Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
File:                     U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft (raw, json)
Hash identifier:          iYlgRDazfkZitvxvcYenB4dIW3/oVwTGpEdRBqNMYZ8=
Subject key identifier:   C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0CE7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
Manifest number:          0CDB
Signing time:             Sun 01 Jun 2025 22:25:26 +0000
Manifest this update:     Sun 01 Jun 2025 22:25:26 +0000
Manifest next update:     Tue 03 Jun 2025 22:25:26 +0000
Files and hashes:         1: 4PWaK3-naPPpKMlC7XnZSi5d5rk.roa (hash: 4O3+RBdGcbnoHIwkp4BuGY7rZCtpRlna7VhhTYPc6yc=)
                          2: 5qbfWFQMEV8Jnpte8t4LSv4m8F0.roa (hash: MB8DovGhVLMt92Wvxg5JLs3SXyfm5ZuQfWynMc/DUmQ=)
                          3: 92ya2HAEtksonPTMXYpkFAqpfjU.roa (hash: YD+KmS2ykCOOl0iyh2sL17zDhgQH959X/HFE3cNdy10=)
                          4: U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl (hash: iJynqBsqE6eKM+D9otSsxeTuSnNiDTkaywM+KCJfpuQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Jun 2025 09:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Jun  1 22:25:26 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C2361BCDA273943824CF5CA4F4A5747143939EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:6f:e3:cd:db:54:f5:fe:14:0d:01:e3:62:
                    17:da:d1:fd:19:ff:b9:fc:a3:23:8a:e9:6b:2e:fc:
                    6b:03:41:84:d8:37:5a:e8:0f:e0:c5:00:8a:fa:d8:
                    9f:6b:11:e2:71:4a:02:6e:35:db:ff:3d:22:69:bc:
                    91:81:9a:42:d1:09:42:8a:39:03:9d:8e:d7:94:3e:
                    b1:02:8e:8f:49:f6:99:b5:88:47:0e:88:58:1f:9c:
                    13:c1:f9:a1:af:43:14:1e:7a:86:8d:8b:c0:8c:fe:
                    27:d1:35:26:e3:c4:6d:3f:51:2b:fd:1e:5b:f7:7e:
                    d4:57:e4:0f:5e:1d:ad:df:5f:3f:a7:13:f5:1c:8b:
                    20:2d:c7:77:55:fe:cc:43:d2:28:aa:21:48:03:49:
                    68:19:63:46:e0:9f:c2:56:31:e9:75:4e:41:7e:d8:
                    75:20:52:df:b7:77:3f:8b:1e:02:04:a1:12:36:a5:
                    8b:20:f0:46:7f:62:b0:25:a9:ba:a2:5b:10:7b:50:
                    f1:25:9e:43:73:10:47:a9:04:85:3c:39:65:51:52:
                    6e:38:55:c3:30:71:22:12:fe:1c:b3:1c:2f:5e:13:
                    46:77:8a:73:42:15:66:05:dc:24:9d:25:ab:3a:0d:
                    98:7c:b4:9d:82:d3:40:b5:dd:bc:34:25:79:e1:eb:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:22:c6:3e:7a:d9:84:d7:db:6d:1d:13:bc:61:02:29:91:10:
         29:ac:40:62:76:63:d6:fd:31:ba:e3:2e:d3:79:15:08:5f:96:
         2e:d5:e1:d4:88:35:64:82:16:d0:94:16:48:c3:82:a6:eb:99:
         83:44:10:f6:8b:34:da:d6:2a:e0:db:45:0b:cb:76:7f:83:d3:
         86:89:16:ea:79:31:42:a6:3e:03:47:c8:a6:81:26:95:92:28:
         a8:87:9a:09:6c:9c:2a:2e:54:4a:e2:25:1f:dc:ad:7c:2a:46:
         82:38:44:d7:bf:bc:02:b7:09:63:82:b1:32:57:dc:20:d1:b1:
         64:98:4f:b0:e1:98:ef:e3:dd:04:ae:74:1a:7b:b7:d4:c0:c3:
         15:2d:fd:f1:60:fa:9d:57:c8:75:3e:84:54:f3:84:24:ef:40:
         ef:45:3c:55:75:a5:12:03:e1:d1:65:b7:a5:7d:6a:fc:de:91:
         4c:b2:20:f3:06:25:d3:df:03:3b:81:9f:19:41:c8:80:aa:e1:
         38:44:be:a3:6c:5b:57:cc:32:fe:6a:bb:be:93:ae:1f:6f:b9:
         fa:b6:9c:79:60:a7:4a:65:10:56:89:93:72:8b:7e:28:93:1f:
         d4:53:7a:fe:53:87:cd:c8:a2:df:17:8b:9d:b7:1b:86:2e:94:
         95:18:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:16:38 2025 by rpki-client