Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.mft
File:                     I9Xgs1INrEJpq0pCWyPSJcsmSog.mft (raw, json)
Hash identifier:          MUhMi8fyphj+YIAIapJRGidCGo8ZQFMRSlWoAQHZBI0=
Subject key identifier:   C5:E9:88:51:8F:3E:F0:3D:4A:BB:D9:2C:F7:AF:98:17:B0:BE:31:89
Authority key identifier: 23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88
Certificate issuer:       /CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
Certificate serial:       119E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.mft
Manifest number:          1187
Signing time:             Wed 11 Oct 2023 11:33:09 +0000
Manifest this update:     Wed 11 Oct 2023 11:33:09 +0000
Manifest next update:     Fri 13 Oct 2023 11:33:09 +0000
Files and hashes:         1: 3pQh12-pbOn7s7L1CCyVkJ0235o.roa (hash: vOTN2hNFVxioCtNvtMfLn7sM6yRciXdNyzyUhHY9318=)
                          2: I9Xgs1INrEJpq0pCWyPSJcsmSog.crl (hash: oC1oinTjsVEBhSPh4dhzPdLdv0f4YS+ndkTaTM9e470=)
                          3: PtK7rWL9yJdz4cnhuISD9XbPh2s.roa (hash: Xhs5SR8g8ycFPA72SyHlmRSzCtHoFxOx0RuYRRjvJb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4510 (0x119e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
        Validity
            Not Before: Oct 11 11:33:09 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C5E988518F3EF03D4ABBD92CF7AF9817B0BE3189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:c1:61:28:5d:73:4b:29:17:8f:76:6d:21:
                    22:a8:50:f7:ef:ad:6f:6e:48:bb:15:51:f4:29:47:
                    6b:fb:a9:a9:8d:6c:79:9a:22:d6:73:f8:fa:a7:2e:
                    da:ba:3e:93:9f:6e:b4:be:e1:f7:ee:e8:19:45:90:
                    de:81:9f:8a:69:0e:dd:15:1d:4e:07:80:61:b1:80:
                    2a:f2:61:11:d2:78:4b:2e:1d:a4:f4:b1:3b:90:a9:
                    85:5f:37:5e:25:c3:02:1a:c9:c4:99:e4:42:d2:a6:
                    36:6c:3d:fe:70:64:c0:5e:93:28:d6:c0:26:a6:61:
                    bf:70:48:e8:96:f2:79:7e:ea:9e:79:ce:ba:1e:9f:
                    cb:e8:e5:d2:99:ec:72:a8:67:a9:2a:01:85:4e:73:
                    3a:97:9c:09:6d:a0:f9:cf:f5:a3:f9:51:36:52:61:
                    67:86:1b:8f:5f:87:40:18:e8:f6:3e:e3:75:91:17:
                    94:3f:4c:a2:65:b6:64:f8:94:74:09:99:dc:bc:2e:
                    e7:87:14:93:a1:0f:66:e1:f7:28:16:58:b8:65:1f:
                    89:0b:5d:aa:0a:8a:0e:c9:21:42:73:0a:b3:f7:97:
                    5e:c4:d2:0c:dc:88:5a:54:61:70:b6:7c:c0:c0:94:
                    28:30:35:19:70:63:8f:3f:90:5c:65:f2:fd:36:7c:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:88:51:8F:3E:F0:3D:4A:BB:D9:2C:F7:AF:98:17:B0:BE:31:89
            X509v3 Authority Key Identifier:
                keyid:23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:10:f5:4f:95:fd:59:9e:2f:6d:5b:db:4d:e0:33:b2:78:ca:
         ee:6b:33:7e:45:7b:cd:a2:87:0d:1b:89:a3:08:51:ba:9f:9c:
         73:ff:36:58:68:14:89:0f:64:22:17:08:3c:2f:05:d9:a5:49:
         f5:0a:6e:8c:2a:c2:6d:cf:84:cf:e6:3e:45:09:11:d1:49:f3:
         3a:7e:2b:6d:77:16:05:10:63:14:10:65:7e:7c:fc:08:2d:12:
         84:06:82:99:12:07:f5:0c:5b:fc:3f:9a:82:7d:62:17:22:76:
         4f:f0:7c:34:21:7e:48:4b:56:c6:6c:f0:5e:40:95:01:13:12:
         a0:cc:ea:5f:b1:37:c8:4d:28:6c:e8:3e:5c:b8:a0:86:be:2e:
         f2:a9:74:a9:0e:e1:88:c1:5d:48:8d:3d:e2:17:58:cc:21:1d:
         dd:56:16:d0:f1:85:89:27:79:c3:7a:a3:3a:73:bf:1d:93:e0:
         a2:f4:d7:50:bc:32:81:ce:dc:47:9a:b0:a9:cb:d5:00:6b:85:
         56:90:f5:60:72:6e:e7:aa:67:ba:7c:f9:c4:92:34:a7:bc:ae:
         d2:f1:07:5a:46:21:48:1d:16:76:83:b5:c4:a4:a2:0e:26:63:
         ef:23:52:d4:18:b0:f3:ba:b1:f0:bf:58:33:a8:df:67:a3:69:
         14:02:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----