Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
File:                     639Ki3shDbkgjtWANXBF5Zcd4NM.mft (raw, json)
Hash identifier:          vDgZvytyq9vExOHZObgtDgD1h2Ie9FuDJ2fDamOYmKA=
Subject key identifier:   C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
Authority key identifier: EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3
Certificate issuer:       /CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
Certificate serial:       03EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
Manifest number:          03E7
Signing time:             Thu 30 Jan 2025 18:38:10 +0000
Manifest this update:     Thu 30 Jan 2025 18:38:10 +0000
Manifest next update:     Sat 01 Feb 2025 18:38:10 +0000
Files and hashes:         1: 639Ki3shDbkgjtWANXBF5Zcd4NM.crl (hash: jvzjJN511KHMYMV5/04D3uMrc184+RHC7ye++hgcOdo=)
                          2: cDSwcGlkTRVOcp66ltsl80JxIs8.roa (hash: d2ohgamgMDOVmL49SwU0n/62ccImoQhna/c3cnv9190=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
        Validity
            Not Before: Jan 30 18:38:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C6A29DDF6672B4B2BCE6751586815CB88C94C3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:fa:15:8c:15:9a:4d:1c:8b:ed:2f:a6:30:
                    71:6e:32:0a:3f:9e:03:fa:73:5b:3c:c1:6f:14:e8:
                    07:0c:56:1f:ee:4e:7e:71:31:a1:af:e5:b7:3d:c9:
                    ba:2e:17:47:e1:d0:f8:0e:22:06:73:6a:8e:5f:c4:
                    43:cb:58:6a:9a:a5:1f:08:b4:e1:bb:60:67:97:99:
                    93:b5:40:a2:41:02:0c:d3:99:cc:19:34:5c:4f:11:
                    d5:66:75:21:59:c9:34:34:d2:f5:ea:95:70:2a:9b:
                    12:bf:29:9a:66:58:be:b6:e6:61:56:10:ea:9e:87:
                    12:b4:44:1b:64:6c:a3:ad:8b:78:4d:4a:4e:fd:f7:
                    e9:a6:16:bb:20:7b:ac:33:37:49:bd:bd:18:b2:e6:
                    45:fe:8c:4f:08:e7:34:6f:b7:92:18:8f:74:1c:c9:
                    8d:11:e8:7a:b1:7a:ba:14:0d:5a:43:89:16:b6:75:
                    3f:5c:bc:c2:e7:13:53:47:12:1f:12:93:7d:90:bd:
                    3e:c3:6d:70:09:f5:e2:5f:5e:d0:03:49:6a:a9:8d:
                    07:7c:f1:2c:3b:a7:95:d3:09:df:93:b2:66:8e:2f:
                    06:30:cf:78:34:29:89:46:bc:f3:22:3a:b1:43:2d:
                    1d:71:8e:38:d8:67:db:b4:02:24:76:0f:76:15:e9:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
            X509v3 Authority Key Identifier:
                keyid:EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:d3:63:5f:a1:25:f0:9a:d3:af:00:d8:79:68:cf:c1:da:
         2b:16:25:6b:b7:2a:1f:34:bf:29:fd:71:a8:7b:8b:93:15:22:
         23:dd:dd:64:42:74:b9:2e:54:d5:cb:10:70:45:3e:d0:3a:fd:
         fb:56:7d:e7:3c:bf:47:d4:87:84:64:3a:26:ec:6c:ad:9d:ae:
         55:e2:a3:bc:4a:29:79:ea:91:eb:55:5b:58:43:c0:66:6e:a1:
         18:1c:8f:40:91:08:67:e1:5c:c7:57:61:00:ad:a2:68:2f:9a:
         54:f5:20:43:d8:0a:0b:4f:81:64:31:bb:da:97:bf:fd:94:fa:
         09:15:63:b9:4b:4a:51:f1:ba:88:df:13:94:ee:ac:7e:c9:37:
         fc:e1:2e:fb:c0:f3:d8:22:ac:5b:61:3d:29:81:ef:91:9c:6f:
         41:13:4f:75:bc:d3:55:29:7d:34:6f:56:04:a0:9e:4d:70:3b:
         8b:1b:86:2a:74:02:c1:0f:37:40:ad:ab:5f:62:6e:e0:fe:76:
         62:5a:58:d8:71:84:68:8c:91:9b:fe:59:a4:4c:99:75:19:40:
         cb:b6:af:47:7a:85:6c:bc:98:25:2d:9e:8f:06:f8:bf:ea:92:
         80:2c:4c:d7:6a:85:84:52:26:7c:b2:7b:6d:09:a5:6e:1f:88:
         3d:2b:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:56:24 2025 by rpki-client