Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
File:                     Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json)
Hash identifier:          EO0ngNE8WYdQhJTV8qoBJcq5JSppkKmgmp/GhtcSHCY=
Subject key identifier:   BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       0F76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
Manifest number:          0F6E
Signing time:             Thu 21 Nov 2024 06:54:50 +0000
Manifest this update:     Thu 21 Nov 2024 06:54:50 +0000
Manifest next update:     Sat 23 Nov 2024 06:54:50 +0000
Files and hashes:         1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: hauYMqhSWz7HvlDb/X+IU8z+iloKTqSKOvhgt0uMaSI=)
                          2: olRGVNao7ukqWNth7suSau0xNa4.roa (hash: aaVvBIWkYh6mF9JgUq77aJ2HCevxxzfAE1Skgbqe8KI=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3958 (0xf76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Nov 21 06:54:50 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87:
                    39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec:
                    c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b:
                    ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f:
                    fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92:
                    13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74:
                    15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1:
                    9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55:
                    ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a:
                    92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68:
                    82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0:
                    99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e:
                    39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3:
                    c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf:
                    02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29:
                    08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f:
                    80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:bf:37:e0:ac:f1:d3:90:61:11:f3:ac:e4:7e:13:42:20:
         e2:f2:cc:d3:ee:e3:69:ff:ac:f9:c3:ec:fc:77:fc:e6:b2:9a:
         33:68:36:e7:e8:88:48:1b:18:7a:15:4a:b2:e1:3c:35:98:60:
         75:f1:8c:0d:ae:d4:ed:91:e8:86:c7:39:e7:78:e9:70:c7:80:
         97:28:89:81:5c:2a:a7:87:e0:48:7a:38:bb:e6:36:1f:81:05:
         3f:ff:8d:cf:0a:d6:c6:84:a5:11:b5:94:2b:88:df:45:0c:17:
         3b:ec:e9:35:9d:18:6f:06:1c:d5:0c:ab:89:9e:fa:72:de:e2:
         fe:57:b9:1e:73:9b:36:88:c7:90:39:1e:34:13:b0:fb:89:78:
         b6:8d:05:ac:f2:ae:2a:46:ea:6e:24:6b:4a:6a:5b:de:c5:3d:
         8d:d7:7f:6b:8b:d9:99:f0:cb:06:b1:4f:b5:88:33:f1:4a:a4:
         b9:ac:9b:21:cf:c2:eb:b7:8a:5a:c5:f8:d5:bf:33:20:3e:81:
         1d:2f:8a:57:83:ea:85:e7:ae:f1:c3:34:63:71:e8:95:3e:ca:
         be:ae:6a:79:41:27:09:2f:1d:74:47:ff:02:a0:81:cc:7c:a1:
         12:24:55:f7:74:3c:e4:88:4a:a6:14:4e:f9:87:86:f0:df:4b:
         99:14:93:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org