Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKIS/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.mft
File:                     -zvqGPdIR2v3_PhP5Dvk7bx8dgE.mft (raw, json)
Hash identifier:          7O75qzKEON8I1qh7lgDaOaT/Eo2C8VrypwbAGh4AK84=
Subject key identifier:   32:31:1D:4C:D7:57:BE:CA:1E:D7:BA:6F:96:13:B4:23:61:24:3E:38
Authority key identifier: FB:3B:EA:18:F7:48:47:6B:F7:FC:F8:4F:E4:3B:E4:ED:BC:7C:76:01
Certificate issuer:       /CN=FB3BEA18F748476BF7FCF84FE43BE4EDBC7C7601
Certificate serial:       77
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.mft
Manifest number:          75
Signing time:             Fri 31 Jan 2025 17:37:35 +0000
Manifest this update:     Fri 31 Jan 2025 17:37:35 +0000
Manifest next update:     Fri 31 Jan 2025 23:37:35 +0000
Files and hashes:         1: -FE4kKpuBA0x9a10aqGfr1zWjsA.roa (hash: 7FXViPK9Mo7mEvh1pYfct+y84m/6kB1MxzG3XToknD4=)
                          2: -zvqGPdIR2v3_PhP5Dvk7bx8dgE.crl (hash: c4YkApb6/NirXtADB4CL1T3u3VBXnX/kJ8SEHeYIKkg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3BEA18F748476BF7FCF84FE43BE4EDBC7C7601
        Validity
            Not Before: Jan 31 17:37:35 2025 GMT
            Not After : Jan  9 15:30:29 2026 GMT
        Subject: CN=32311D4CD757BECA1ED7BA6F9613B42361243E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:8f:ef:3a:1b:53:f4:ab:56:ad:82:1d:41:
                    23:dc:ba:7b:9f:45:db:83:c4:c1:0f:fc:df:de:c0:
                    3a:70:f4:e9:2f:28:e4:a7:59:44:d6:5b:93:e2:a6:
                    72:1e:2d:8d:b1:84:19:b5:db:01:ed:2e:88:b0:84:
                    2d:85:10:1c:b1:94:3e:3c:6e:20:fe:7e:52:9a:b5:
                    73:a9:5a:ae:34:90:aa:e3:4c:54:95:ec:07:06:df:
                    92:54:09:ee:77:b6:41:ff:4e:ae:f8:07:bc:11:b0:
                    d9:9e:5b:e9:7b:e0:a7:27:6e:1e:4d:cc:34:05:0f:
                    47:70:77:3f:9c:84:4e:b8:c9:07:eb:3b:bd:0c:2d:
                    51:5a:de:70:30:fd:70:92:51:e6:4a:df:83:88:18:
                    86:2f:67:a2:b7:1d:26:88:43:42:c9:c5:b3:e2:a8:
                    49:09:61:7c:21:d4:97:a1:ef:f2:59:4c:c6:dd:9d:
                    5c:95:26:c3:b8:8a:d9:e6:db:a9:77:42:71:f4:85:
                    ef:6a:fa:08:83:1c:f2:5c:ea:3c:ae:bf:c1:ba:70:
                    43:cb:7a:a0:01:5c:d8:cf:00:d8:c6:f5:a2:95:81:
                    2e:2b:e9:c4:ff:4a:b3:a9:d5:db:9c:2d:5c:c9:46:
                    05:7c:7a:7f:0c:f7:84:2c:c8:1d:9c:91:88:88:b8:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:31:1D:4C:D7:57:BE:CA:1E:D7:BA:6F:96:13:B4:23:61:24:3E:38
            X509v3 Authority Key Identifier:
                keyid:FB:3B:EA:18:F7:48:47:6B:F7:FC:F8:4F:E4:3B:E4:ED:BC:7C:76:01

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:15:a2:7b:63:05:3c:c4:4d:e2:6d:80:46:cd:3c:05:b6:82:
         65:f2:38:14:6e:a6:47:c0:96:a5:4f:11:5d:8c:1b:12:e5:b2:
         11:4a:3d:b0:03:6f:eb:69:3a:0f:0d:86:8f:b0:b1:57:4e:6a:
         bf:a4:dd:28:62:83:90:c2:09:70:0b:a9:ed:82:40:41:e8:91:
         e7:64:c0:06:33:b3:72:c5:6f:c4:20:c7:4e:47:a2:10:95:94:
         d0:fa:56:8e:74:bb:07:7d:af:82:38:58:82:09:5d:c8:38:2d:
         ad:79:17:bb:c8:c6:8f:11:32:4a:94:ad:3b:b1:3f:e4:78:0f:
         34:cd:dc:31:49:9d:80:e6:22:89:da:e2:32:13:e0:93:21:b0:
         7b:de:da:ee:cb:72:28:10:ad:bd:9a:f8:23:70:90:84:5c:89:
         b6:64:8a:3e:39:36:87:52:39:6c:e9:78:0c:41:8e:49:61:f9:
         af:95:a6:a3:8c:f7:47:25:9e:f9:fa:cf:fd:a4:28:10:d4:a0:
         33:94:0f:8c:72:68:ad:23:9c:00:2e:d6:a8:88:2e:29:3d:4e:
         e6:7f:46:a5:9f:21:96:91:b3:15:b1:32:ce:ee:3c:fd:37:8d:
         93:f3:cd:f1:4e:80:8d:40:89:c2:31:f0:4d:97:70:e2:85:c4:
         4f:f7:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:27:51 2025 by rpki-client