WEVu7KPftw92//y09e6o=)
                          17: fr7IJw5kzNk7Ge8Y3dk9N9o0e3k.roa (hash: 1Di2k9Gbr5SE5vjw6i7lsGhpm4jbIxh++CgQXruz92g=)
                          18: jd9G8ScyY_YgOaDZGs4jMC3_Oco.roa (hash: 6/IUnm1z2RXBBDoxUH/u87d0A7qwfIMiGYz6tFhwGB8=)
                          19: rax1yDHN29XVjocMqxj_MH9zoU0.roa (hash: kKMg+MTP+2eAVTZ7xJi3gTpjSxqmBXw/IA+BWtl5sqw=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 May 2024 07:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4712 (0x1268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: May 14 11:46:32 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9:
                    37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af:
                    53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e:
                    06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2:
                    28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46:
                    43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a:
                    65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7:
                    bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1:
                    79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f:
                    b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8:
                    c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d:
                    7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69:
                    eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b:
                    60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03:
                    56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0:
                    91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae:
                    21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:21:b6:12:38:78:62:88:6f:4a:67:f6:f6:3e:6c:ba:80:ad:
         2d:c0:f8:91:db:37:69:36:ea:8f:3a:db:30:bc:42:9a:e2:e6:
         c7:e3:32:af:f8:c2:f7:a9:7f:f3:fb:71:b8:56:e8:fe:02:d2:
         b2:d9:66:c7:1b:da:ad:29:23:8b:ca:28:68:ac:f8:37:90:ca:
         51:2d:e3:17:17:4d:ec:d5:47:59:24:69:6a:d7:cc:5f:b6:6c:
         d1:00:71:2a:59:72:19:75:b2:e1:12:44:43:6f:3a:1c:47:70:
         9a:a8:33:22:3e:bc:14:aa:a5:91:e4:3e:6f:ef:b6:dd:3f:42:
         8a:12:a3:1f:38:5a:f4:e4:79:98:1c:da:a4:a7:ef:01:0f:eb:
         14:a1:ab:32:02:c6:c4:7d:4b:65:64:51:0b:43:21:29:36:f1:
         b6:04:07:25:7f:23:35:3d:fb:62:43:49:a6:7e:ec:f8:16:35:
         23:48:a3:63:93:3e:7b:56:7b:1b:22:ab:55:ad:97:59:4e:02:
         cb:4b:c7:d1:3e:cc:ac:1c:65:4d:74:96:ac:8e:3f:27:c5:08:
         e7:db:61:77:28:2a:b0:8d:b6:4a:fa:8d:e6:30:6b:d1:17:18:
         0b:84:13:80:14:33:95:34:83:ad:11:64:27:f2:ec:4f:35:3c:
         9b:be:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:07:36 2024 by rpki-client on console-fra.rpki-client.org