Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
File:                     JxbruJW8hEeVpoTJZz6pgRRXdc4.mft (raw, json)
Hash identifier:          JgszPW1V4Ac06zqnl/5R3bBKxq59dezws2+s35XDgqU=
Subject key identifier:   56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Certificate issuer:       /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial:       03F2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
Manifest number:          03F1
Signing time:             Fri 31 Jan 2025 09:37:51 +0000
Manifest this update:     Fri 31 Jan 2025 09:37:51 +0000
Manifest next update:     Sun 02 Feb 2025 09:37:51 +0000
Files and hashes:         1: JxbruJW8hEeVpoTJZz6pgRRXdc4.crl (hash: 0ZP4tQpUfg4KXQ2x+F7ysVKcAUpM38BA08SBJnzAyPM=)
                          2: xwloUzXf_HHw60mpF_ms9dQexoM.roa (hash: 0tJY2t190BR924PQumDbjYQz0vOydW8pcpOm1AnV59s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
        Validity
            Not Before: Jan 31 09:37:51 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=56A4BE2268D3D282D085473FC7351D966A184FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:cb:7c:90:bd:b6:b2:7a:48:54:71:04:b7:
                    3e:2e:49:a6:9d:3f:d3:85:37:64:a5:40:b5:2c:c6:
                    81:54:53:ce:bd:89:47:da:54:ab:66:b6:52:2d:09:
                    cd:d8:91:e1:ad:15:5c:eb:46:33:c1:73:5b:90:6d:
                    68:d9:42:92:de:6d:4d:b2:38:07:32:f6:6e:69:e5:
                    c9:50:49:70:51:ae:27:ce:be:ef:3b:aa:84:ba:7d:
                    87:e4:ad:10:22:c1:8a:f7:0f:83:ba:36:1d:b1:68:
                    2c:86:0b:f7:db:fb:0b:e3:e9:df:9c:42:65:a3:5a:
                    78:b7:07:92:0d:73:ac:2b:a7:40:9c:bc:4f:63:77:
                    80:ba:d4:61:65:e5:3b:be:d7:68:27:81:29:4e:5e:
                    c1:4c:cc:3c:3a:f5:ec:f0:6b:c7:28:70:17:b0:ba:
                    a2:35:9a:d9:62:15:c7:09:4e:da:c0:7e:38:a0:60:
                    67:a6:32:cb:cc:9f:c3:50:4f:17:c5:68:29:ca:7f:
                    4c:be:71:c1:5a:2c:56:e1:81:f0:c5:c4:b7:87:83:
                    2b:d6:53:44:8f:1a:3a:25:09:d0:e1:82:1e:06:77:
                    b3:6f:b4:a5:fd:b8:f1:ec:98:e4:d6:af:1f:55:32:
                    2b:e2:ae:fc:39:7c:36:dd:15:36:17:31:12:f0:6f:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
            X509v3 Authority Key Identifier:
                keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:16:0e:14:38:fa:c2:4e:ea:14:b4:3d:9d:46:29:1c:58:
         da:80:9c:8d:c4:a9:41:48:ff:7a:05:7c:68:34:be:56:dd:7e:
         c1:da:c1:03:51:36:88:4e:b8:6e:de:d9:37:b7:0a:c6:e2:45:
         90:68:ca:4d:5f:b6:5b:19:bb:08:79:c5:ef:42:cb:bd:8d:89:
         54:79:92:0d:0f:59:c4:ba:63:18:89:37:6c:f7:1b:6f:50:bb:
         bc:70:94:7f:21:b4:4b:30:51:d3:ef:f7:86:07:ba:99:b6:da:
         b4:96:2d:c7:49:d5:6f:05:41:bd:f0:09:59:f5:98:75:76:be:
         1b:84:06:74:e9:63:c6:ad:08:1c:1e:d7:72:4b:7f:4a:41:a0:
         14:b0:c2:be:06:6f:ec:78:29:62:0b:7b:5e:3e:df:ab:40:8a:
         ce:8e:49:54:fe:57:5b:8b:4b:6a:e0:0f:f8:80:1f:39:5a:36:
         8a:74:b1:28:6c:f1:bd:04:68:62:3e:4f:62:e9:cd:f1:80:28:
         8e:e1:b3:5b:22:5f:f8:59:c3:a4:f2:42:45:5c:f3:73:b7:64:
         7f:88:d9:bf:dd:ee:22:b8:16:ba:9e:1d:13:0f:c2:a0:c2:b6:
         98:dd:68:a4:f7:fe:4c:5d:d4:74:e8:d8:77:2a:ff:c4:8e:16:
         02:55:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:13:10 2025 by rpki-client