Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft
File:                     KFWXNnKx7tcXYMCULCf9X3VpAZw.mft (raw, json)
Hash identifier:          gdE63/+Z1Smqw8ctyEvVDbh31dlzloAXyg7/xceAZQ8=
Subject key identifier:   48:61:35:D1:45:6F:92:C6:2E:B7:E6:74:57:A5:30:84:77:76:C6:95
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0CE7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft
Manifest number:          0C80
Signing time:             Thu 30 Jan 2025 19:08:15 +0000
Manifest this update:     Thu 30 Jan 2025 19:08:15 +0000
Manifest next update:     Sat 01 Feb 2025 19:08:15 +0000
Files and hashes:         1: -fNRK2zZ1HeNL99EUYrJaGE2wZY.roa (hash: Gmyeg6Nkhpm+U9ANuB/e70APrfQg+Q3wjKaz2ruRnFA=)
                          2: 4928uT7wdgERVQItdOtnWNW2sJU.roa (hash: h3G6nychiYCYTfFU2fCGrQyj6RV6HAzQQm2fmqzFt1g=)
                          3: EfYBvoJnOFWjxMAV2ZM41a_TAO4.roa (hash: soeTPzeaE5eZPzPzrXtOwh15B2dvjIMFWO0surbR1NE=)
                          4: JnOKZOTCF22KOaGQn9CKPCk-qRE.roa (hash: LcmP3YE2HEv5MRACEk2hX8A4cbbO7lUenuGArgXD0DQ=)
                          5: KFWXNnKx7tcXYMCULCf9X3VpAZw.crl (hash: GokQMAfONC5H0HZ6ZsXfeT1mKzcO23aQ6TVzWd3OA68=)
                          6: P4LjJcys7Jm2vaQN2Jp2a6g21-U.roa (hash: 1dj1/8mwzpmObmA9G1CH2hRlAnS7iZ5CxvnJfDG/e8s=)
                          7: T-3Y9-NjAINOK_Ze2SDL6jVr3dU.roa (hash: MZcIqkjjiB/VzKx1U4iU2Tw3gaCidvQcZoNkwMAOChQ=)
                          8: UiGTDz19VL1mu2TV03YmEu2Fl0c.roa (hash: EpVmIU34P2v5AVBll7yEm9IXKVSR9KcOiF/tH9SLtpw=)
                          9: ZdTcW671Tl_7R8ZzlxOnFrr7UJw.roa (hash: +G8XfPqkOeCysqKsWUxJqS9WFkdEKyEDHr6OZDUBZ3Y=)
                          10: iSeu9AHoljk2xueu_dMOEjVl0Lg.roa (hash: Zlb9YPp1KaRjkwxO+9ehitCQqAPx6qUjgiV8bAdOwg4=)
                          11: p2R3lstUw6v-w5Khh9KPSBj3GM8.roa (hash: iCRvGKn4MmTjI76+MdzUQc7uW0h8jwxEJxQcx1BLc+w=)
                          12: vyrLltdBW4MqIFD6K3Dkzp8vAgo.roa (hash: 00gSMzjRCG/Qi3WrVzSngzGCzXTQ3vaqK0osThBRUjo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Jan 30 19:08:15 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=486135D1456F92C62EB7E67457A530847776C695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:6d:85:51:20:07:e8:8c:54:8f:07:0d:1a:
                    14:6e:8f:d5:c2:1c:6f:c4:35:ec:96:fb:31:99:68:
                    dc:7e:1e:67:2f:00:b0:64:5e:b1:e9:44:7f:ed:8a:
                    98:95:64:f4:83:11:61:a7:05:82:ba:de:c7:e5:55:
                    c7:2e:cb:7d:f9:12:b0:b8:62:da:00:ab:8d:64:a1:
                    17:f2:00:4b:4c:90:72:9f:39:4c:81:61:23:91:84:
                    28:33:48:0e:e8:7a:a0:84:c5:0f:80:2f:9b:3a:e2:
                    44:ee:5c:14:d8:05:da:4f:39:07:2c:60:b8:78:30:
                    b9:00:05:34:26:87:99:d8:6e:0c:3a:a7:0f:08:27:
                    90:6d:b2:80:ec:25:a8:e1:22:7b:45:01:f4:e7:ba:
                    4e:75:f3:b0:e4:9d:78:a2:09:0f:c4:dd:a0:ff:a2:
                    d8:c4:8b:c8:fe:1d:dd:a3:26:6e:61:65:ef:50:76:
                    45:4f:20:fb:cf:e2:74:d7:9c:ea:fe:86:b6:3e:76:
                    6f:f8:b5:84:e9:4c:37:fa:92:db:f3:f2:c0:8d:67:
                    7a:f7:be:11:05:12:01:0c:b3:9a:1e:59:c5:40:c3:
                    79:3e:2e:96:d2:b9:bc:c2:99:11:23:6e:50:34:a9:
                    61:08:4e:67:ff:c0:04:08:1c:b5:c1:6c:a8:9d:60:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:61:35:D1:45:6F:92:C6:2E:B7:E6:74:57:A5:30:84:77:76:C6:95
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:df:33:ac:eb:98:fc:56:c0:4e:73:28:2f:58:d2:ae:28:
         fe:ba:dd:85:52:f2:50:70:43:19:b0:11:97:92:fb:53:64:2b:
         0e:ac:f5:f9:3e:56:47:e0:42:d8:9e:95:84:62:d3:a7:1b:17:
         9c:31:9b:c9:01:9f:50:63:19:65:bb:58:60:7f:c6:ed:7f:14:
         2b:b9:37:c1:c9:4a:3e:ba:d1:dd:92:1b:e2:cc:a9:5d:15:c4:
         5a:91:f8:0e:f5:1a:e0:9e:0a:e1:a5:fb:bb:c4:41:2d:8e:20:
         62:b1:87:a4:0f:4d:a1:d3:31:47:17:62:38:4d:75:d4:f6:18:
         14:2e:62:c7:4e:3b:be:61:e0:f2:a5:a9:15:63:c1:e1:b8:8f:
         f7:4d:f9:8c:43:2e:94:9c:e2:e4:92:de:ee:66:a5:47:d6:f6:
         46:96:ea:7e:5e:f0:e2:d8:92:47:5d:6d:ca:e5:ec:84:41:d5:
         1b:15:ec:1b:62:c7:16:5b:94:ec:7f:53:fb:09:c0:90:b9:15:
         2d:01:a2:1f:5c:6a:b3:be:91:66:7f:b6:f8:5b:23:da:7e:67:
         1c:42:c3:fb:ce:f0:9d:ad:e1:48:34:52:f5:22:20:57:8c:bc:
         2d:ba:4d:03:1f:0e:2b:92:1b:ec:b0:b4:4f:87:cf:32:0b:66:
         1e:06:3d:5b
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1
NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTAxMzAx
OTA4MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ4NjEzNUQxNDU2Rjky
QzYyRUI3RTY3NDU3QTUzMDg0Nzc3NkM2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2WG2FUSAH6IxUjwcNGhRuj9XCHG/ENeyW+zGZaNx+HmcvALBk
XrHpRH/tipiVZPSDEWGnBYK63sflVccuy335ErC4YtoAq41koRfyAEtMkHKfOUyB
YSORhCgzSA7oeqCExQ+AL5s64kTuXBTYBdpPOQcsYLh4MLkABTQmh5nYbgw6pw8I
J5BtsoDsJajhIntFAfTnuk5187DknXiiCQ/E3aD/otjEi8j+Hd2jJm5hZe9QdkVP
IPvP4nTXnOr+hrY+dm/4tYTpTDf6ktvz8sCNZ3r3vhEFEgEMs5oeWcVAw3k+LpbS
ubzCmREjblA0qWEITmf/wAQIHLXBbKidYOndAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUSGE10UVvksYut+Z0V6UwhHd2xpUwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU
LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t
Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vS0ZXWE5uS3g3
dGNYWU1DVUxDZjlYM1ZwQVp3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIw33zOs65j8VsBOcygvWNKuKP663YVS8lBwQxmwEZeS+1NkKw6s9fk+
VkfgQtielYRi06cbF5wxm8kBn1BjGWW7WGB/xu1/FCu5N8HJSj660d2SG+LMqV0V
xFqR+A71GuCeCuGl+7vEQS2OIGKxh6QPTaHTMUcXYjhNddT2GBQuYsdOO75h4PKl
qRVjweG4j/dN+YxDLpSc4uSS3u5mpUfW9kaW6n5e8OLYkkddbcrl7IRB1RsV7Bti
xxZblOx/U/sJwJC5FS0Boh9carO+kWZ/tvhbI9p+ZxxCw/vO8J2t4Ug0UvUiIFeM
vC26TQMfDiuSG+ywtE+HzzILZh4GPVs=
-----END CERTIFICATE-----