Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
File:                     PCrYZxs3UyZShtMuRr8G_fUtD-8.mft (raw, json)
Hash identifier:          Q3kLKWLUf80RWybN7GyISVu6fpFoK0TkRWCbw8jwYTk=
Subject key identifier:   76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Certificate issuer:       /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial:       0203
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
Manifest number:          01FE
Signing time:             Sun 24 Nov 2024 06:25:06 +0000
Manifest this update:     Sun 24 Nov 2024 06:25:06 +0000
Manifest next update:     Tue 26 Nov 2024 06:25:06 +0000
Files and hashes:         1: 44WFMZu7QnBJbcCOnly8dU4_5ok.roa (hash: t40ZXBP+zICsF6a7GWgiLSCENDjazgSzNAVWuB5pGbw=)
                          2: PCrYZxs3UyZShtMuRr8G_fUtD-8.crl (hash: eOHx4sC3t0FCaCWG9HQ5ZVcBH/mA92IqaoWjHWpUqrk=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
        Validity
            Not Before: Nov 24 06:25:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=76BB26BD00993C78EA62C532BDD1104EF089A99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:9b:29:82:5c:1a:05:af:23:b8:27:e6:c1:
                    84:f3:b9:cd:23:f4:86:c3:4d:32:41:0a:3c:2f:e5:
                    9d:62:39:23:6b:a0:e1:15:7e:e5:48:d2:62:f6:ca:
                    78:19:aa:b9:80:be:d4:ce:33:ab:fe:76:2c:03:53:
                    ce:d7:f4:e8:91:77:68:52:54:af:1e:3b:05:57:11:
                    f6:6d:0a:91:f6:9a:8c:a5:9e:e1:1d:5f:9f:e7:f8:
                    7f:3b:99:58:c4:c1:76:09:b9:ca:68:ef:55:5a:c6:
                    22:cb:b4:11:e5:fa:e9:76:06:78:6a:ee:38:d7:73:
                    a2:16:b1:d4:d1:2b:75:db:df:26:77:4f:40:06:86:
                    c0:f8:17:92:1d:4a:e6:b8:aa:92:01:c1:f6:fa:8a:
                    5d:93:20:eb:c7:0b:3a:7a:dc:b7:a7:6e:7d:fc:b4:
                    3f:87:39:f6:48:94:0e:fd:44:ba:84:a3:ba:c2:f3:
                    1d:7d:ad:f6:d9:e0:be:c8:bc:c3:52:75:94:cf:ce:
                    d4:0a:c2:f8:bf:20:18:14:bc:3e:6b:f4:d9:42:ea:
                    db:23:cd:68:fe:b1:ce:dd:b1:39:92:67:e0:4f:bf:
                    15:40:34:71:89:1e:83:64:d7:f4:06:80:c3:fa:84:
                    cc:58:b0:eb:43:d3:d5:9f:6a:f9:40:01:c4:54:00:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:26:BD:00:99:3C:78:EA:62:C5:32:BD:D1:10:4E:F0:89:A9:9E
            X509v3 Authority Key Identifier:
                keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cc:98:bf:9f:14:b8:58:af:4b:14:ad:82:22:6c:ac:89:d8:
         b4:59:97:a3:b7:b9:74:e7:23:56:f7:54:4c:88:ef:1d:62:eb:
         80:d8:2d:a6:ce:2c:43:57:7b:a0:88:9f:0f:11:88:5c:0c:23:
         c6:01:f5:88:d7:80:2a:d9:1b:a2:6a:24:7b:4b:7d:82:c0:d8:
         c6:4f:af:7b:c3:0a:11:df:78:6b:39:e8:2c:e5:95:98:fc:e2:
         0a:2b:54:e3:66:69:f7:33:dd:8a:21:a2:68:41:ed:fe:cc:16:
         95:15:00:88:45:87:34:4d:5d:bc:3b:78:f1:97:96:98:a9:53:
         9f:f6:c7:ca:15:de:27:a8:64:b0:7d:ad:c2:3b:4d:81:fc:ec:
         67:5f:1c:36:b4:2b:92:53:9b:ee:ee:37:b1:68:d3:f4:bd:0a:
         8c:95:c4:6f:61:cd:03:c5:8b:94:b1:d0:41:f5:00:bf:36:f4:
         56:b1:46:64:91:29:e5:3b:91:42:af:bf:f2:73:78:a5:4a:52:
         dc:f9:ee:31:02:fb:3b:a5:ae:3f:cf:6a:be:c9:e8:2a:f6:1a:
         c8:ce:b4:41:f4:ca:40:91:e8:82:cc:76:ff:86:97:a3:9f:e4:
         cc:93:df:dd:e8:3e:d1:de:29:73:4f:13:48:9b:da:c7:09:75:
         ce:3c:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:27 2024 by rpki-client on console-ams.rpki-client.org