Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft
File:                     _E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft (raw, json)
Hash identifier:          iBXagO85JMTeicU5GcV2wHGL3zYP6vLAMBFWYnP0Xu4=
Subject key identifier:   43:4D:FC:4B:07:1D:51:02:6F:2A:B1:E4:9F:FB:DA:8C:E4:DE:03:A1
Authority key identifier: FC:4F:89:8B:A4:80:D8:0D:04:A4:8A:6C:7E:39:A7:21:CA:AB:4B:47
Certificate issuer:       /CN=FC4F898BA480D80D04A48A6C7E39A721CAAB4B47
Certificate serial:       09D4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft
Manifest number:          09D4
Signing time:             Thu 30 Jan 2025 17:08:51 +0000
Manifest this update:     Thu 30 Jan 2025 17:08:51 +0000
Manifest next update:     Sat 01 Feb 2025 17:08:51 +0000
Files and hashes:         1: _E-Ji6SA2A0EpIpsfjmnIcqrS0c.crl (hash: IzOu6P6ndz+GYZ6gpNRkxADPYTZ8AUfcSk1LSFyZxfM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4F898BA480D80D04A48A6C7E39A721CAAB4B47
        Validity
            Not Before: Jan 30 17:08:51 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=434DFC4B071D51026F2AB1E49FFBDA8CE4DE03A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:1b:70:17:cd:31:d5:7e:04:bd:7e:bf:cb:
                    c9:dc:92:b0:12:9c:dd:d1:25:7f:8b:55:a4:da:82:
                    65:fe:81:d6:7d:92:4f:ae:9c:99:69:99:32:bf:a6:
                    85:15:6a:43:a9:94:79:99:d6:fc:f3:c2:5b:f7:5c:
                    6e:b8:71:4d:fa:b2:2d:65:ab:00:66:2f:6e:77:d1:
                    75:64:88:c0:f5:70:57:d2:fc:fe:87:d8:2b:93:e1:
                    26:e7:ad:96:65:f7:46:cb:9c:f9:4b:21:e5:6f:f3:
                    9b:3f:b8:aa:fb:ec:f7:55:ec:b2:b3:54:de:a4:fe:
                    12:e0:ae:c1:2d:a9:06:e5:ae:c9:74:a5:94:2e:1e:
                    2c:a7:6e:4f:95:53:89:83:52:7d:2a:f3:9a:1b:f9:
                    45:f8:9b:f9:49:c9:b8:d9:d7:20:8c:c9:7d:21:8a:
                    65:ab:3a:05:54:7b:ab:4a:db:a6:33:f9:b5:35:da:
                    86:aa:e0:60:79:67:d8:3b:d2:fd:29:b4:11:e8:18:
                    25:d4:01:f7:31:59:ff:30:cc:73:73:97:79:a9:5b:
                    9c:73:46:f7:2a:5e:8a:b6:84:27:19:5f:f9:f3:3d:
                    5c:69:35:90:da:be:cf:9a:34:20:8e:67:2f:d4:92:
                    86:e4:93:9f:f6:b1:bf:74:d6:94:8a:5c:d9:32:a0:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4D:FC:4B:07:1D:51:02:6F:2A:B1:E4:9F:FB:DA:8C:E4:DE:03:A1
            X509v3 Authority Key Identifier:
                keyid:FC:4F:89:8B:A4:80:D8:0D:04:A4:8A:6C:7E:39:A7:21:CA:AB:4B:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:58:55:9e:9f:7a:19:b8:cc:e2:d5:23:f4:7d:5a:c3:a4:
         4d:6c:92:40:d5:aa:01:0b:6c:12:8a:2d:bc:3d:f4:b0:15:6b:
         55:b9:07:00:26:7b:4a:59:96:ea:1d:71:ae:b1:04:b9:2b:22:
         d8:57:65:e9:90:53:7c:63:70:a4:b7:eb:b4:c6:47:96:b2:e5:
         7f:20:28:6d:aa:27:92:3d:27:b1:d9:b2:ba:f6:f9:f5:f8:28:
         5e:ee:d5:32:d7:55:40:b6:73:4d:99:89:46:87:31:c6:db:2b:
         52:5f:19:9b:dd:bb:20:37:bb:30:34:27:a2:fc:ee:93:d0:19:
         ba:8c:2d:60:3d:0b:73:21:15:a3:55:2c:71:be:99:11:ef:b7:
         72:a7:c5:53:5f:05:3b:e0:e5:8b:d4:f5:93:e4:6c:2d:73:1b:
         2a:91:30:fd:1f:df:aa:a5:6b:63:87:78:f3:1a:bf:32:1c:eb:
         b0:8f:80:2f:5d:aa:3f:3b:c4:d3:a6:32:bc:2a:0f:01:e9:26:
         6a:69:fc:6b:ce:0e:b8:8f:47:36:f2:21:76:31:4e:b3:2c:f9:
         e3:8b:8c:8b:09:c7:aa:2f:5d:9f:01:b9:38:a8:d5:c7:81:a1:
         53:2e:03:46:2a:ea:95:81:08:d2:c0:fe:55:0b:6b:e3:b3:74:
         2b:c0:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:22:47 2025 by rpki-client