Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
File:                     XNEK1bakd108UE1mEHH4ziQ-KAc.mft (raw, json)
Hash identifier:          K1cr9pzwGw9X8rnaafYcABVHhhBOPZHeRC+gC+j2QdI=
Subject key identifier:   FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Certificate issuer:       /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial:       0C66
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
Manifest number:          0C43
Signing time:             Thu 30 Jan 2025 12:07:35 +0000
Manifest this update:     Thu 30 Jan 2025 12:07:34 +0000
Manifest next update:     Sat 01 Feb 2025 12:07:34 +0000
Files and hashes:         1: CXN3SEQDdgg4f7s6yo9LfHljuvo.roa (hash: In8X1E0QMWF1xcg6HVm0DHdcwBb653bxUWkck1ydCmM=)
                          2: KrVh04X7XNgtW2ny1P46iLAafho.roa (hash: EKJAbW3P+EOhB+9RWPB0e54cvVp8ecZzU6bYIg5ydBU=)
                          3: SUZLhumnWTaDTc86ysqYy3e1J9g.roa (hash: QGDHhT7kgDqhR6FAW7iOburt+9vLd0EAF9E5GWtlKQc=)
                          4: XNEK1bakd108UE1mEHH4ziQ-KAc.crl (hash: ziSpdNJmBkOC0TZwtLHeSCSriMYeCdX2h9z2JgjmCic=)
                          5: kTzY448QgTNhUElbM7IHjS8xBfQ.roa (hash: T1p6QfgAgOINOA8sStXRKvWQBmjQObe8lnuarM3Gik8=)
                          6: lBtnwfjZsqP1aqp96ElREiTUXCs.roa (hash: Zv/1M9HhIvF2HEUHZFbQj1ROQiH1qJOxAbRH6jA/wiY=)
                          7: qNVx5cOfYQ7UNbP0jNNQlsO8WwY.roa (hash: bYdRDPWLH7A5NallzasmOmpiri9bTLx46d6nUCowSAo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
        Validity
            Not Before: Jan 30 12:07:34 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FA3526779133AF500CEB1BBDB975CA67F893021E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:f0:ba:38:10:67:07:45:db:31:3e:c3:54:
                    90:bf:83:9b:2e:a7:bb:01:15:ec:64:d5:ac:2b:28:
                    33:68:4f:e2:e5:f3:cf:83:ae:a2:0f:c3:c3:3f:64:
                    13:ee:3d:86:a6:c6:99:50:ee:85:f4:24:de:71:be:
                    55:cd:34:6f:62:19:5f:71:bf:08:5e:07:d5:b8:1c:
                    0d:cf:90:db:f3:c0:33:ac:8c:55:f7:b5:dd:8f:34:
                    80:1f:48:b9:e8:92:39:8e:39:57:fe:02:36:1a:9c:
                    56:25:58:c9:5e:4d:69:d2:3a:77:a3:c2:83:a3:62:
                    48:dd:ba:8c:79:0c:b7:63:23:39:c8:60:8f:6b:7c:
                    a4:f5:1c:c7:db:5b:11:76:10:b2:49:e5:0a:9b:01:
                    12:48:97:08:6c:1c:47:5f:1f:82:bb:0a:44:09:2b:
                    01:b1:cd:74:8a:9b:c5:01:b8:57:6f:32:cf:d3:de:
                    19:46:e8:0f:b2:ed:68:6e:f8:96:39:09:e3:74:10:
                    cf:71:19:88:f6:32:47:0f:db:2b:41:c4:9c:69:ca:
                    76:72:f6:02:44:96:a0:11:7d:48:b6:47:18:39:5d:
                    c6:eb:d2:c1:fe:a8:49:5f:c4:e6:4d:3c:d9:6f:71:
                    05:30:8d:35:2e:77:b7:9d:e8:bc:a8:b0:af:09:01:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
            X509v3 Authority Key Identifier:
                keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:40:30:ca:54:30:f0:f2:41:f3:be:94:98:68:70:06:ff:15:
         47:2d:fe:de:66:a5:50:fb:3b:69:2b:7d:00:ae:7f:3e:07:38:
         c7:b7:63:7d:24:e1:87:2b:17:e1:bc:4b:a3:1c:2a:9d:06:22:
         64:f0:8c:8d:e7:07:1a:1d:5b:45:57:fc:b1:8e:70:3d:97:6e:
         fe:42:d0:ad:89:e7:07:85:48:dc:72:8c:1c:30:4e:e9:e9:04:
         4c:06:ee:db:6c:4e:e9:24:27:31:f0:fe:fa:f9:17:39:dd:2c:
         2c:dd:49:ad:f2:0f:94:ea:6f:ed:b8:4b:ee:72:1c:1e:b4:fc:
         ff:14:7d:e1:e9:be:f2:f5:6b:d7:9a:90:11:e7:f6:bf:f5:1a:
         e9:5e:d0:32:b0:04:62:4f:27:ec:1e:c8:33:96:60:03:fc:39:
         8e:3a:71:41:1c:da:c8:5e:cc:e4:61:9a:2d:12:1d:e5:07:69:
         36:4d:f9:95:ba:08:5d:5b:ac:53:b2:33:d0:a0:61:cc:e9:2f:
         3a:3f:17:7e:5b:d1:a5:36:86:50:8b:ce:cf:44:43:84:27:75:
         df:53:cb:55:02:67:72:22:28:d7:a9:b8:3f:09:3e:a2:f3:7e:
         b2:01:d7:42:78:00:49:2d:97:e7:5f:97:a0:0f:74:6b:50:cb:
         15:a1:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----