Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
File:                     7jijaSKsEYQNtLsn0bA0l2BZh2E.mft (raw, json)
Hash identifier:          7MHgkmFjbfvT5v0ePiGuWm48NO7WRVjfLwZcBCni3LI=
Subject key identifier:   07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
Authority key identifier: EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61
Certificate issuer:       /CN=EE38A36922AC11840DB4BB27D1B0349760598761
Certificate serial:       021C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
Manifest number:          021C
Signing time:             Thu 30 Jan 2025 16:08:00 +0000
Manifest this update:     Thu 30 Jan 2025 16:08:00 +0000
Manifest next update:     Sat 01 Feb 2025 16:08:00 +0000
Files and hashes:         1: 7jijaSKsEYQNtLsn0bA0l2BZh2E.crl (hash: MWBdcZL+IFzwcnPvAkEfyyfy7sZFYuX7XhMGnGhqfWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE38A36922AC11840DB4BB27D1B0349760598761
        Validity
            Not Before: Jan 30 16:08:00 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0759044FCBCE4A69EFFF074B474F0707BD9438C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:06:3e:5e:ed:bc:45:7c:dc:c6:87:c5:77:
                    59:83:fc:c7:cc:33:45:ac:92:83:fd:b8:7b:b8:e2:
                    c7:a8:2b:f1:46:c0:87:4c:e2:a3:e3:9f:b0:8e:38:
                    ac:c5:0a:f7:2c:77:0e:a8:9d:3f:88:b3:a5:fa:81:
                    4b:17:2f:da:29:3f:60:8d:fb:a0:e5:97:9a:fd:14:
                    fa:7d:c0:fb:75:e3:6c:84:6f:71:35:4b:dd:de:64:
                    1c:2f:af:75:93:48:88:64:0f:25:3b:6e:73:8a:43:
                    ba:22:ab:75:42:3e:1c:6f:b9:01:e2:a0:58:fb:f2:
                    87:f9:fa:e2:dd:f3:7c:d9:52:4c:c3:0f:55:9f:38:
                    87:b8:b0:66:89:bb:36:d8:04:e4:bf:6f:62:a7:ca:
                    07:04:dc:96:ed:21:35:79:d1:55:b4:d1:d0:b3:b5:
                    15:dc:33:8c:6e:fd:bc:fb:6c:dd:94:37:b3:c1:0c:
                    df:0c:59:d7:e8:fd:c6:0b:d7:3a:27:19:92:af:f0:
                    78:75:09:a5:46:11:73:88:c8:1f:e4:06:21:91:43:
                    5c:65:ce:b5:d5:b5:e6:bc:6b:aa:fe:14:cb:ec:5b:
                    95:bc:98:85:a3:ae:d4:01:c3:07:47:5b:e0:54:da:
                    2d:63:e8:e1:b4:1e:50:61:ec:df:bc:74:7e:2b:df:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5
            X509v3 Authority Key Identifier:
                keyid:EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:db:47:b2:b9:f9:12:52:7f:68:ea:ae:81:23:41:82:07:52:
         78:53:6e:2a:e7:fa:9c:02:ba:8c:e6:3d:1e:7d:2c:43:14:0b:
         ed:49:87:1b:01:2d:e3:8c:08:63:14:8d:53:5c:75:0b:53:af:
         12:8d:63:0a:7d:67:68:11:bd:52:ab:5b:bb:3e:0c:32:25:da:
         87:da:a3:5b:fa:1e:81:7c:89:63:9d:b2:d2:9f:1d:48:89:16:
         71:92:6e:9b:cd:f4:8a:84:f5:94:f6:4e:67:02:43:76:ef:a0:
         3d:c7:4c:0a:37:8d:c2:4f:78:9c:a3:b9:4c:d3:30:2f:c1:c5:
         b9:b8:0a:ef:72:2d:eb:29:b8:97:34:f4:51:9b:ab:e2:c3:6a:
         d3:56:b9:43:cf:26:83:46:bc:9b:6d:59:4e:1b:6b:92:88:5a:
         fa:ca:48:a8:99:fd:ad:46:68:73:31:e0:b4:41:90:0f:c1:b2:
         31:14:52:c5:78:b7:de:59:f9:db:08:17:12:ba:52:5d:1f:3c:
         21:5a:7b:b3:91:97:20:b4:6f:ac:bf:a8:bf:6c:43:be:1d:09:
         33:5c:3a:b3:63:71:1a:29:59:c0:55:8d:91:12:29:17:e5:69:
         16:75:d8:71:c9:e2:39:a9:a6:0f:10:d6:04:08:27:4f:00:84:
         7f:95:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:15 2025 by rpki-client