Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft
File:                     h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft (raw, json)
Hash identifier:          AeofDZERcy4ftR+cskWiPODmNRwXEc7McnTDMigRjfQ=
Subject key identifier:   EE:B9:32:DC:94:D9:37:CD:E4:9C:E1:3B:9F:03:6C:98:EC:16:6C:F1
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Certificate issuer:       /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial:       0C22
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft
Manifest number:          0BF5
Signing time:             Sat 18 May 2024 11:37:51 +0000
Manifest this update:     Sat 18 May 2024 11:37:51 +0000
Manifest next update:     Mon 20 May 2024 11:37:51 +0000
Files and hashes:         1: 7c7rtMmj_BUFlRml0ZN9TS7-sKM.roa (hash: FhsqCC0DP95KFQUFh+gK0ci8F2lx+1/S9Z25xH9X+p8=)
                          2: CklaCqmGIPJP3mFbg0IjdF1LhTw.roa (hash: ulPbRr3On3nJFWp4QZqF85/snKCTIVItSoR+ZqBgwVw=)
                          3: Eu4TP4KHi3EybNzdGnl8jW_Eewk.roa (hash: vIyD1ctT143N6Tt2ZYSE656PbOcW0BfenZBkyAtnkxM=)
                          4: JDfn2WGSZDzMaitI7Vc_QpnsCaU.roa (hash: ju3Yqmc4aEWJ4854iyZQUdideu9KWvJmPQYOXhGPTiE=)
                          5: MHWM_0n36hNFnKW_eqEbWqcqKn4.roa (hash: dlWrdpY3KH+XbFPBj9KDDY2LVy1KOANJbLhAc3URbdM=)
                          6: UQ9ACtbleKrBiwpcAogTxr4oU_E.roa (hash: 3nFpM3z3cvFAk7FMdz9wbAJZbdjw7CC/Odo4mBJX/Xs=)
                          7: c2cUVRnotY_ilCwnHZX4GLonW1s.roa (hash: OpVxOOJerNu/JkMMxria00jjo3cvhZwlHhm/0ESq/ig=)
                          8: f1YZDQOzFhKxczdDueX3o38aklY.roa (hash: RVG8KtLjpAN63hX7QJwTdOrXdl5zGSQh5Eu/+VeaZpQ=)
                          9: h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl (hash: rs0KCidR/f1eR+UZLQtskuzC55mcVQ3k69qGsPb7pvs=)
                          10: qLEAzk0wQBDkIJbW43oQNyIfKuY.roa (hash: 87dJdcACoISK7+2t1RQkRsR+GRKKJd2eDOX68v9WuYs=)
                          11: wjNEaK1rk_V7pMlm71SfFD9PQdk.roa (hash: uYqFviCjA/kLtd1WsaV/Qk7+n1IeZIyV0JDgP5+OfjM=)
                          12: yttbK_DC5UFZoBCBolAz6St3c3o.roa (hash: OznHN2KmCJlyCOVnTxw/xlt3geNLaWGlsF+vtGU6o+I=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 11:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
        Validity
            Not Before: May 18 11:37:51 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EEB932DC94D937CDE49CE13B9F036C98EC166CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:30:82:04:f9:78:9a:ed:15:cd:a4:5d:0d:
                    41:a9:40:f4:53:0e:c8:95:74:13:91:36:3c:3b:d1:
                    ad:0a:01:b6:0e:3b:7d:e9:ad:28:9d:1e:d6:0b:83:
                    2d:ee:e4:6f:12:6b:25:8f:cb:81:33:f8:b7:a3:51:
                    7c:dd:53:1c:d8:cc:11:4a:79:8e:9e:95:6a:11:3a:
                    0f:ef:d2:04:b9:4c:09:3a:e7:fa:03:1a:21:8d:91:
                    50:29:c8:cd:94:48:b2:ff:10:47:a2:2f:89:dc:58:
                    69:4e:30:53:86:d7:1e:6e:ac:26:9c:01:8f:da:ac:
                    4e:cf:f2:3e:3d:55:63:9d:74:ba:48:0b:49:36:a3:
                    5f:24:8b:2e:8f:ce:15:60:c7:1b:84:3a:f3:a8:1f:
                    0c:dd:be:89:fa:d2:14:66:c5:a3:5d:bc:fb:14:d6:
                    cf:80:69:4a:d9:8f:9b:9a:b0:b7:14:ae:69:d9:1a:
                    d2:e9:87:4a:32:a9:c2:f9:7e:a2:88:66:41:4a:9b:
                    43:6b:70:2d:d3:04:48:6f:f7:34:3b:18:f9:29:4b:
                    d1:95:67:8c:b2:60:0b:a5:cf:af:f0:bf:36:ce:3c:
                    ea:4f:f8:ff:e5:b1:7c:33:a2:af:a9:9d:fa:ae:a6:
                    e4:e2:2b:b8:ac:3d:23:65:3c:f3:be:fc:2d:db:af:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B9:32:DC:94:D9:37:CD:E4:9C:E1:3B:9F:03:6C:98:EC:16:6C:F1
            X509v3 Authority Key Identifier:
                keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:79:d6:e1:f3:6c:df:00:39:5f:94:b3:02:8b:d1:3c:3c:
         d4:be:15:22:b7:89:62:55:60:f3:15:a6:5a:bf:a2:60:d8:a5:
         81:95:65:15:e0:1f:f2:7a:05:87:e7:cf:78:f4:af:b4:5a:d0:
         f2:c7:b5:5d:af:f5:48:55:ae:be:a9:33:a3:f4:36:b8:2e:f8:
         5e:40:0d:09:b4:98:1f:0b:73:f5:2a:71:ae:1a:bd:34:14:a7:
         19:fc:64:14:2a:3b:1e:d5:2c:d8:6a:8f:96:a6:93:1b:fe:69:
         bf:c9:b3:45:d9:a5:f0:c1:37:a7:a8:f8:ae:33:68:ed:df:03:
         38:9e:70:20:cd:91:13:93:25:95:5d:02:e7:5a:48:47:20:cc:
         67:95:e7:89:59:f2:b1:68:48:38:7c:4c:c2:c6:10:4f:26:04:
         2d:d5:71:2a:ca:dc:e6:b1:1c:32:d0:72:52:b1:85:78:1f:c1:
         98:a4:be:a1:5b:5d:6b:57:e8:6d:ac:88:65:44:7e:64:e6:e2:
         16:32:c9:5e:ba:9f:24:d4:26:22:0e:ed:6d:21:4e:ef:b3:8b:
         aa:e1:1e:89:21:25:b9:f9:78:d6:8d:85:b5:8c:65:fb:ae:1e:
         b8:77:c3:a2:3e:e3:54:22:35:6d:35:f5:7d:ab:e8:9b:48:37:
         d2:0c:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:41:21 2024 by rpki-client on console-ams.rpki-client.org