Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
File:                     hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft (raw, json)
Hash identifier:          XvVicEdNyQdogi+JHNJt6fbhQr6bHO1KHghwRDUIQvc=
Subject key identifier:   D2:C1:C2:AE:08:B9:E9:D0:10:1C:9C:08:E2:7A:1D:D2:B6:FE:55:4C
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0F26
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
Manifest number:          0EF6
Signing time:             Tue 19 Mar 2024 03:01:59 +0000
Manifest this update:     Tue 19 Mar 2024 03:01:59 +0000
Manifest next update:     Thu 21 Mar 2024 03:01:59 +0000
Files and hashes:         1: 46INW6d3L-fOVgrdEo5SHSBLXTc.roa (hash: /yCVZcUwAbvLIJE1HUdG5z8HdNWGWREQZshiyHCbZlo=)
                          2: 4v1JcPfqqBV1bff7rzY0CKmGxzY.roa (hash: CkKocgFQgveqNFCKAp7jHIr0U7vdE59ccTdgNUg5PRo=)
                          3: 6bxxmznER1VJHi2mT386Lx19rLU.roa (hash: YXyO6yUffmC2EJPcwz1jXvdnTegnQyC9McOEAYYZA+U=)
                          4: 7z6Vv7kKrIQss4CkA2of6TH0NgQ.roa (hash: wm2BPm+C7J7fK4gb01NBaPQgMv93BnqNRAom6U0eTNA=)
                          5: BbDxCYsqJIwEgZgTMoQJFRfYO9o.roa (hash: czy1dAzJ3jtGN0VduN0qLuWDhcgKyxMJ/0MxhikKD3g=)
                          6: hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl (hash: qZqOaaTqlgPyFMPui8A5BoSRjE/RT4SaKhENmWoWB18=)
                          7: icXo4bXKGT5MZdLgsHoPJVQXwkU.roa (hash: osVfFkOCCyT2YeiuD42bqaQ4nK0gnI/Z7QsogQpTZ6I=)
                          8: wYMqadZOY7ixGavlV_k7zR9y3zA.roa (hash: +CwYyy49k4wECePeK3Z4059EWk4GHq+tLy+eV9LnGVQ=)
                          9: yK7_S5vwmSKiQi6i3qFbmP6iP9c.roa (hash: ykeXYRsedKrmcSYas3KaGPI4i4KYpb3E6xSHcbpve1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3878 (0xf26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Mar 19 03:01:59 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D2C1C2AE08B9E9D0101C9C08E27A1DD2B6FE554C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:b8:9b:62:45:6e:b5:95:c6:a4:7d:3a:ee:
                    f7:f3:a2:e2:63:d3:5a:4f:c8:53:39:4e:0b:5c:82:
                    e2:14:85:25:d6:66:8a:38:f0:16:3d:7a:02:d5:85:
                    e2:dc:04:06:13:b4:d2:2b:f0:30:0d:be:3d:04:44:
                    74:c7:de:c5:5b:fe:b7:f9:5b:a6:07:cd:30:bb:f5:
                    1a:c2:19:d4:51:e1:c4:24:e7:0a:48:20:ed:26:a2:
                    18:8c:a9:e3:6d:f2:93:ba:51:56:f9:2e:db:b0:7a:
                    17:c6:93:06:0f:03:e2:a7:ec:e8:82:8e:e0:b2:ef:
                    fc:6a:0f:08:80:bc:de:21:98:60:09:00:c9:83:17:
                    5e:b4:1d:af:e1:a6:28:9a:2c:cf:c1:fc:67:62:d3:
                    1d:10:18:98:65:3c:28:eb:7d:69:9a:d8:82:e4:94:
                    d4:43:e0:3c:57:c6:09:35:e0:a5:84:97:50:93:12:
                    79:f8:0c:4a:66:1e:38:1f:21:e7:da:e2:44:87:ed:
                    ce:19:7e:63:5b:6c:16:43:b7:d0:ce:fa:ce:8d:27:
                    61:fb:79:1f:4d:5a:d9:59:3a:63:ca:e9:eb:2a:74:
                    59:e2:87:41:90:58:51:4a:28:c5:d5:00:84:51:53:
                    b6:88:32:b1:66:a0:c7:97:83:f0:33:a9:4b:6d:98:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:C2:AE:08:B9:E9:D0:10:1C:9C:08:E2:7A:1D:D2:B6:FE:55:4C
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:40:94:97:37:1c:fb:ba:4e:71:bb:4e:3d:53:50:d2:25:
         b8:ae:82:86:de:30:bd:f2:c1:c1:b7:17:0e:37:0c:57:c5:7a:
         9d:a0:98:32:47:72:86:0b:15:82:02:f3:72:d8:1d:53:75:a5:
         43:81:88:67:63:cc:8f:8f:ce:ef:f4:9e:94:d8:19:18:ac:43:
         5a:f4:76:ef:b5:ab:a1:f2:cb:d2:1e:63:61:b6:7d:32:49:77:
         0a:a2:88:a8:7c:2a:ff:f5:c4:0e:fb:b7:ec:0a:8d:d8:ae:2a:
         11:2f:21:95:7b:63:fe:6e:17:69:99:5c:2a:59:c2:83:43:b4:
         f5:dd:5a:fa:c0:2b:74:19:7c:ed:95:7b:0e:0f:c9:08:4e:ec:
         55:7c:2e:b7:70:55:18:1d:a2:6d:8d:c1:38:7a:98:9c:8a:db:
         36:34:d2:87:9c:ee:72:76:7b:41:99:2b:d0:ad:51:ff:74:84:
         5c:f5:82:94:e7:6b:bb:4d:2f:1f:a7:e9:4d:a6:81:f5:af:8d:
         44:07:14:43:6a:08:cc:5d:b7:8e:c0:9c:27:fc:a2:3a:d6:e1:
         bc:f4:fb:d6:08:2c:3d:20:7b:24:a1:30:88:47:0d:0d:af:e2:
         29:89:64:a6:33:c1:bc:4b:86:0c:9a:c8:f0:eb:ae:77:60:78:
         9a:aa:05:cb
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICDyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG
ODUwQzA2NTFCNjk5RTE5MERDOUQ5N0NEMURFMzI2QzE2NEVDNTAeFw0yNDAzMTkw
MzAxNTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQyQzFDMkFFMDhCOUU5
RDAxMDFDOUMwOEUyN0ExREQyQjZGRTU1NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTt7ibYkVutZXGpH067vfzouJj01pPyFM5TgtcguIUhSXWZoo4
8BY9egLVheLcBAYTtNIr8DANvj0ERHTH3sVb/rf5W6YHzTC79RrCGdRR4cQk5wpI
IO0mohiMqeNt8pO6UVb5LtuwehfGkwYPA+Kn7OiCjuCy7/xqDwiAvN4hmGAJAMmD
F160Ha/hpiiaLM/B/Gdi0x0QGJhlPCjrfWma2ILklNRD4DxXxgk14KWEl1CTEnn4
DEpmHjgfIefa4kSH7c4ZfmNbbBZDt9DO+s6NJ2H7eR9NWtlZOmPK6esqdFnih0GQ
WFFKKMXVAIRRU7aIMrFmoMeXg/AzqUttmG6fAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQU0sHCrgi56dAQHJwI4nod0rb+VUwwHwYDVR0jBBgwFoAUhPhQwGUbaZ4ZDcnZ
fNHeMmwWTsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOWVVO
L2hQaFF3R1ViYVo0WkRjblpmTkhlTW13V1RzVS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvaFBoUXdHVWJhWjRaRGNuWmZOSGVNbXdXVHNVLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOWVVOL2hQaFF3R1ViYVo0WkRjblpm
TkhlTW13V1RzVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe
L0CUlzcc+7pOcbtOPVNQ0iW4roKG3jC98sHBtxcONwxXxXqdoJgyR3KGCxWCAvNy
2B1TdaVDgYhnY8yPj87v9J6U2BkYrENa9Hbvtauh8svSHmNhtn0ySXcKooiofCr/
9cQO+7fsCo3YrioRLyGVe2P+bhdpmVwqWcKDQ7T13Vr6wCt0GXztlXsOD8kITuxV
fC63cFUYHaJtjcE4epicits2NNKHnO5ydntBmSvQrVH/dIRc9YKU52u7TS8fp+lN
poH1r41EBxRDagjMXbeOwJwn/KI61uG89PvWCCw9IHskoTCIRw0Nr+IpiWSmM8G8
S4YMmsjw6653YHiaqgXL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org