Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUFENG/4PkrwcUj2DOzyCt7IGonr4HGCa8.mft
File:                     4PkrwcUj2DOzyCt7IGonr4HGCa8.mft (raw, json)
Hash identifier:          tX8YNpZWnYz8JDQOoZqVBDN0sOJT5TbVCok0vBgeGJI=
Subject key identifier:   09:24:8D:69:67:4C:37:C1:C9:78:B2:5E:6F:23:53:9D:5B:09:90:6E
Authority key identifier: E0:F9:2B:C1:C5:23:D8:33:B3:C8:2B:7B:20:6A:27:AF:81:C6:09:AF
Certificate issuer:       /CN=E0F92BC1C523D833B3C82B7B206A27AF81C609AF
Certificate serial:       0830
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4PkrwcUj2DOzyCt7IGonr4HGCa8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUFENG/4PkrwcUj2DOzyCt7IGonr4HGCa8.mft
Manifest number:          0830
Signing time:             Thu 03 Dec 2020 22:16:53 +0000
Manifest this update:     Thu 03 Dec 2020 22:16:53 +0000
Manifest next update:     Sat 05 Dec 2020 22:16:53 +0000
Files and hashes:         1: 4PkrwcUj2DOzyCt7IGonr4HGCa8.crl (hash: z0Bk86v0W2kfEGEKouSS1CctIjKGPvVtL5hedg4tZO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0F92BC1C523D833B3C82B7B206A27AF81C609AF
        Validity
            Not Before: Dec  3 22:16:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=09248D69674C37C1C978B25E6F23539D5B09906E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:2b:97:98:85:63:3f:87:51:39:6d:16:e0:
                    7e:df:f9:09:75:28:21:95:f9:de:0c:c1:a5:9e:b6:
                    4a:e6:68:fe:de:d2:e7:f6:70:96:41:62:1f:93:82:
                    f8:fd:2f:0e:a9:e6:ad:ee:6d:1a:de:5f:b8:59:cd:
                    69:b7:cf:42:35:de:09:89:62:ca:80:9d:ef:2b:26:
                    ad:e7:ba:32:06:49:46:32:88:b4:23:2b:6e:cf:8d:
                    4c:16:5c:4f:d8:2a:0a:1e:09:49:92:82:c3:05:eb:
                    a0:fa:d7:b7:a2:07:db:15:cc:8a:12:13:ad:71:6a:
                    43:de:1b:23:57:5e:5b:42:f7:fb:47:50:b1:89:29:
                    6d:ca:0a:fc:b9:23:a4:3e:6f:66:f9:2a:fe:a4:78:
                    81:66:40:29:1a:f4:87:2e:e8:f4:14:d2:a5:5a:bc:
                    37:b6:a2:71:97:79:22:da:4a:9f:f3:1a:4a:88:7c:
                    ef:28:2e:f0:bf:3e:f0:7f:46:be:b0:d6:aa:85:6d:
                    cb:1f:a5:31:9d:6a:60:07:f3:36:d0:aa:c8:cb:cf:
                    82:79:32:4b:49:e2:1d:f3:c5:d7:20:1f:d0:47:25:
                    9a:41:91:8f:0d:93:2b:34:85:ed:c1:83:86:8a:a9:
                    41:87:8e:eb:5d:cf:f4:30:c1:68:3a:a4:12:05:93:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:8D:69:67:4C:37:C1:C9:78:B2:5E:6F:23:53:9D:5B:09:90:6E
            X509v3 Authority Key Identifier:
                keyid:E0:F9:2B:C1:C5:23:D8:33:B3:C8:2B:7B:20:6A:27:AF:81:C6:09:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUFENG/4PkrwcUj2DOzyCt7IGonr4HGCa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4PkrwcUj2DOzyCt7IGonr4HGCa8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUFENG/4PkrwcUj2DOzyCt7IGonr4HGCa8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:2d:ab:cf:e3:1f:e2:8a:2d:7a:96:2d:ff:84:ba:fc:fb:e2:
         c7:18:b0:e2:e7:45:52:c5:23:c8:75:10:4f:0f:33:f0:3d:84:
         1d:d8:e4:1c:f2:bb:51:15:c2:97:16:19:bd:55:dc:b7:a3:d7:
         7d:b3:d0:e7:c5:f0:e6:6a:9d:76:b1:76:eb:f9:43:6f:24:16:
         5f:29:c9:26:cf:37:ef:77:b3:b1:85:0f:90:9f:1b:bd:35:bc:
         ef:e2:7f:9e:85:0b:26:93:66:8f:a8:1c:0a:30:4b:00:03:49:
         dc:4e:49:24:50:ce:ce:7a:ed:d9:ef:42:54:f6:f8:7d:63:f2:
         5c:46:c1:89:ba:bf:07:31:1c:76:ff:20:52:80:be:a9:fb:29:
         cc:05:cc:77:08:a8:b9:be:d7:00:0a:4f:8b:60:bf:73:00:b0:
         c2:68:5b:f5:04:0c:53:22:90:0f:02:80:ce:e0:1c:f7:a5:01:
         79:96:0e:78:ca:64:ff:5f:24:ef:1c:5f:4c:a1:63:7b:4a:ff:
         c4:4d:23:27:2d:12:43:09:55:ea:6b:89:a4:a4:58:b4:64:31:
         a9:d7:b4:e6:2b:dc:97:a5:1b:f0:dc:f2:45:5f:9c:59:6e:33:
         b7:f5:a3:9c:ca:50:f9:6e:ac:46:b2:91:02:d3:5f:ea:bf:4e:
         d2:98:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org