Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUNCHENG/5XpAfDA6nwu_MurqRMt2tTfUj7A.mft
File:                     5XpAfDA6nwu_MurqRMt2tTfUj7A.mft (raw, json)
Hash identifier:          XgK6968FcYB8JlHiFtMdCfoNUk5nTVJlkSXYGHCsFf4=
Subject key identifier:   0C:37:8E:E1:99:DB:88:4C:03:36:D6:D8:71:97:C7:0C:DE:14:BC:B9
Authority key identifier: E5:7A:40:7C:30:3A:9F:0B:BF:32:EA:EA:44:CB:76:B5:37:D4:8F:B0
Certificate issuer:       /CN=E57A407C303A9F0BBF32EAEA44CB76B537D48FB0
Certificate serial:       0B09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5XpAfDA6nwu_MurqRMt2tTfUj7A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUNCHENG/5XpAfDA6nwu_MurqRMt2tTfUj7A.mft
Manifest number:          0B06
Signing time:             Thu 03 Dec 2020 22:26:02 +0000
Manifest this update:     Thu 03 Dec 2020 22:26:02 +0000
Manifest next update:     Sat 05 Dec 2020 22:26:02 +0000
Files and hashes:         1: 5XpAfDA6nwu_MurqRMt2tTfUj7A.crl (hash: i/SajBz2h22y86sXn0BOtim/eabmmNUaEGXT6ef/G8Y=)
                          2: 8t74_9ulEzDDbrjcdPz7tR7gags.roa (hash: Vkl4jGvfqkJ87uWXXFQ4oYeKs4Fyuy9X5qjBBi66CGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2825 (0xb09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E57A407C303A9F0BBF32EAEA44CB76B537D48FB0
        Validity
            Not Before: Dec  3 22:26:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0C378EE199DB884C0336D6D87197C70CDE14BCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:f8:e9:a2:18:9a:30:41:3f:d9:0b:37:de:
                    e6:1a:16:98:9f:93:d3:7f:8e:6c:d0:e7:28:9f:52:
                    11:ef:05:36:97:b0:d6:24:55:3b:10:f2:43:b3:1e:
                    3c:6c:f3:cd:c9:05:71:73:57:8c:80:c2:fe:f4:86:
                    ec:61:9a:02:52:f3:eb:fd:26:8e:91:f9:1a:c4:c5:
                    18:36:d3:c5:07:a5:d8:bb:cc:db:9e:3a:71:07:d2:
                    56:34:d9:82:c0:44:8b:4f:73:f7:dd:62:cc:b9:eb:
                    c5:f3:69:e8:7d:c2:bc:5e:88:51:d0:25:3b:79:0d:
                    34:6c:ab:fb:a3:05:61:e2:cb:d7:b9:8d:ed:10:a9:
                    9a:a6:d5:95:32:7b:88:ec:f2:2d:41:a2:68:de:24:
                    22:97:aa:5e:44:10:81:dd:c9:8f:92:00:be:70:00:
                    1f:6d:99:b0:9a:34:84:3e:38:b1:d6:be:b8:f3:3a:
                    f3:c4:ed:73:0a:b3:25:e6:f9:5d:ba:7a:64:6b:27:
                    ba:f0:e3:15:46:11:37:9c:f5:52:b5:0b:2d:18:04:
                    61:d7:21:ac:1b:e8:5a:df:10:c6:7a:40:42:ee:1a:
                    d9:37:6f:4a:de:0a:40:fe:89:b7:7c:4e:f4:00:96:
                    9b:bf:68:21:ff:08:80:40:ca:ce:02:14:69:da:0f:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:8E:E1:99:DB:88:4C:03:36:D6:D8:71:97:C7:0C:DE:14:BC:B9
            X509v3 Authority Key Identifier:
                keyid:E5:7A:40:7C:30:3A:9F:0B:BF:32:EA:EA:44:CB:76:B5:37:D4:8F:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUNCHENG/5XpAfDA6nwu_MurqRMt2tTfUj7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5XpAfDA6nwu_MurqRMt2tTfUj7A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUNCHENG/5XpAfDA6nwu_MurqRMt2tTfUj7A.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ad:6d:79:0d:4f:1c:b9:3a:d1:16:3b:9e:c9:6e:d6:1c:ef:
         d6:56:5e:56:e5:6f:b1:00:27:99:47:3b:d4:e0:55:22:39:ce:
         b1:a8:00:1f:62:d0:b8:a2:3c:b8:46:20:c8:66:f8:45:6c:85:
         f5:d8:41:9a:e4:3d:89:a3:a0:46:e8:33:10:fb:f9:ec:65:8a:
         db:e2:26:21:8f:fa:5b:63:78:35:95:a3:bc:f4:d8:24:a3:7c:
         00:d6:d5:dc:5e:f2:f6:d6:47:76:12:9a:4c:f7:34:12:df:23:
         ec:74:b3:76:7b:bc:73:43:54:6a:7c:16:4a:11:e4:48:8c:ad:
         ed:5e:49:ed:67:93:aa:33:29:be:5b:fe:d5:27:81:eb:40:fe:
         18:be:a2:ff:c9:c7:52:52:3f:a2:65:c2:1d:64:41:e6:26:9a:
         81:50:a4:32:a2:8d:87:2b:fc:08:2c:17:ee:e4:dc:40:45:78:
         fc:31:f8:35:18:b9:6d:1f:39:70:b2:b0:85:ba:93:08:15:7d:
         17:74:cb:8d:c5:38:53:25:c0:a3:aa:9b:60:c2:42:c6:d3:6f:
         4a:0f:5b:4c:77:92:67:bc:99:ae:8c:a6:75:05:23:a8:09:d0:
         8b:3a:96:09:c3:6b:34:07:71:10:b6:5f:ce:ae:4d:ca:b6:c4:
         04:81:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----