Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XRSPACE/MvRPLzP7EUCh4m8IgOzmLV63EvM.mft
File:                     MvRPLzP7EUCh4m8IgOzmLV63EvM.mft (raw, json)
Hash identifier:          0skw4ikED3BCFD2p1oiX5P0Evx6tQAcAnqHzz7OiqFU=
Subject key identifier:   BA:FF:54:0E:14:8C:CF:5E:3D:82:BC:0B:64:D0:C4:C9:4C:4B:89:EE
Authority key identifier: 32:F4:4F:2F:33:FB:11:40:A1:E2:6F:08:80:EC:E6:2D:5E:B7:12:F3
Certificate issuer:       /CN=32F44F2F33FB1140A1E26F0880ECE62D5EB712F3
Certificate serial:       09F0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MvRPLzP7EUCh4m8IgOzmLV63EvM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XRSPACE/MvRPLzP7EUCh4m8IgOzmLV63EvM.mft
Manifest number:          09F0
Signing time:             Thu 03 Dec 2020 21:25:53 +0000
Manifest this update:     Thu 03 Dec 2020 21:25:53 +0000
Manifest next update:     Sat 05 Dec 2020 21:25:53 +0000
Files and hashes:         1: MvRPLzP7EUCh4m8IgOzmLV63EvM.crl (hash: tcXmBMCKCoNBuXbhqnlO3Apo/To+z9/JBodVfPdzzac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544 (0x9f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F44F2F33FB1140A1E26F0880ECE62D5EB712F3
        Validity
            Not Before: Dec  3 21:25:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BAFF540E148CCF5E3D82BC0B64D0C4C94C4B89EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:d7:9d:f5:73:b0:47:a3:92:84:c3:0a:be:
                    b2:89:dd:7d:07:ca:06:9b:d8:2c:b8:80:d1:bf:bf:
                    b7:7c:39:27:ce:67:3f:32:4a:42:1c:2d:e6:69:b1:
                    f0:c8:52:ed:4c:a9:cc:be:c0:3a:3b:ee:90:7b:50:
                    ab:8b:ce:b7:6e:5b:c4:94:55:4e:38:54:c7:d1:a5:
                    08:40:2f:49:33:24:e1:a6:a0:d0:93:c4:4d:84:d7:
                    e1:43:34:b2:9a:63:13:d9:9a:02:d1:90:9f:a9:05:
                    31:15:e3:9e:8d:76:48:62:8b:0c:80:4a:fe:c5:76:
                    39:63:f9:77:31:81:de:78:ff:e4:d4:39:2a:f7:e3:
                    32:b6:c7:18:d2:4b:e6:f9:3b:d1:58:ef:14:ec:55:
                    c7:88:a3:1c:66:11:06:62:d2:b6:50:0f:18:ee:8a:
                    cc:80:45:63:88:13:88:6c:38:7a:f4:c0:1a:c3:fd:
                    70:7a:96:64:6f:1b:a7:a7:6d:60:72:2e:ab:2c:90:
                    d6:e7:71:4c:bb:7d:78:d6:42:15:1a:e5:9f:c3:d9:
                    9c:ec:b3:00:2b:b0:4d:20:88:88:33:0d:65:97:f6:
                    83:dd:8a:12:96:d9:b3:e0:78:77:74:bc:09:dd:22:
                    c1:66:56:f8:24:1e:cf:31:4e:61:9f:ef:f3:43:f0:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FF:54:0E:14:8C:CF:5E:3D:82:BC:0B:64:D0:C4:C9:4C:4B:89:EE
            X509v3 Authority Key Identifier:
                keyid:32:F4:4F:2F:33:FB:11:40:A1:E2:6F:08:80:EC:E6:2D:5E:B7:12:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XRSPACE/MvRPLzP7EUCh4m8IgOzmLV63EvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MvRPLzP7EUCh4m8IgOzmLV63EvM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XRSPACE/MvRPLzP7EUCh4m8IgOzmLV63EvM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:5c:6f:e7:27:e3:a2:26:24:11:4a:21:6f:f0:2a:d2:48:
         05:e0:94:ad:c1:39:10:8f:f5:ce:a2:80:28:d6:48:de:b7:32:
         1e:c2:00:4d:c3:c2:94:c5:96:d6:b3:ef:9d:4b:72:5e:0a:a2:
         44:75:6d:f2:41:da:f4:81:6e:da:4a:ec:2e:c2:42:0d:ca:eb:
         94:b3:bd:73:8c:10:c0:a5:d9:84:bf:10:db:47:5b:5d:85:b4:
         84:ad:0f:29:61:f5:79:c6:ac:90:bd:40:12:1e:fe:81:33:29:
         0e:9d:d5:5a:fc:ac:a9:ea:73:4f:6a:55:62:d1:44:a5:ae:9e:
         3f:57:50:aa:82:33:85:44:ee:d9:65:3a:6e:1c:79:23:52:60:
         41:c7:06:42:bb:86:57:3b:5a:46:af:e8:94:b7:28:f8:b9:08:
         48:65:af:10:44:e0:fe:b1:75:fd:67:78:56:c2:f8:77:5e:26:
         e9:81:bc:34:45:92:da:9e:b5:f0:c6:07:af:58:92:12:64:d8:
         eb:34:6c:0e:d2:d9:bd:15:94:ff:0c:06:fd:1f:7d:e3:af:af:
         6e:f6:58:5c:a7:64:c5:88:f3:1c:42:92:1a:21:ef:fd:b8:84:
         04:07:9b:57:0a:bb:de:8d:c4:94:63:fd:ff:04:50:4c:84:54:
         1b:34:ba:7e
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzJG
NDRGMkYzM0ZCMTE0MEExRTI2RjA4ODBFQ0U2MkQ1RUI3MTJGMzAeFw0yMDEyMDMy
MTI1NTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJBRkY1NDBFMTQ4Q0NG
NUUzRDgyQkMwQjY0RDBDNEM5NEM0Qjg5RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqNNed9XOwR6OShMMKvrKJ3X0Hygab2Cy4gNG/v7d8OSfOZz8y
SkIcLeZpsfDIUu1Mqcy+wDo77pB7UKuLzrduW8SUVU44VMfRpQhAL0kzJOGmoNCT
xE2E1+FDNLKaYxPZmgLRkJ+pBTEV456NdkhiiwyASv7Fdjlj+Xcxgd54/+TUOSr3
4zK2xxjSS+b5O9FY7xTsVceIoxxmEQZi0rZQDxjuisyARWOIE4hsOHr0wBrD/XB6
lmRvG6enbWByLqsskNbncUy7fXjWQhUa5Z/D2ZzsswArsE0giIgzDWWX9oPdihKW
2bPgeHd0vAndIsFmVvgkHs8xTmGf7/ND8BQVAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUuv9UDhSMz149grwLZNDEyUxLie4wHwYDVR0jBBgwFoAUMvRPLzP7EUCh4m8I
gOzmLV63EvMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWFJTUEFD
RS9NdlJQTHpQN0VVQ2g0bThJZ096bUxWNjNFdk0uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL012UlBMelA3RVVDaDRtOElnT3ptTFY2M0V2TS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1hSU1BBQ0UvTXZSUEx6UDdFVUNoNG04
SWdPem1MVjYzRXZNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AKCGXG/nJ+OiJiQRSiFv8CrSSAXglK3BORCP9c6igCjWSN63Mh7CAE3DwpTFltaz
751Lcl4KokR1bfJB2vSBbtpK7C7CQg3K65SzvXOMEMCl2YS/ENtHW12FtIStDylh
9XnGrJC9QBIe/oEzKQ6d1Vr8rKnqc09qVWLRRKWunj9XUKqCM4VE7tllOm4ceSNS
YEHHBkK7hlc7Wkav6JS3KPi5CEhlrxBE4P6xdf1neFbC+HdeJumBvDRFktqetfDG
B69YkhJk2Os0bA7S2b0VlP8MBv0ffeOvr272WFynZMWI8xxCkhoh7/24hAQHm1cK
u96NxJRj/f8EUEyEVBs0un4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org