Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/l8qtyEOarOxsKM9DPsnYvgxpxLE.mft
File:                     l8qtyEOarOxsKM9DPsnYvgxpxLE.mft (raw, json)
Hash identifier:          VkguA63qe2LIGa/uDCXft3+nmtjwZ4LzuA4CPvfeMew=
Subject key identifier:   40:4A:00:47:9E:52:4A:27:79:9F:AA:86:95:BF:7E:3B:A2:E2:96:2C
Authority key identifier: 97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1
Certificate issuer:       /CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
Certificate serial:       11FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/l8qtyEOarOxsKM9DPsnYvgxpxLE.mft
Manifest number:          11F5
Signing time:             Mon 11 Dec 2023 08:57:01 +0000
Manifest this update:     Mon 11 Dec 2023 08:57:01 +0000
Manifest next update:     Wed 13 Dec 2023 08:57:01 +0000
Files and hashes:         1: l8qtyEOarOxsKM9DPsnYvgxpxLE.crl (hash: gwa55UcuJodmyGD7zlhJzC/ABJI+qQyokTyF8Wzdcak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4604 (0x11fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
        Validity
            Not Before: Dec 11 08:57:01 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=404A00479E524A27799FAA8695BF7E3BA2E2962C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:1e:95:32:84:7e:01:06:84:f5:93:da:f9:
                    64:ac:81:e4:84:03:71:71:70:64:4c:d7:f7:8c:97:
                    12:ad:09:1b:0a:33:30:da:6f:44:d0:5f:fe:f7:18:
                    6a:08:34:7b:6b:d5:4b:49:af:9c:02:3d:38:7e:83:
                    31:42:24:b5:c3:13:b5:46:e8:37:36:50:b0:9c:45:
                    2e:65:a1:59:74:82:5c:05:a9:49:a1:d6:cf:75:9a:
                    0a:eb:ee:e7:b0:fc:0b:c3:4a:63:56:15:65:c1:3c:
                    d5:16:d7:5b:3e:70:d7:9b:b7:cb:26:1c:0e:ef:d2:
                    96:f7:37:05:86:4a:73:99:9e:25:6b:9c:92:d3:d8:
                    dc:5c:c4:9f:a7:82:1c:c9:c4:f2:04:b5:02:40:c6:
                    c9:da:99:6f:6d:02:eb:d1:0d:8c:ca:e6:af:9c:7e:
                    5a:08:cb:b4:82:11:f6:40:14:b9:e3:2c:1c:cf:02:
                    14:c5:7f:cf:54:17:2d:9c:f5:3c:cc:ea:d0:48:2c:
                    3a:58:a0:2a:cd:4d:95:86:28:69:61:50:47:36:7d:
                    3a:fc:44:a5:50:e5:be:de:34:e2:d3:13:7a:e4:be:
                    10:9d:6b:38:89:cd:75:10:78:0f:20:c7:0f:6a:6b:
                    ff:c8:4c:70:6e:a3:ba:8f:a4:49:4e:df:fa:09:43:
                    93:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:00:47:9E:52:4A:27:79:9F:AA:86:95:BF:7E:3B:A2:E2:96:2C
            X509v3 Authority Key Identifier:
                keyid:97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/l8qtyEOarOxsKM9DPsnYvgxpxLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/l8qtyEOarOxsKM9DPsnYvgxpxLE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8c:09:ac:f7:56:4b:68:e0:f8:26:df:b3:4f:ed:93:8d:5a:
         7b:e8:e0:8f:b6:df:90:35:2a:00:47:7c:45:c3:85:7f:71:12:
         58:78:5b:12:ed:e6:5c:74:67:42:be:99:6a:c3:5b:c4:e1:45:
         76:2d:63:2b:7f:3e:0a:06:60:8f:d6:24:36:f8:31:92:09:90:
         47:23:3e:56:ce:a4:97:f4:7e:93:ea:a8:d3:2f:53:d6:b6:72:
         27:fb:33:06:3a:87:93:25:15:10:a3:9b:86:22:7a:2a:85:2d:
         29:e1:e4:70:93:73:90:5b:66:7e:77:c4:9d:aa:44:bf:f2:55:
         e5:b4:a8:fa:17:1f:07:37:6d:bd:6d:f3:66:32:63:65:4f:9e:
         e6:ce:de:7b:b5:05:2b:cb:92:3c:65:cf:0d:71:d6:68:25:3a:
         2a:ad:2a:95:17:91:dc:3a:68:ec:5b:11:c3:97:b5:e9:53:a1:
         71:2d:32:71:f1:c1:e2:e6:36:c0:db:b2:af:c2:8a:d9:15:b6:
         06:2f:e4:0c:e5:e6:81:1c:7d:64:ea:28:9e:40:d4:8b:ac:7c:
         37:15:22:de:0f:27:81:fe:5d:1e:3f:0b:e1:ae:53:82:1e:85:
         3c:52:73:ce:3e:a7:74:0b:f4:7b:b5:14:28:7d:41:f1:f2:ec:
         9b:03:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----