Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
File:                     nUQardI5rZJgEK_E2yBFTvLEsME.mft (raw, json)
Hash identifier:          77OgagUkLB9xs+JR057eKk5NHmmbv5vWpG+sQOTymjQ=
Subject key identifier:   01:25:9E:C8:F3:24:14:A5:F2:80:DB:DA:54:9D:F1:6C:0F:13:C9:22
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Certificate issuer:       /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial:       0BE7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
Manifest number:          0BDC
Signing time:             Sun 02 Jun 2024 04:48:24 +0000
Manifest this update:     Sun 02 Jun 2024 04:48:24 +0000
Manifest next update:     Tue 04 Jun 2024 04:48:24 +0000
Files and hashes:         1: L1IpWUhVfDKAKUSBP9odvzlMRU8.roa (hash: CmDDjiCQqgnYxS4Ia/iQEmI5N1PT0nNJZhSlsK0PVh8=)
                          2: L6FF2a2XhxgMiraYAjzfkSgUPeE.roa (hash: IwOh/XjdbTAcvY3/D9wmhXA0nOrl3PVezNhJ/n9Ypjs=)
                          3: nUQardI5rZJgEK_E2yBFTvLEsME.crl (hash: SCdM296ZnXsR8tBmHDefm9HZFs0lvduH6Zihja2P3pw=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 04:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
        Validity
            Not Before: Jun  2 04:48:24 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=01259EC8F32414A5F280DBDA549DF16C0F13C922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:71:d5:4f:ae:e9:72:e7:f3:24:3b:75:14:
                    85:e3:64:05:ca:a8:61:02:db:10:07:ad:68:3e:b1:
                    8d:de:0a:78:34:02:30:b8:ce:be:66:6c:82:a0:25:
                    fc:3f:bc:cd:93:21:c0:36:79:95:48:ab:fb:8c:39:
                    3f:19:e4:06:f0:ee:a4:1c:ca:65:7e:d3:53:6f:99:
                    b7:48:af:68:b7:bd:84:42:82:62:41:e9:c4:09:a7:
                    ea:e7:56:38:f6:47:52:ba:4d:34:80:3f:ff:fd:9e:
                    9d:ad:3b:58:62:3a:db:6b:42:af:55:f9:17:0c:41:
                    f5:47:80:f0:6f:81:c5:8b:96:0b:7b:ab:4d:fc:49:
                    5a:c7:34:6a:96:bc:90:b3:1b:13:d6:fe:7a:7a:84:
                    66:b1:d4:18:cf:04:91:73:20:f9:e5:7e:8d:10:db:
                    6f:68:57:18:9e:b2:28:18:00:3f:77:e1:26:e9:bc:
                    fc:7c:75:2d:4a:d0:9b:e4:31:60:0f:ad:34:87:bc:
                    27:40:67:67:5e:50:94:34:ea:b1:71:01:a5:1b:8f:
                    e7:25:94:9f:24:b7:78:46:1d:39:87:93:b7:88:29:
                    b9:d8:ca:42:43:d3:17:3b:36:2b:78:8b:d6:fc:cd:
                    16:0e:6d:5e:e9:c0:48:ae:9f:2f:42:ed:57:f3:f9:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:9E:C8:F3:24:14:A5:F2:80:DB:DA:54:9D:F1:6C:0F:13:C9:22
            X509v3 Authority Key Identifier:
                keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:f6:d1:4c:fd:78:b7:25:89:f4:5a:0f:09:08:e3:56:76:
         bf:22:c4:11:55:0e:a4:42:4c:3f:fc:17:2b:51:5f:79:ff:31:
         5d:2c:e8:a4:13:6c:22:8a:48:b3:48:2c:64:0d:6c:85:d6:51:
         7c:ba:d2:8e:8d:c7:0b:6f:30:91:6c:35:8d:97:3c:5b:5b:54:
         ef:8d:81:4f:cc:81:f4:5e:ef:02:45:78:20:df:de:56:fa:0a:
         ad:33:bc:7f:fa:d1:6d:5a:9a:b7:77:1b:24:c0:db:63:22:c1:
         5d:7b:9b:e3:4d:09:22:d8:2a:ef:6e:c9:47:3e:b6:73:c6:13:
         ad:60:1a:a2:ea:9a:41:7e:99:d6:44:80:cf:33:19:5a:7c:db:
         3f:7d:f2:4f:01:ea:33:66:37:30:07:33:a8:41:9c:cc:e1:69:
         fc:60:8a:91:e6:b6:09:f2:b3:4a:e6:b3:26:4d:4f:af:1a:2a:
         ef:6a:66:be:81:c7:84:6a:65:d0:45:d0:99:ee:0d:9d:f0:a4:
         b1:6e:c0:f7:66:f6:a8:93:d0:fe:9b:04:16:0d:56:9c:c6:3d:
         b4:c6:15:f9:23:96:cf:ac:78:e9:a7:c9:8b:fc:e2:75:d3:e2:
         a5:7b:8e:ef:59:b4:e9:fc:5f:8f:25:0b:c5:7c:c0:72:55:2e:
         2b:fb:44:a0
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQ0
NDFBQUREMjM5QUQ5MjYwMTBBRkM0REIyMDQ1NEVGMkM0QjBDMTAeFw0yNDA2MDIw
NDQ4MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxMjU5RUM4RjMyNDE0
QTVGMjgwREJEQTU0OURGMTZDMEYxM0M5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/BHHVT67pcufzJDt1FIXjZAXKqGEC2xAHrWg+sY3eCng0AjC4
zr5mbIKgJfw/vM2TIcA2eZVIq/uMOT8Z5Abw7qQcymV+01NvmbdIr2i3vYRCgmJB
6cQJp+rnVjj2R1K6TTSAP//9np2tO1hiOttrQq9V+RcMQfVHgPBvgcWLlgt7q038
SVrHNGqWvJCzGxPW/np6hGax1BjPBJFzIPnlfo0Q229oVxiesigYAD934SbpvPx8
dS1K0JvkMWAPrTSHvCdAZ2deUJQ06rFxAaUbj+cllJ8kt3hGHTmHk7eIKbnYykJD
0xc7Nit4i9b8zRYObV7pwEiuny9C7Vfz+ZIHAgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUASWeyPMkFKXygNvaVJ3xbA8TySIwHwYDVR0jBBgwFoAUnUQardI5rZJgEK/E
2yBFTvLEsMEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV05DTC9u
VVFhcmRJNXJaSmdFS19FMnlCRlR2TEVzTUUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L25VUWFyZEk1clpKZ0VLX0UyeUJGVHZMRXNNRS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1dOQ0wvblVRYXJkSTVyWkpnRUtfRTJ5QkZU
dkxFc01FLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAFlq9tFM
/Xi3JYn0Wg8JCONWdr8ixBFVDqRCTD/8FytRX3n/MV0s6KQTbCKKSLNILGQNbIXW
UXy60o6NxwtvMJFsNY2XPFtbVO+NgU/MgfRe7wJFeCDf3lb6Cq0zvH/60W1amrd3
GyTA22MiwV17m+NNCSLYKu9uyUc+tnPGE61gGqLqmkF+mdZEgM8zGVp82z998k8B
6jNmNzAHM6hBnMzhafxgipHmtgnys0rmsyZNT68aKu9qZr6Bx4RqZdBF0JnuDZ3w
pLFuwPdm9qiT0P6bBBYNVpzGPbTGFfkjls+seOmnyYv84nXT4qV7ju9ZtOn8X48l
C8V8wHJVLiv7RKA=
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:05 2024 by rpki-client on console-ams.rpki-client.org