Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YLHEALTH/3j_jtCyLHYIBR2MiXRT8H5d_JUY.mft
File:                     3j_jtCyLHYIBR2MiXRT8H5d_JUY.mft (raw, json)
Hash identifier:          3JJYuipKMoW+YYcOVwnP9vfp59YPmiB5Sn/bCZtlY7E=
Subject key identifier:   0D:2A:90:B8:CD:57:C1:97:86:C8:CD:6F:F1:06:22:E0:42:84:9C:C8
Authority key identifier: DE:3F:E3:B4:2C:8B:1D:82:01:47:63:22:5D:14:FC:1F:97:7F:25:46
Certificate issuer:       /CN=DE3FE3B42C8B1D82014763225D14FC1F977F2546
Certificate serial:       0BD1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3j_jtCyLHYIBR2MiXRT8H5d_JUY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YLHEALTH/3j_jtCyLHYIBR2MiXRT8H5d_JUY.mft
Manifest number:          0BD1
Signing time:             Thu 03 Dec 2020 21:55:56 +0000
Manifest this update:     Thu 03 Dec 2020 21:55:56 +0000
Manifest next update:     Sat 05 Dec 2020 21:55:56 +0000
Files and hashes:         1: 3j_jtCyLHYIBR2MiXRT8H5d_JUY.crl (hash: QWbDkvx/q4yh0gqNAD2vhx+dlchrON/h6ZB2lWX/87Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3FE3B42C8B1D82014763225D14FC1F977F2546
        Validity
            Not Before: Dec  3 21:55:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0D2A90B8CD57C19786C8CD6FF10622E042849CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:c1:17:c7:43:71:5e:bd:a2:32:50:cb:df:
                    49:84:cd:1b:8a:d4:d7:a7:c0:a4:df:13:bf:7e:9d:
                    ef:6f:fc:0f:d1:c6:c4:c0:bf:65:87:7a:97:ee:48:
                    cf:12:03:61:6c:08:f9:eb:47:ee:6c:78:72:67:9a:
                    20:2b:94:27:c4:49:3f:f4:51:a3:6f:a7:ea:e1:bf:
                    81:ba:af:fa:4f:1c:c9:30:a8:3a:fb:84:02:ac:d9:
                    70:cf:84:45:06:4e:5c:2e:fc:9f:0d:de:ae:df:53:
                    44:13:d9:b2:4a:91:47:7f:74:a3:cb:0b:ba:8c:7b:
                    e2:1e:3b:c3:18:8b:9c:ca:3f:fd:6d:9d:4b:d4:19:
                    d1:d4:dd:07:3d:45:a0:7a:d8:b5:46:50:9d:0b:1f:
                    67:18:da:7f:96:7e:f7:2b:09:03:82:7a:ba:4a:1a:
                    2e:db:6d:b2:7d:5d:b6:73:4b:da:c6:d4:1f:bc:7e:
                    5b:c4:99:a0:4f:fe:00:24:53:8f:2a:f4:03:6f:1f:
                    23:3b:62:31:80:0a:c9:14:d9:4e:c4:95:7d:0f:61:
                    19:ec:03:7a:8b:66:fa:3e:29:30:a9:df:f5:48:9d:
                    6d:3c:97:2c:03:8c:ed:8b:fc:da:58:51:aa:78:89:
                    85:69:e5:12:bd:c0:2d:39:06:35:43:a9:08:44:21:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:90:B8:CD:57:C1:97:86:C8:CD:6F:F1:06:22:E0:42:84:9C:C8
            X509v3 Authority Key Identifier:
                keyid:DE:3F:E3:B4:2C:8B:1D:82:01:47:63:22:5D:14:FC:1F:97:7F:25:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YLHEALTH/3j_jtCyLHYIBR2MiXRT8H5d_JUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3j_jtCyLHYIBR2MiXRT8H5d_JUY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YLHEALTH/3j_jtCyLHYIBR2MiXRT8H5d_JUY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:00:cc:90:39:e8:44:c6:aa:f3:d0:af:e9:1e:98:ff:97:36:
         d7:1d:06:9f:bc:3f:4a:5a:aa:0d:0f:34:6c:eb:ec:a9:d7:46:
         38:bb:96:14:f6:bd:40:66:8f:b4:a3:a0:0b:ae:b8:32:a9:7d:
         73:2e:b3:73:70:7c:6b:ac:d1:ca:d6:07:ab:64:11:d4:ea:5a:
         86:8c:a2:f4:33:2a:b5:23:52:91:0f:a7:cf:7a:3a:e6:5e:5d:
         5c:74:90:87:06:01:d6:b5:6e:48:6a:c5:59:10:39:90:1b:82:
         e5:52:a3:a2:c9:6a:af:ad:a0:51:d0:d1:8e:d6:61:c3:3b:5e:
         75:02:db:1c:47:a8:e6:d5:82:d7:c5:8a:00:e1:bf:49:ca:f8:
         ee:16:b6:d8:88:33:6c:b3:9f:fa:1f:7a:5c:88:ff:68:cc:11:
         cc:8e:81:f1:49:2f:12:6d:06:f6:07:9e:02:48:e6:f0:7b:b1:
         51:c2:c9:23:35:87:b0:fb:2a:a7:12:f7:6a:ba:79:93:90:3c:
         c3:78:80:4c:3c:23:42:bf:68:10:a1:9a:86:1c:8c:54:4a:fd:
         ed:3e:ae:57:a9:f3:90:00:75:a7:b8:b7:03:fe:dd:b7:7d:75:
         39:5b:6c:97:60:27:e0:dd:ca:87:62:eb:8a:75:36:61:8f:39:
         04:f0:46:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org