Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
File:                     _37NtiAv_Cw033vNcaHAiIU4L7c.mft (raw, json)
Hash identifier:          1Syp+2XbMxRF2yXzTl2mY1B+Hmv9K0a9sQD8Fevmd1M=
Subject key identifier:   67:7B:AD:17:1A:92:B8:41:8B:D6:B2:B5:9D:65:52:18:F2:CF:1E:7D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0D0C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
Manifest number:          0C44
Signing time:             Thu 25 Apr 2024 15:56:26 +0000
Manifest this update:     Thu 25 Apr 2024 15:56:26 +0000
Manifest next update:     Sat 27 Apr 2024 15:56:26 +0000
Files and hashes:         1: 5ijo_Fz9RSaNs0u4Y80NJOrIeVE.roa (hash: 3Pbei0HfC2lQX8eqP5+U/fZSX7Oj3gdEu4ecYRw09KM=)
                          2: 85COH28gD5kt4kbgdAJqVZf-jgM.roa (hash: B8NnxUpEYWcuA9oJhzwFkzP1pYtWDcH6b0qBVrCSFhA=)
                          3: 8gc5rnvre74BB6GExXvq57qHWFQ.roa (hash: x0M3WNjFTguMhqbVhQ0j/FqdY3fjLWQy/4cqxKXa/po=)
                          4: 9PD5QcqYCje1qRIHftLeZ6F4Xu8.roa (hash: VdG0cBkkNi2Hj7o6Db6j1M8pcSU8YGx8lhxMPtdNbk4=)
                          5: ACr7bZS7k18KsD-f4NRPYjynUD4.roa (hash: 3Ff/fSTfTm3j7ifGFgAY2PbV+J4CWbEbxuexcDntMKI=)
                          6: C06lI1JtthNxjX5kgkpQOjgUnWI.roa (hash: 6RuPQkSyABgqHK1JhPZGwcm7ZL9r+VmslJYBb6Jc4Us=)
                          7: GqN2x0iCkUXBExFcNQ_ZTrDqfpg.roa (hash: 6GTRgsFt4oRZB48h5wRGe8k0fJ0ohmHcEEVYrlQNypA=)
                          8: Q_4K7rEceyKFtdoGXSqSawSzbeo.roa (hash: OcwfnWJATb+o3w9yEK54h8qt4pFlT3y0lx47rOkR5Dc=)
                          9: Rl_LdSv7S4jM7cXsR-YvsPR7_e0.roa (hash: c3xXBJvJr1Vd+9kNqluZp66Gwhp4cNAQO4pVvtiYXxM=)
                          10: U1H2VlqPPS3wjGW1ZfnLivQcGO4.roa (hash: qh4pySXmH/3I7fKogVyh7bkiQxCS1j9KKcrKyhfVqQY=)
                          11: UmWV8ouiMSov65ex2gMJrP8rulM.roa (hash: 0YekBhcUswoPWFKHU/PnBeEZYCnG94m4d5t4cmqE5og=)
                          12: _37NtiAv_Cw033vNcaHAiIU4L7c.crl (hash: NhDzFf5rYYf4rpUH7l1cFTVMVkXdJ16P3jcmZMqihJc=)
                          13: a6WR8PNlziYau68MNc8GKVTiQQU.roa (hash: C140PIemAmKrazVEG1H/lz91VdotDm0ZhJZG3MInDvc=)
                          14: aj0tu3S3Hbysjub1l71h6kUyR9Y.roa (hash: DomVCNnith+lSXACOJzFwCe11jRNYgYOfE2iBQN+uAY=)
                          15: bwzra3P8STqh8v63hEVhkl8Z3fo.roa (hash: +1SrBczRDuBLHmvWsMxmD2OmEjc7Sdn74k9c1LEtPhc=)
                          16: iVJA7XGqOvvlMKGGS7iH_wElSLo.roa (hash: J67/fcfLsYQ5zDHZkL7theBIvkx7Q+OmHF8oodYQBLU=)
                          17: ilI4GR4kR8G4iFJCv88-v-AfK7U.roa (hash: 00MI2D5WFNNKBqUo7Zwkta5EPmkB1b38o1c+EyHWENs=)
                          18: kDJNKVyLR--UuvfakNzRTRozFaY.roa (hash: EeQMCg/gYk0tDDJJh8qS0UdPikngyDVI4sKACPvp5Tw=)
                          19: mCxDlcup9Q2TxSnqcmDEsxHlFSk.roa (hash: T2c+k1slYBjKGpNUkS+hSiAhobnEOJpzMD7RJYFy1Kg=)
                          20: mit-czQEH1pxKI-8-QqLDJhAj6A.roa (hash: A9kS2oD/EE/oSSQ3ZWBx9RIhdzEJ+XL/50L0+2tfSUU=)
                          21: mwbdnRFxGjTypiJm87k6N0_fvdQ.roa (hash: 7h+I84tvtdqsInE7E/KgjKy4k42Z8Trh4WAENR+gqLY=)
                          22: n7gSVWY_13hNLJHiECwZZSGiTZY.roa (hash: eUyhfXyKNaYK+x5Fge12ENZVTwIWPhg6IK1yPZSA6WU=)
                          23: oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa (hash: Z21z4eceYGICVcgz2U89Ch92aa4MRNx1qJlfIZYGt0s=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Apr 25 15:56:26 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=677BAD171A92B8418BD6B2B59D655218F2CF1E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:b8:dc:49:0b:5f:84:f2:9a:40:13:8f:d2:
                    17:28:03:3b:17:ac:d3:51:8f:29:78:59:39:33:cf:
                    7d:a4:73:74:68:7d:99:bf:cd:fa:6d:62:7f:03:cb:
                    70:f6:18:01:a8:b3:d2:78:a8:e3:59:78:b2:c3:bb:
                    7e:3a:df:5c:7a:24:1a:3f:ac:a8:ce:40:14:7d:2e:
                    d2:2d:9c:f1:ae:05:05:84:e3:a1:c5:94:ec:94:e2:
                    6e:6f:69:6c:0b:c0:54:b4:f7:66:97:63:f0:a3:b4:
                    77:a1:b8:10:b0:5e:5d:4e:3b:15:66:05:06:c5:64:
                    a4:ae:4b:b9:ea:81:5c:f0:03:22:9f:be:20:92:62:
                    19:e7:48:26:66:8c:9b:04:41:03:fb:cd:cb:11:e9:
                    5e:fa:c1:15:d3:3d:b4:2b:aa:da:f0:97:03:dc:ab:
                    41:3d:ed:e4:75:f5:d5:a6:6a:08:46:02:6e:f6:16:
                    06:06:47:a5:fc:5c:8c:a5:df:f6:2f:04:82:f4:cd:
                    42:8d:a9:8a:87:23:e6:49:f0:1b:81:9e:bf:36:3d:
                    e8:a7:24:db:1a:3a:c0:bc:7d:8c:45:75:48:a0:74:
                    b1:88:7f:28:1e:8f:c4:10:4e:76:86:03:b9:b6:d2:
                    ed:ca:e6:97:82:7a:e0:d0:05:7e:5d:d3:f5:25:14:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7B:AD:17:1A:92:B8:41:8B:D6:B2:B5:9D:65:52:18:F2:CF:1E:7D
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:ab:8e:52:67:68:2e:33:da:ac:f8:0d:42:c8:07:9c:19:
         6a:4e:2d:96:04:3c:29:22:22:f1:99:3e:0a:eb:af:d6:3f:db:
         92:83:e6:2f:51:1a:b5:9a:19:6a:70:e9:29:98:2e:53:82:e8:
         00:88:1d:a2:c6:2a:32:97:9b:36:6f:75:07:05:c0:34:07:c1:
         ef:f8:19:6e:ef:af:e0:a7:17:cf:f1:54:53:ea:58:bc:b2:c8:
         6e:f2:67:d4:72:a7:1a:85:31:cb:5c:ef:01:d7:e0:f2:59:30:
         e3:40:b5:9d:25:9a:84:d6:a6:74:9a:d0:0b:8d:99:51:f4:65:
         23:9f:c9:fd:e0:87:f9:aa:5c:8c:4e:a0:b1:b4:e4:ff:81:f7:
         21:60:85:2b:fa:0a:27:70:5a:a8:08:06:4e:b5:6c:6f:24:74:
         53:b0:e7:55:db:d6:fd:6d:09:0a:a9:5b:a3:33:12:45:ed:02:
         23:41:e2:86:ca:9e:89:59:7a:1f:1f:90:03:46:63:8d:a1:78:
         50:ff:a9:dc:4c:63:83:78:87:54:47:0d:e0:e4:5e:b3:a6:e4:
         ce:b9:0f:40:94:dc:88:cf:29:9f:3d:9e:bb:6c:2e:fd:7f:19:
         52:1d:bd:9e:35:20:50:2a:19:28:35:ba:cf:e3:9d:5f:a6:10:
         93:cb:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:04:59 2024 by rpki-client on console-fra.rpki-client.org