Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
File:                     mZu-Ex3100bydifMT4-p-1dYGSk.mft (raw, json)
Hash identifier:          XqrFq8eecu8nBMlZxxrvPewdL2ON9+yRQELlmzFkvz8=
Subject key identifier:   BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       0D94
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
Manifest number:          0CC5
Signing time:             Thu 30 Jan 2025 19:07:38 +0000
Manifest this update:     Thu 30 Jan 2025 19:07:38 +0000
Manifest next update:     Sat 01 Feb 2025 19:07:38 +0000
Files and hashes:         1: 5Aw3BuduuYVm-6f5RPnEx2q8Tto.roa (hash: KudR5oe7afABtaY3yBlv2qBnOyhs3FDo4aoBnklt+b4=)
                          2: BHAfDx4qSQtPLo0sSl-f7J4ETn4.roa (hash: U0HychJITPmNnY1CbfyPyJD0Pg2TSgWh8lpDdxOEEw8=)
                          3: BkwmbsR0C-5y6dr1SUH6zHmXuIk.roa (hash: A7fJoxNiyBVyW8u7PqS9fCg5cP0sY8l+Gprql6lfAeI=)
                          4: DzjbAuH0bl2w3EvIS3verodCD3Y.roa (hash: C3ljFjCi6y/2H2T7IPaQA44FoxAp7Ys93+CAGL0W2/I=)
                          5: GiV0cBS3FTJYP3EGpt0KeLPQI64.roa (hash: 4TKiy3UyOubfUf1FT4PZVMt83Fv/tbVCzKwii5Saq10=)
                          6: KFAERCluRY-TQLBjQrbYOk5kV90.roa (hash: 2QIbswsZhYupjAOFuZyKrdFtdipGlJ04T2r7F5MBgEU=)
                          7: LewrmQs1ZCqwDqr559mKBuPZIHg.roa (hash: wWDpeMygBZaJ37V7VsfGbiKwE0rZRV7WN4nvYKUWhKk=)
                          8: PnVFnKvB44XVxC9IXYc9Vt6M8MA.roa (hash: uv0tdEa+46RutlItfk6D1MQHlSpJOX3//6g+AcxrSys=)
                          9: Q-0By00uwyDA2lIYVxr28p1HoUQ.roa (hash: 0bBr7wY6sbYxZYuBNwDonQBB0DToHa7Qvl8tI6mC0VE=)
                          10: Q8Z6WfgQHcuRL5rdX3l1tNZIl98.roa (hash: C6NaV+NG2cH3Q+5hrEDJM87TwrihrZCe1HAMsE2adjc=)
                          11: QgbiAXrdTBvVwbLfwqnnkuyf4Do.roa (hash: IqTIg2OYQPPGgn/MLqIxR9vML4+fBz9bNeKHbtEp69M=)
                          12: R244PYQdHkuwhppWNZ3DkQb3d8I.roa (hash: lwN424i92lpPMCXfSt0AirDQKS5LaJqaPwZc4STKuK8=)
                          13: Ue0BzL8oRuiHqCF0oHWtMyMfKdw.roa (hash: OuXQL0oT/LGfatNDI6HYryIHDZH8JDNN/9V9R7/ajGA=)
                          14: XQnVnUKhv5DAexcyL8p9vl0Losc.roa (hash: yfFRsG3JT6giCLif8xTO6WJmGV4/ahKDwwiweo9ZLL0=)
                          15: ZFjd0n2nTw3DBQJ5vAiBZsEfUak.roa (hash: zo4eSY5bIWr0JPqn2LkCm3sWLUSiWyKWWCD0fneW+PM=)
                          16: dQxMuqH9RYf9-rIxbczPTS-89v8.roa (hash: 1l1wdPSZQaOgbh4Y0nVZ6Syv8GR4ranTelDbCh8VGvo=)
                          17: fWa3XW0Yuy5ai4kqlBPQuyHOg3Y.roa (hash: 2ECJCroaz+nN6o1Qlc8cxuOxSyr9TtAGsw0YdeCYuco=)
                          18: id9pl2rcUZ6LK7CBZ3qcuZbIgbw.roa (hash: Ta9wem5W7zv9x893t/A9x76ODT7g+LVmPRgUzscP3Ck=)
                          19: l4tLRWV2aNUpe6Q34l090vrG-uw.roa (hash: xpIHqmUmb8GOnAQawMF6SYeyUj/dvhCeZF3xPv/b3/o=)
                          20: mZu-Ex3100bydifMT4-p-1dYGSk.crl (hash: +EQypraJf1u3cLRkQA71v4ba8fa8zfL/Hzq6yT+vHig=)
                          21: s-xhLNxbk1-KeU0XDTsMiVmKpoo.roa (hash: OOhb6Dw4agjIuwkOc7d3DQwXi5kovG59tSyjf55VhVI=)
                          22: tlC8Ijhjf9D8QFOiqhNYeo8LXDA.roa (hash: rav/+y3/+pZ7Rugvyj3SI/UEHIuxdQ5aquiVGu8WC4Y=)
                          23: uUf6pYXIxkopfQUMpH1HfyOBgH4.roa (hash: a+3fMIDbmIWSQZX68xaCferk2MEli3fwzZhZdKkXYFs=)
                          24: uWisvgxnAxvKAIU-hu105mybV2c.roa (hash: o2RovVBMLnpZ4KMr0RT6TM1k//nXmR+kz8k8ab65Cho=)
                          25: xgJ2Jda2crsFpBdCTswkDQNbNe4.roa (hash: X1xTXCICAo/Gh3sMYn3OjJ7+LIEOJHLD3Vrdf+r8cwc=)
                          26: yKtoukL--xaX9tAphrQ5WhovY6s.roa (hash: LZ/s7iva/wGPP8KEdiNj/Opo4G1/9uxbE9+jecI36dQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3476 (0xd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Jan 30 19:07:38 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BD55C9E63657E8A51D91B8ACF7F844527B32BF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:c1:63:32:01:c5:b1:de:eb:56:8d:fe:89:
                    56:57:71:a0:b2:43:6d:70:89:1a:3b:7c:3f:e7:3a:
                    5c:07:36:16:dd:d3:f3:f0:a7:a9:9a:5c:11:4a:73:
                    28:69:8c:42:f7:f0:60:bc:34:62:39:39:f7:41:38:
                    7f:b0:30:72:26:00:0a:8e:0c:42:35:54:b1:a6:db:
                    61:4e:47:bf:8f:27:b9:ef:6e:1d:e9:c1:af:e3:04:
                    15:69:65:8a:d8:58:f5:13:de:d0:19:05:5c:56:36:
                    c6:be:54:61:98:a0:f5:1b:37:12:f7:af:7b:c3:92:
                    b5:f7:34:14:1e:4c:ca:70:10:b9:0a:32:01:b2:62:
                    42:3f:95:a5:ed:8b:91:08:84:aa:3a:98:c4:79:9a:
                    2e:69:26:78:86:33:9f:4e:7e:33:8d:84:69:a8:d6:
                    d0:95:7d:ef:35:fa:57:ee:1a:56:5f:c6:6a:1a:d8:
                    4a:d3:71:4c:40:6a:e8:b1:08:04:5c:b5:e5:fa:51:
                    5e:5a:4d:03:48:84:9f:63:78:59:4e:c2:ee:4f:76:
                    37:bf:2d:1e:46:14:7b:94:e4:93:24:e7:02:10:6e:
                    22:96:70:30:c4:4f:55:3e:12:b2:79:3e:50:dc:7c:
                    7a:e5:65:ba:a0:b4:f5:ec:f6:dc:f0:7a:a8:7a:fe:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:0d:24:b2:29:81:2b:0f:15:12:4f:26:d7:1b:94:89:39:
         35:61:13:34:11:ee:b9:d5:f5:1f:69:00:7d:d9:5e:2e:a9:dc:
         33:ca:0f:c1:96:67:da:69:22:c1:ec:46:c7:de:ff:12:f3:4d:
         30:77:c4:3b:90:56:53:90:a3:fa:c9:b9:c6:31:00:a6:06:5e:
         12:77:6c:14:da:c5:ce:c4:db:f1:c8:98:ad:46:75:be:49:78:
         08:7e:2c:90:c3:c2:db:96:d8:90:17:6b:ee:a0:57:9a:0f:b7:
         10:a4:33:e8:c7:92:03:ab:fb:e6:72:d2:a6:a7:a4:84:72:ed:
         17:c7:d6:6b:bb:ab:2b:82:03:44:ac:61:08:62:6b:23:40:ce:
         d9:65:ba:39:f0:23:ea:40:e8:f3:1c:74:d0:38:bf:31:11:68:
         f2:79:ca:36:f6:7c:57:e7:75:b0:c9:81:d2:6d:86:47:2c:e0:
         eb:f6:b2:21:7a:28:a1:f0:2c:ff:13:3b:7d:9a:f7:1b:4d:a4:
         63:87:98:a2:96:ae:54:15:c6:e1:a4:69:f8:b7:dc:22:78:15:
         6c:ee:26:c0:11:7f:fe:69:47:64:f6:56:04:b6:02:29:74:11:
         c4:e6:35:50:be:20:b2:41:ca:1c:d7:98:3b:8a:a0:3e:80:46:
         a7:0e:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:27:16 2025 by rpki-client