Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.mft
File:                     2yFBWO5LGnCY21Hjh11M0D1zRjs.mft (raw, json)
Hash identifier:          AxKhTdXjQDz4sMlXwU1fDhUVY7oCqyXiCAOkHaX49ro=
Subject key identifier:   3A:4B:E1:27:05:80:6D:55:B1:C2:4A:D1:EF:BE:56:82:3F:3E:C9:49
Authority key identifier: DB:21:41:58:EE:4B:1A:70:98:DB:51:E3:87:5D:4C:D0:3D:73:46:3B
Certificate issuer:       /CN=DB214158EE4B1A7098DB51E3875D4CD03D73463B
Certificate serial:       0163
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2yFBWO5LGnCY21Hjh11M0D1zRjs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.mft
Manifest number:          0162
Signing time:             Mon 13 Jan 2025 03:03:55 +0000
Manifest this update:     Mon 13 Jan 2025 03:03:55 +0000
Manifest next update:     Mon 13 Jan 2025 09:03:55 +0000
Files and hashes:         1: 2yFBWO5LGnCY21Hjh11M0D1zRjs.crl (hash: 5rd51W7NuQKE1wICy3zIxDB2wmLpUYegKDwyxey2y7w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB214158EE4B1A7098DB51E3875D4CD03D73463B
        Validity
            Not Before: Jan 13 03:03:55 2025 GMT
            Not After : Nov  4 15:30:21 2025 GMT
        Subject: CN=3A4BE12705806D55B1C24AD1EFBE56823F3EC949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:a9:a6:d6:08:ab:1d:1a:83:4b:28:0d:87:
                    f6:31:54:17:f0:0f:2a:41:ca:ed:b1:cd:fa:be:95:
                    db:84:78:c0:16:17:9a:db:eb:f4:c6:2d:39:a2:cc:
                    48:c2:c6:ed:67:3c:34:4d:57:a5:bb:41:ad:0a:9f:
                    b8:cd:17:9c:4b:ea:0e:4d:fd:ce:df:76:81:71:a5:
                    fe:7c:2f:84:b8:a7:cb:1f:11:e7:9a:2f:f9:68:d2:
                    45:e3:02:30:81:9d:5d:f7:7a:dc:49:de:4b:69:83:
                    af:cb:2a:90:7d:6f:3f:d9:41:e9:e3:1b:47:9e:ca:
                    86:b4:ba:d3:e5:0a:09:12:f2:ed:b6:9b:a0:05:83:
                    6e:91:30:3c:6e:a6:ab:fd:a8:49:2c:2e:f8:fc:40:
                    15:76:49:1a:f1:c6:95:d2:7d:c0:47:09:15:dd:63:
                    7a:3b:b1:d7:eb:b1:cf:40:40:64:e7:53:08:ad:bd:
                    14:22:7f:e5:66:00:13:2f:82:38:c6:db:e6:77:89:
                    83:eb:4b:8f:a7:f9:f9:70:4b:0f:f3:1e:ac:0f:e4:
                    5b:e6:4e:52:99:11:fa:35:4c:29:a2:8c:9c:7b:44:
                    67:9d:7f:76:6f:57:e2:89:ee:1f:19:98:16:42:3e:
                    08:b8:18:c1:fb:c0:36:d2:5c:9d:96:4d:d6:ce:24:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4B:E1:27:05:80:6D:55:B1:C2:4A:D1:EF:BE:56:82:3F:3E:C9:49
            X509v3 Authority Key Identifier:
                keyid:DB:21:41:58:EE:4B:1A:70:98:DB:51:E3:87:5D:4C:D0:3D:73:46:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2yFBWO5LGnCY21Hjh11M0D1zRjs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:34:87:94:69:7b:b5:cf:29:ca:23:bb:87:49:1f:9e:44:15:
         52:6f:ec:a2:be:62:e0:51:6e:6d:6c:6a:8f:13:bf:7e:97:eb:
         2c:74:ae:89:5c:90:45:c0:32:33:c1:38:3c:04:f8:c0:60:56:
         4d:35:92:78:2f:01:15:53:fe:c4:39:85:9b:b3:b6:1f:63:36:
         76:24:e8:ce:a4:f6:54:0f:55:28:09:f2:f8:48:be:ff:1c:a8:
         1c:03:d3:8b:76:6a:06:82:5e:8c:06:40:59:d7:4d:7a:03:59:
         82:d2:a7:31:9c:79:2f:4e:54:f8:6c:4f:41:6d:43:cf:6a:73:
         ff:93:96:51:08:19:a9:4f:d9:ab:64:63:a6:44:07:cb:fd:24:
         07:6e:33:ca:45:37:21:62:06:0b:40:23:b8:17:2b:c7:e7:a2:
         33:79:a2:a5:32:b1:49:cb:03:02:5a:66:9e:4d:d5:8d:9f:02:
         26:fe:f7:8c:20:21:32:17:ad:cc:f9:83:09:eb:d9:87:35:eb:
         c5:b1:79:0f:7c:b4:8f:73:e3:0d:80:6e:e6:84:54:13:28:7b:
         08:81:6b:70:78:a1:1a:46:6f:57:ac:76:88:74:b9:94:9a:98:
         66:77:b6:7b:33:2d:e3:9c:4d:72:f1:a3:27:31:1f:59:bb:6f:
         37:3f:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:54 2025 by rpki-client