Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YICO/z2pBlfch5bzqe20Nz2_MDSXeypU.mft
File:                     z2pBlfch5bzqe20Nz2_MDSXeypU.mft (raw, json)
Hash identifier:          Xo24NOLlkTT2wv1sGWdIzg6PszM03mUDvyg1OVz+q30=
Subject key identifier:   47:27:3C:B6:DE:59:50:1C:DA:39:FD:12:A4:E5:DE:CC:2E:BE:D4:68
Authority key identifier: CF:6A:41:95:F7:21:E5:BC:EA:7B:6D:0D:CF:6F:CC:0D:25:DE:CA:95
Certificate issuer:       /CN=CF6A4195F721E5BCEA7B6D0DCF6FCC0D25DECA95
Certificate serial:       0EF7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/z2pBlfch5bzqe20Nz2_MDSXeypU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YICO/z2pBlfch5bzqe20Nz2_MDSXeypU.mft
Manifest number:          0EF7
Signing time:             Thu 03 Dec 2020 21:46:07 +0000
Manifest this update:     Thu 03 Dec 2020 21:46:07 +0000
Manifest next update:     Sat 05 Dec 2020 21:46:07 +0000
Files and hashes:         1: z2pBlfch5bzqe20Nz2_MDSXeypU.crl (hash: Wf8e1nZN7vQAdLKBahdtq+Fp9LXyhZIQIWr7AVdlD54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3831 (0xef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF6A4195F721E5BCEA7B6D0DCF6FCC0D25DECA95
        Validity
            Not Before: Dec  3 21:46:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=47273CB6DE59501CDA39FD12A4E5DECC2EBED468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:5f:c8:10:34:f3:92:50:e1:34:9e:fc:3b:
                    4f:8d:b8:cd:2a:e3:78:40:7c:55:87:00:5e:a8:47:
                    6e:ee:b5:a3:2b:f5:a1:fc:3c:6d:5a:e9:80:70:b0:
                    64:44:cf:c3:18:3f:76:be:2f:50:e9:bf:5f:40:b9:
                    6c:e7:00:4a:3f:4d:68:1f:eb:7b:00:a5:9e:84:09:
                    fd:a0:f1:ab:0b:b8:5f:bb:69:8a:61:6b:af:b4:3a:
                    5d:e5:69:89:38:ec:f8:2d:a3:d9:c5:01:6c:12:27:
                    c0:31:17:03:db:2a:29:50:83:01:2a:20:c8:ca:39:
                    08:0c:80:66:8f:fe:2c:ee:de:bb:74:f5:d5:fc:16:
                    e5:eb:44:32:13:24:05:55:43:19:93:c0:6f:11:aa:
                    db:be:69:2a:8f:6c:42:c2:3f:73:26:ac:ef:b5:85:
                    d8:18:ed:8f:a5:f1:a7:4e:f1:64:ef:60:44:d7:c4:
                    d6:7b:18:02:35:74:f7:e1:01:8b:fe:8a:c6:48:97:
                    02:c4:03:5d:63:98:9e:19:92:03:4c:ee:5a:e3:fb:
                    50:f1:58:a2:ca:44:7f:1a:23:2b:64:c3:95:9e:67:
                    43:20:5c:91:b9:f3:64:f0:1a:9d:f5:db:3c:25:3e:
                    25:18:db:ba:e7:dc:35:b0:d3:c7:b0:fe:37:12:a7:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:27:3C:B6:DE:59:50:1C:DA:39:FD:12:A4:E5:DE:CC:2E:BE:D4:68
            X509v3 Authority Key Identifier:
                keyid:CF:6A:41:95:F7:21:E5:BC:EA:7B:6D:0D:CF:6F:CC:0D:25:DE:CA:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YICO/z2pBlfch5bzqe20Nz2_MDSXeypU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/z2pBlfch5bzqe20Nz2_MDSXeypU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YICO/z2pBlfch5bzqe20Nz2_MDSXeypU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2e:b5:92:bc:70:13:e6:e5:41:e7:19:90:8f:73:49:9f:bb:
         d0:6c:0d:29:71:86:1c:4a:a1:e3:10:43:fb:d7:e4:5c:53:bc:
         fd:b3:1f:41:75:e3:6b:cb:b4:6e:f9:ad:6c:48:4c:d1:73:f3:
         34:ad:4a:0e:85:25:29:97:19:94:2c:14:b8:d3:25:c3:91:d6:
         15:1d:19:f6:42:77:0d:20:cb:3d:41:9e:eb:9d:79:39:a2:d2:
         b6:14:c5:f8:bc:7b:ae:7e:88:31:22:22:15:14:82:ce:6a:88:
         9d:ea:d8:3a:6c:3f:e2:db:21:77:3f:10:84:4e:55:1a:0c:cb:
         13:00:43:5f:14:1d:d3:42:1e:14:36:39:42:fd:cf:23:54:80:
         d7:aa:4f:87:85:53:f1:50:f1:56:36:cf:4e:30:8a:08:86:51:
         60:52:c5:90:af:73:5b:de:4d:7b:e5:74:03:1f:aa:3f:31:02:
         dc:dc:28:09:ce:ba:37:c0:60:8d:0f:b7:f3:b2:20:ac:93:fc:
         5b:39:f8:75:f5:a6:95:5d:37:2e:8b:fe:38:d3:5f:53:b3:05:
         a1:db:45:f5:4c:a0:af:04:eb:6b:f5:d8:3e:75:86:9e:7b:ed:
         d4:db:3d:26:6c:1c:f7:1c:33:8e:b2:da:92:84:da:04:62:59:
         38:df:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----