Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
File:                     -fSkcv-ge6EOQvfO5h8gWsoWX24.mft (raw, json)
Hash identifier:          KOM987AcoCH81SJvq1TS3H+vz2Eh1D1xhd6Ysp9nOlw=
Subject key identifier:   CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
Authority key identifier: F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E
Certificate issuer:       /CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
Certificate serial:       20
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
Manifest number:          1F
Signing time:             Tue 03 Jun 2025 19:56:38 +0000
Manifest this update:     Tue 03 Jun 2025 19:56:38 +0000
Manifest next update:     Wed 04 Jun 2025 01:56:38 +0000
Files and hashes:         1: -fSkcv-ge6EOQvfO5h8gWsoWX24.crl (hash: Mr2fPqnQilcReg9e1yvuiYCyFR2FO1aZrPNi+KAqFCE=)
                          2: yXq5oQ7nFJQ5yALQG6FpwcUDWa4.roa (hash: 55pFUzL+IWkCC6IyhkEW284iG2JYr0CF/WpUMLF3piM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
        Validity
            Not Before: Jun  3 19:56:38 2025 GMT
            Not After : May 13 10:11:39 2026 GMT
        Subject: CN=CAAA6B3B5069218C57DC9251EDA2899A09B8C636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:a0:df:52:48:d7:64:10:9e:19:95:99:5e:
                    02:28:1a:b0:ea:60:22:10:07:c1:83:43:16:ac:ac:
                    40:13:43:65:15:93:02:f5:fc:76:d2:1e:f9:98:bf:
                    af:98:cc:c2:22:34:8f:bf:74:70:ff:95:a6:9b:da:
                    b4:4c:40:df:7e:a7:58:2a:06:96:d3:5b:6e:8b:8f:
                    d8:d7:45:04:68:68:68:73:c0:eb:18:10:93:69:ed:
                    bd:7b:e7:61:dc:a0:11:df:9a:66:bc:5e:bc:cc:f9:
                    d2:bc:c7:bf:84:99:14:59:a4:02:86:0d:a4:dd:73:
                    63:ea:df:a4:9a:23:1a:98:5e:1c:5c:79:96:3d:f1:
                    bb:97:fd:0f:c6:d2:04:19:5f:a4:c2:4c:6c:d6:0c:
                    21:e1:61:ae:a9:33:91:15:28:07:36:9f:8a:18:c8:
                    01:eb:4c:3c:56:36:ef:1b:1c:6c:19:36:db:81:02:
                    89:79:ba:09:11:a3:2c:c8:94:57:c5:45:87:1c:e3:
                    ff:7b:6b:46:73:64:ab:c1:a2:86:ab:5b:2d:2d:ca:
                    3c:56:31:7f:ad:62:e0:64:66:e3:e8:f5:1e:16:cd:
                    f1:66:9a:cb:76:2d:a0:a2:ff:7b:a8:39:db:fd:38:
                    96:99:18:2b:7b:ef:a8:20:d4:f4:0f:dd:42:6e:4a:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36
            X509v3 Authority Key Identifier:
                keyid:F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:e1:dd:8d:fd:93:10:b8:9a:b0:08:9a:44:c2:5d:74:ec:
         da:52:91:63:7c:70:f5:71:04:65:e7:ba:cf:d0:43:0f:d6:97:
         42:69:cd:ce:f4:d7:67:8e:cd:e3:b0:07:93:c7:9d:b3:e1:e4:
         50:26:2f:64:b6:c3:fb:98:e1:1a:d2:c9:11:e7:2b:16:ea:fc:
         b5:5b:01:1c:41:e7:3d:19:56:ee:10:17:43:fc:4a:87:2d:8c:
         34:16:73:cb:f1:a1:34:87:c8:36:d3:bd:65:09:5e:40:2d:cd:
         d1:1d:59:4d:13:c7:53:61:43:37:a4:75:8d:8d:6c:0b:73:0f:
         e8:3b:85:48:bf:40:f8:20:57:13:6e:31:9d:0a:cf:6e:f4:24:
         e9:93:c2:09:20:c7:5c:37:a5:5b:c2:0a:b5:fc:fb:99:45:ce:
         62:e7:d3:b8:e1:c7:f9:6b:99:f0:96:00:73:49:e2:dd:f9:ea:
         bd:b8:09:5a:6b:2e:22:71:67:ce:d3:36:88:a3:d9:69:9b:50:
         96:62:09:a8:18:a6:02:85:b4:3b:b4:a9:40:29:1e:39:f3:37:
         70:9b:08:70:32:4a:82:96:ed:53:fa:30:fc:f3:c7:93:40:62:
         d7:13:4a:c2:e4:73:03:15:10:1d:13:90:b9:c8:2c:81:18:1e:
         6c:a0:8b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:04:39 2025 by rpki-client