Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
File:                     IsUSmNl6ECkCcx_cSb36s51Sqys.mft (raw, json)
Hash identifier:          P6aXi/YF7b/j9aBBQI4K8UaFc9KS1cZyRYrzQXYAfrw=
Subject key identifier:   90:9E:A4:E6:27:3D:85:BE:13:8C:CD:AB:C3:E0:C0:16:F0:39:30:DB
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Certificate issuer:       /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial:       031B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
Manifest number:          0310
Signing time:             Fri 31 Jan 2025 07:07:36 +0000
Manifest this update:     Fri 31 Jan 2025 07:07:36 +0000
Manifest next update:     Sun 02 Feb 2025 07:07:36 +0000
Files and hashes:         1: IsUSmNl6ECkCcx_cSb36s51Sqys.crl (hash: l2yFWx+O0Z2qrKPxoWz1iIfbFKCnlWRbgwuZo1XKh3Q=)
                          2: aM5VB07LCzTwgo2pwLz4cSH4Q40.roa (hash: RaZStbPqLBDRD86ZzZdCrOlYKsccyBuYh+Avp1rSQ4Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
        Validity
            Not Before: Jan 31 07:07:36 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=909EA4E6273D85BE138CCDABC3E0C016F03930DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:d6:62:d8:73:41:fe:f5:98:39:77:cb:58:
                    c3:45:24:7c:ad:91:c7:3e:22:28:90:28:89:bf:76:
                    1f:28:22:21:fa:e0:5c:d0:f2:2c:28:12:ef:40:44:
                    f8:0e:70:58:7d:9d:99:bc:ac:a4:76:78:8f:d9:9b:
                    d7:99:94:06:7d:e4:01:11:3b:30:3c:88:f0:83:f1:
                    07:85:55:b3:16:a5:54:32:e4:25:26:2b:f7:44:ef:
                    57:7f:db:12:b8:60:80:4c:52:6b:ea:b0:4e:55:96:
                    0f:ca:62:51:71:e4:09:27:7c:39:7e:92:c8:5e:23:
                    9b:4f:0f:f7:14:08:46:9b:bc:22:30:9e:5f:28:d8:
                    11:85:a4:fe:94:2d:c0:76:03:f8:08:85:c4:bd:62:
                    a5:92:88:9b:18:f9:d2:5a:dc:e7:ea:67:72:27:1e:
                    c0:fb:12:5a:69:e8:89:84:e7:f6:0a:42:56:be:15:
                    86:03:7b:48:62:ce:eb:f6:80:d8:8e:ec:4a:7f:b4:
                    c3:c9:12:ab:61:dd:b8:ee:25:a4:83:4a:d0:35:6c:
                    61:bf:89:21:dd:45:eb:ee:c6:9f:73:4d:94:9b:9f:
                    18:3d:f7:8a:a9:25:b1:95:c3:88:e3:83:ae:b8:79:
                    50:2b:79:21:d7:cb:c3:18:3b:8c:ab:d0:2a:cc:4d:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9E:A4:E6:27:3D:85:BE:13:8C:CD:AB:C3:E0:C0:16:F0:39:30:DB
            X509v3 Authority Key Identifier:
                keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a0:df:ba:0c:99:46:5a:47:58:fe:a0:6c:88:8f:61:45:ca:
         c9:62:77:e0:f3:04:30:fc:82:6c:9d:be:d0:e4:c2:ff:11:aa:
         8b:8b:f1:da:47:f2:4a:34:a7:71:49:e1:05:3a:a4:7a:ca:28:
         d0:be:7a:14:40:61:3a:b8:99:04:ba:a3:84:05:2f:42:ea:92:
         5c:c7:d5:d3:0e:c0:60:db:aa:9c:3f:b1:85:20:5e:a7:97:2e:
         db:5d:52:04:5d:4b:da:e0:d5:f3:eb:bf:7c:43:8b:99:7b:96:
         d9:6e:4b:b5:f8:6b:17:89:2f:51:55:66:88:21:2d:d2:11:ce:
         68:d0:70:c9:ed:ed:29:67:b7:29:ef:6e:df:ac:b0:39:d9:c1:
         a2:1b:b1:61:53:1e:10:b6:e4:da:e6:4d:a8:a7:74:51:c4:d4:
         75:15:f3:a2:5b:0a:ed:2b:82:3d:1a:56:d7:d7:b2:63:d5:fa:
         82:0d:53:db:69:6c:c3:86:3b:68:55:cc:78:39:d4:6d:76:4e:
         2e:a4:34:a2:ce:41:57:29:6b:a7:6a:4d:7f:db:eb:8f:37:7e:
         77:70:3d:df:14:01:f3:8e:cd:8a:66:b2:42:f8:d8:cb:7c:ba:
         81:76:e8:68:4b:e6:66:64:84:45:66:90:6e:8c:50:7b:0b:88:
         48:e7:fd:51
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICAxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjJD
NTEyOThEOTdBMTAyOTAyNzMxRkRDNDlCREZBQjM5RDUyQUIyQjAeFw0yNTAxMzEw
NzA3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwOUVBNEU2MjczRDg1
QkUxMzhDQ0RBQkMzRTBDMDE2RjAzOTMwREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCspdZi2HNB/vWYOXfLWMNFJHytkcc+IiiQKIm/dh8oIiH64FzQ
8iwoEu9ARPgOcFh9nZm8rKR2eI/Zm9eZlAZ95AEROzA8iPCD8QeFVbMWpVQy5CUm
K/dE71d/2xK4YIBMUmvqsE5Vlg/KYlFx5AknfDl+ksheI5tPD/cUCEabvCIwnl8o
2BGFpP6ULcB2A/gIhcS9YqWSiJsY+dJa3OfqZ3InHsD7Elpp6ImE5/YKQla+FYYD
e0hizuv2gNiO7Ep/tMPJEqth3bjuJaSDStA1bGG/iSHdRevuxp9zTZSbnxg994qp
JbGVw4jjg664eVAreSHXy8MYO4yr0CrMTYOhAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUkJ6k5ic9hb4TjM2rw+DAFvA5MNswHwYDVR0jBBgwFoAUIsUSmNl6ECkCcx/c
Sb36s51SqyswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DUlMv
SXNVU21ObDZFQ2tDY3hfY1NiMzZzNTFTcXlzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9Jc1VTbU5sNkVDa0NjeF9jU2IzNnM1MVNxeXMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTUNSUy9Jc1VTbU5sNkVDa0NjeF9jU2Iz
NnM1MVNxeXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaDf
ugyZRlpHWP6gbIiPYUXKyWJ34PMEMPyCbJ2+0OTC/xGqi4vx2kfySjSncUnhBTqk
esoo0L56FEBhOriZBLqjhAUvQuqSXMfV0w7AYNuqnD+xhSBep5cu211SBF1L2uDV
8+u/fEOLmXuW2W5LtfhrF4kvUVVmiCEt0hHOaNBwye3tKWe3Ke9u36ywOdnBohux
YVMeELbk2uZNqKd0UcTUdRXzolsK7SuCPRpW19eyY9X6gg1T22lsw4Y7aFXMeDnU
bXZOLqQ0os5BVylrp2pNf9vrjzd+d3A93xQB847NimayQvjYy3y6gXboaEvmZmSE
RWaQboxQewuISOf9UQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:22 2025 by rpki-client