Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WRES/uFXXHD7Qbrm67Sm_whVkQz-c8lY.mft
File:                     uFXXHD7Qbrm67Sm_whVkQz-c8lY.mft (raw, json)
Hash identifier:          K6Lvciy1jmBsH2f5VeT8tOJqNerT0jTbaZXOlwU41TU=
Subject key identifier:   B5:70:10:7D:35:9F:64:26:ED:B4:08:A6:B0:CD:0B:80:9D:0B:07:20
Authority key identifier: B8:55:D7:1C:3E:D0:6E:B9:BA:ED:29:BF:C2:15:64:43:3F:9C:F2:56
Certificate issuer:       /CN=B855D71C3ED06EB9BAED29BFC21564433F9CF256
Certificate serial:       0841
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/uFXXHD7Qbrm67Sm_whVkQz-c8lY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WRES/uFXXHD7Qbrm67Sm_whVkQz-c8lY.mft
Manifest number:          0841
Signing time:             Thu 03 Dec 2020 20:46:21 +0000
Manifest this update:     Thu 03 Dec 2020 20:46:21 +0000
Manifest next update:     Sat 05 Dec 2020 20:46:21 +0000
Files and hashes:         1: uFXXHD7Qbrm67Sm_whVkQz-c8lY.crl (hash: BeR4bmtyT/LSen8CI+Ry4BzfbFOjmE7bN+JoAI/WqdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B855D71C3ED06EB9BAED29BFC21564433F9CF256
        Validity
            Not Before: Dec  3 20:46:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B570107D359F6426EDB408A6B0CD0B809D0B0720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:19:78:7d:23:4b:ac:fc:04:da:80:45:1e:
                    5b:c8:b1:00:85:84:d2:07:d1:03:7f:6a:e1:fd:36:
                    bf:51:40:b0:94:e1:dd:52:d1:f3:eb:af:ab:8e:9b:
                    ed:9b:d8:ff:a5:73:75:22:f9:2c:48:d9:95:8a:60:
                    86:fc:ac:67:ff:13:bb:f8:18:99:b9:d2:5e:79:b3:
                    2f:f3:5b:a2:dd:ff:b1:99:38:07:1d:b6:5c:d8:f8:
                    41:f1:37:97:b4:2c:a4:16:01:d8:30:e7:12:31:05:
                    d4:f8:bb:ac:0e:20:27:4c:d6:2c:11:64:85:9c:25:
                    f3:d3:64:d0:a4:c5:7a:65:0e:97:52:1d:fd:b1:91:
                    4d:b9:e4:5b:a2:f6:9c:be:74:20:19:87:b4:69:66:
                    32:97:e7:d2:2b:99:aa:ac:dc:a5:4a:8f:fe:4d:73:
                    91:97:89:09:64:82:14:25:a6:93:77:67:38:cf:17:
                    3f:85:e0:86:11:6b:45:3b:bf:9b:0e:04:62:26:7e:
                    06:bf:8c:56:83:a6:13:b8:c0:b8:1c:cc:71:a2:45:
                    fa:fb:ec:45:2f:ef:4f:fc:0a:6c:a1:1d:8b:7c:f8:
                    59:33:79:9f:2d:7f:5a:ee:bf:62:f7:92:9b:2b:83:
                    46:c1:98:a6:c7:46:f2:7d:be:f9:9c:0e:98:97:f5:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:10:7D:35:9F:64:26:ED:B4:08:A6:B0:CD:0B:80:9D:0B:07:20
            X509v3 Authority Key Identifier:
                keyid:B8:55:D7:1C:3E:D0:6E:B9:BA:ED:29:BF:C2:15:64:43:3F:9C:F2:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WRES/uFXXHD7Qbrm67Sm_whVkQz-c8lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/uFXXHD7Qbrm67Sm_whVkQz-c8lY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WRES/uFXXHD7Qbrm67Sm_whVkQz-c8lY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:25:20:c7:6a:06:a7:93:53:97:8b:d0:19:66:b7:88:ba:7d:
         52:55:0b:a6:78:31:c9:e6:7c:8d:0b:1a:eb:5a:cd:1b:6b:10:
         d4:e9:0f:a9:6f:6a:c0:eb:fe:b4:76:9f:87:9a:32:25:f1:9b:
         f3:2c:fc:07:66:72:50:70:15:6c:ad:d5:5e:c9:5b:df:34:14:
         9b:da:b9:f1:a3:57:d4:ce:f9:c8:7b:1b:ee:72:6a:3f:ce:6a:
         5c:6d:5e:53:6c:e2:c3:23:fd:ea:bc:a0:d9:3b:be:a2:de:3b:
         2f:61:a0:87:97:a6:4f:ae:6d:cf:73:46:12:12:88:6f:18:bb:
         3f:ad:c0:72:2b:0b:11:b9:ff:0c:83:92:9f:c9:42:57:75:ef:
         2a:26:83:6f:d3:50:82:62:28:33:ee:ee:ee:23:6b:2e:fd:de:
         44:e7:a9:d7:63:39:70:b0:17:82:d4:d4:af:1f:b9:89:6d:22:
         4f:96:ea:98:ad:3d:ea:5f:65:df:1f:13:d7:18:6e:5e:a6:b1:
         9f:dc:c0:3f:c3:c3:a8:e0:03:0d:18:4b:77:67:87:e3:6e:42:
         2d:ca:44:7d:44:77:5a:4c:6f:a3:ab:8b:8b:34:b1:c0:bc:80:
         9f:85:e1:b6:57:a9:40:ec:e8:56:1f:c5:93:4c:7a:e0:af:52:
         42:f8:d6:91
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjg1
NUQ3MUMzRUQwNkVCOUJBRUQyOUJGQzIxNTY0NDMzRjlDRjI1NjAeFw0yMDEyMDMy
MDQ2MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI1NzAxMDdEMzU5RjY0
MjZFREI0MDhBNkIwQ0QwQjgwOUQwQjA3MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Fxl4fSNLrPwE2oBFHlvIsQCFhNIH0QN/auH9Nr9RQLCU4d1S
0fPrr6uOm+2b2P+lc3Ui+SxI2ZWKYIb8rGf/E7v4GJm50l55sy/zW6Ld/7GZOAcd
tlzY+EHxN5e0LKQWAdgw5xIxBdT4u6wOICdM1iwRZIWcJfPTZNCkxXplDpdSHf2x
kU255Fui9py+dCAZh7RpZjKX59Irmaqs3KVKj/5Nc5GXiQlkghQlppN3ZzjPFz+F
4IYRa0U7v5sOBGImfga/jFaDphO4wLgczHGiRfr77EUv70/8CmyhHYt8+FkzeZ8t
f1ruv2L3kpsrg0bBmKbHRvJ9vvmcDpiX9QZ7AgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUtXAQfTWfZCbttAimsM0LgJ0LByAwHwYDVR0jBBgwFoAUuFXXHD7Qbrm67Sm/
whVkQz+c8lYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV1JFUy91
RlhYSEQ3UWJybTY3U21fd2hWa1F6LWM4bFkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3VGWFhIRDdRYnJtNjdTbV93aFZrUXotYzhsWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1dSRVMvdUZYWEhEN1Ficm02N1NtX3doVmtR
ei1jOGxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAKElIMdq
BqeTU5eL0Blmt4i6fVJVC6Z4McnmfI0LGutazRtrENTpD6lvasDr/rR2n4eaMiXx
m/Ms/AdmclBwFWyt1V7JW980FJvaufGjV9TO+ch7G+5yaj/OalxtXlNs4sMj/eq8
oNk7vqLeOy9hoIeXpk+ubc9zRhISiG8Yuz+twHIrCxG5/wyDkp/JQld17yomg2/T
UIJiKDPu7u4jay793kTnqddjOXCwF4LU1K8fuYltIk+W6pitPepfZd8fE9cYbl6m
sZ/cwD/Dw6jgAw0YS3dnh+NuQi3KRH1Ed1pMb6Ori4s0scC8gJ+F4bZXqUDs6FYf
xZNMeuCvUkL41pE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org