Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XMNET/toY22h9BjWmbRHwhcvxbveLEszc.mft
File:                     toY22h9BjWmbRHwhcvxbveLEszc.mft (raw, json)
Hash identifier:          LbLXXBiE4uytH74zK8Cxf5aj2Drs5n8ItgSHxBlOO8E=
Subject key identifier:   F7:85:6A:62:25:F7:43:6A:C8:93:94:25:00:CB:C4:11:63:CF:11:C4
Authority key identifier: B6:86:36:DA:1F:41:8D:69:9B:44:7C:21:72:FC:5B:BD:E2:C4:B3:37
Certificate issuer:       /CN=B68636DA1F418D699B447C2172FC5BBDE2C4B337
Certificate serial:       0ADC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/toY22h9BjWmbRHwhcvxbveLEszc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XMNET/toY22h9BjWmbRHwhcvxbveLEszc.mft
Manifest number:          0ADC
Signing time:             Thu 03 Dec 2020 21:15:58 +0000
Manifest this update:     Thu 03 Dec 2020 21:15:58 +0000
Manifest next update:     Sat 05 Dec 2020 21:15:58 +0000
Files and hashes:         1: toY22h9BjWmbRHwhcvxbveLEszc.crl (hash: 1WgRmPPK5XQG/N0yk+CulbdmbSgWORLR/wtH6zHDVUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780 (0xadc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B68636DA1F418D699B447C2172FC5BBDE2C4B337
        Validity
            Not Before: Dec  3 21:15:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F7856A6225F7436AC893942500CBC41163CF11C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:3b:f8:08:04:80:4a:f9:67:61:ca:11:34:
                    ce:3c:16:81:3f:ad:83:33:81:55:8d:93:94:56:58:
                    e5:6b:d8:a6:df:c0:25:36:10:96:3d:d3:16:c2:44:
                    d7:24:44:14:d8:39:fa:2c:fb:ed:ab:fc:19:71:4d:
                    9b:c6:f6:c5:51:25:4a:25:c1:6d:df:88:e5:8b:32:
                    77:ee:bc:65:59:35:fa:90:c4:42:77:64:ee:68:6b:
                    ad:b5:d1:53:8b:00:fd:5d:48:a6:4d:f9:cd:8d:64:
                    5b:4e:4e:00:a2:b8:d7:cd:d8:27:30:29:0f:e5:47:
                    71:13:c4:68:79:d4:34:bc:25:22:fa:aa:8d:ad:a4:
                    15:62:7d:c8:1a:30:4e:72:30:09:02:47:d5:5d:9d:
                    43:a7:62:0c:a9:15:e0:c9:26:72:09:d6:98:5a:f5:
                    06:f9:89:c0:e8:34:0e:8f:e9:c5:eb:3e:8e:e5:58:
                    c0:4a:c2:a6:b5:be:48:1a:bd:b6:42:29:44:1b:49:
                    e9:7b:6e:08:c7:e6:ec:49:95:38:87:07:5c:c4:b4:
                    8a:76:61:fc:6e:a6:41:4d:f4:33:88:ca:71:fc:0a:
                    94:06:26:2f:03:1d:2c:da:c9:e6:ae:2c:ee:c6:9a:
                    ef:22:aa:ab:d5:ab:32:ce:97:fb:3c:f9:db:ec:1a:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:85:6A:62:25:F7:43:6A:C8:93:94:25:00:CB:C4:11:63:CF:11:C4
            X509v3 Authority Key Identifier:
                keyid:B6:86:36:DA:1F:41:8D:69:9B:44:7C:21:72:FC:5B:BD:E2:C4:B3:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XMNET/toY22h9BjWmbRHwhcvxbveLEszc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/toY22h9BjWmbRHwhcvxbveLEszc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XMNET/toY22h9BjWmbRHwhcvxbveLEszc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:da:4e:44:47:43:ce:58:19:c6:62:e9:b6:56:6c:fd:b8:
         9d:79:90:e4:aa:e1:3d:ce:e7:0c:07:81:99:29:4c:04:4f:13:
         cf:8f:90:97:e8:a6:b0:fd:cb:c6:b3:f4:52:ce:77:18:c3:09:
         0e:00:75:43:84:7b:e8:da:27:37:38:24:8e:25:34:71:a2:e6:
         ac:94:19:33:c6:52:ec:00:5d:92:64:e9:0a:d8:dc:8b:ea:53:
         61:4e:30:07:03:eb:42:8d:18:f3:9c:93:3c:d3:12:6e:1b:af:
         2d:a0:50:25:8f:1d:1b:f8:6d:a4:3a:6e:84:83:b9:91:17:29:
         12:f6:a4:34:bc:32:16:4b:9f:35:b0:82:6f:d8:2e:a7:20:ab:
         88:c3:cd:d4:99:09:69:40:89:73:f1:b6:b6:76:64:bf:1b:03:
         3b:8a:b7:57:42:57:88:01:90:0a:56:c7:08:e6:9a:55:62:48:
         cf:15:c9:85:b7:5c:17:7f:91:e5:75:34:13:c0:51:27:7d:cd:
         db:eb:1a:af:23:83:3b:1e:27:90:75:46:25:bb:07:de:ab:b1:
         af:e4:75:cc:0c:af:d2:e6:84:df:d3:f7:31:b8:87:c9:ba:b1:
         3d:0e:3a:2a:2f:62:d8:ee:b6:67:c0:0a:b8:0f:f3:1f:67:b3:
         d6:25:e6:1c
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjY4
NjM2REExRjQxOEQ2OTlCNDQ3QzIxNzJGQzVCQkRFMkM0QjMzNzAeFw0yMDEyMDMy
MTE1NThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEY3ODU2QTYyMjVGNzQz
NkFDODkzOTQyNTAwQ0JDNDExNjNDRjExQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClCDv4CASASvlnYcoRNM48FoE/rYMzgVWNk5RWWOVr2KbfwCU2
EJY90xbCRNckRBTYOfos++2r/BlxTZvG9sVRJUolwW3fiOWLMnfuvGVZNfqQxEJ3
ZO5oa6210VOLAP1dSKZN+c2NZFtOTgCiuNfN2CcwKQ/lR3ETxGh51DS8JSL6qo2t
pBVifcgaME5yMAkCR9VdnUOnYgypFeDJJnIJ1pha9Qb5icDoNA6P6cXrPo7lWMBK
wqa1vkgavbZCKUQbSel7bgjH5uxJlTiHB1zEtIp2YfxupkFN9DOIynH8CpQGJi8D
HSzayeauLO7Gmu8iqqvVqzLOl/s8+dvsGs6zAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU94VqYiX3Q2rIk5QlAMvEEWPPEcQwHwYDVR0jBBgwFoAUtoY22h9BjWmbRHwh
cvxbveLEszcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWE1ORVQv
dG9ZMjJoOUJqV21iUkh3aGN2eGJ2ZUxFc3pjLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS90b1kyMmg5QmpXbWJSSHdoY3Z4YnZlTEVzemMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9YTU5FVC90b1kyMmg5QmpXbWJSSHdoY3Z4
YnZlTEVzemMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaHa
TkRHQ85YGcZi6bZWbP24nXmQ5KrhPc7nDAeBmSlMBE8Tz4+Ql+imsP3LxrP0Us53
GMMJDgB1Q4R76NonNzgkjiU0caLmrJQZM8ZS7ABdkmTpCtjci+pTYU4wBwPrQo0Y
85yTPNMSbhuvLaBQJY8dG/htpDpuhIO5kRcpEvakNLwyFkufNbCCb9gupyCriMPN
1JkJaUCJc/G2tnZkvxsDO4q3V0JXiAGQClbHCOaaVWJIzxXJhbdcF3+R5XU0E8BR
J33N2+saryODOx4nkHVGJbsH3quxr+R1zAyv0uaE39P3MbiHybqxPQ46Ki9i2O62
Z8AKuA/zH2ez1iXmHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org