Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/UvmnJzF6do3YlAOw2Zyq-gv3KR8.mft
File:                     UvmnJzF6do3YlAOw2Zyq-gv3KR8.mft (raw, json)
Hash identifier:          H7LleD7XIrhgiAv4G58QqJjA/AWGaexKyDO+nZw+xKE=
Subject key identifier:   78:B5:4D:C9:CA:C8:BF:6D:DA:1B:C9:D0:C9:F7:FE:96:27:A1:38:A9
Authority key identifier: 52:F9:A7:27:31:7A:76:8D:D8:94:03:B0:D9:9C:AA:FA:0B:F7:29:1F
Certificate issuer:       /CN=52F9A727317A768DD89403B0D99CAAFA0BF7291F
Certificate serial:       029E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UvmnJzF6do3YlAOw2Zyq-gv3KR8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/UvmnJzF6do3YlAOw2Zyq-gv3KR8.mft
Manifest number:          0296
Signing time:             Thu 30 Jan 2025 20:07:25 +0000
Manifest this update:     Thu 30 Jan 2025 20:07:25 +0000
Manifest next update:     Sat 01 Feb 2025 20:07:25 +0000
Files and hashes:         1: I8rtPn4PnplvHlK0_PxZvtv99Ps.roa (hash: Nmc2PjA5rCEiRGAe+xBUcAUo7KZ+xUoI3rE/FKGT15I=)
                          2: UvmnJzF6do3YlAOw2Zyq-gv3KR8.crl (hash: mFhtV0yPV6M9utvTV137JReGvTCS1VlWHzfm8r6Hsfw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F9A727317A768DD89403B0D99CAAFA0BF7291F
        Validity
            Not Before: Jan 30 20:07:25 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=78B54DC9CAC8BF6DDA1BC9D0C9F7FE9627A138A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:c3:92:4f:29:b8:49:1e:f0:fb:5d:99:c7:
                    90:66:0f:5b:2a:4d:b7:57:0c:d3:6d:11:ad:c3:fb:
                    65:38:b5:14:27:23:bf:17:76:f8:01:e0:9b:72:bf:
                    28:5b:af:2b:b1:bb:06:4d:c7:e6:1b:0e:6d:86:11:
                    8c:37:12:83:22:f3:04:6e:a0:0f:c6:78:f4:36:c3:
                    e8:9b:bb:27:9e:9c:cc:ca:5b:8a:cc:28:79:fe:0f:
                    e8:51:81:5e:51:cd:47:68:c1:6d:e0:ee:fe:87:0c:
                    7c:b9:88:0b:fb:4f:1e:82:b5:42:0d:e6:17:34:b5:
                    3d:02:c5:e6:19:1d:07:ba:f1:4f:d6:9e:34:a3:fc:
                    02:a7:97:87:67:17:d2:b5:d8:fa:d4:9a:33:e5:6b:
                    1c:e1:c5:d7:26:83:7a:de:bd:f6:16:24:39:7f:b9:
                    ed:75:b2:5c:41:dc:9f:1d:b8:bf:ec:0d:91:50:cb:
                    2c:b3:08:92:a6:2c:ca:19:7b:3c:ce:93:1c:c3:f6:
                    b9:58:de:4c:ad:c1:9f:4b:ef:59:46:eb:f6:73:ed:
                    75:59:be:59:5c:53:b4:a4:e4:28:42:6a:6d:5e:16:
                    59:16:c5:6d:b2:af:1b:e6:f7:fc:87:32:77:dd:af:
                    cf:73:e1:01:bc:a0:2d:96:a6:64:3d:80:b1:54:24:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:4D:C9:CA:C8:BF:6D:DA:1B:C9:D0:C9:F7:FE:96:27:A1:38:A9
            X509v3 Authority Key Identifier:
                keyid:52:F9:A7:27:31:7A:76:8D:D8:94:03:B0:D9:9C:AA:FA:0B:F7:29:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/UvmnJzF6do3YlAOw2Zyq-gv3KR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UvmnJzF6do3YlAOw2Zyq-gv3KR8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/UvmnJzF6do3YlAOw2Zyq-gv3KR8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8e:b0:34:6f:ee:10:14:00:a7:3b:25:bf:d1:41:e8:0d:80:
         d6:9e:80:98:2b:49:45:cf:86:54:51:cc:2e:13:dc:4b:23:92:
         a0:2d:d3:ea:7e:1d:2c:1e:eb:39:35:ad:18:b7:b5:2d:14:6d:
         a1:f4:2d:12:64:1d:72:7f:63:f4:3a:13:e3:78:82:2f:1e:ad:
         66:9b:c3:be:5f:9d:ef:ef:e8:2f:bc:8e:d3:da:ed:6f:f4:42:
         72:b5:8b:8c:ea:4f:60:89:e1:11:79:37:02:a9:f8:be:78:66:
         2f:c3:dc:ea:ba:4d:26:00:c9:bb:f1:aa:26:7c:55:8e:f6:5d:
         99:9f:9e:75:d2:04:b7:7a:cc:9a:c1:49:c2:06:73:c0:0d:3d:
         2e:b0:5a:4b:92:80:7c:39:56:a1:57:b1:1d:e2:56:9d:e8:49:
         e7:ff:79:c5:12:b1:5d:36:1a:70:a7:6c:9d:b8:05:e7:e9:e2:
         09:0b:5e:e1:44:2f:44:3a:9f:0d:4c:1a:1e:ad:0a:b6:af:15:
         d4:ec:76:44:0f:5e:ac:66:61:08:79:8a:31:d3:62:0b:f3:97:
         2e:8a:06:fc:68:47:0d:bd:0f:bc:40:e8:21:3e:75:f6:0e:ea:
         78:0b:0d:06:ba:16:23:f1:1b:05:3b:e3:15:50:9e:c9:75:4b:
         88:cf:78:3a
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJG
OUE3MjczMTdBNzY4REQ4OTQwM0IwRDk5Q0FBRkEwQkY3MjkxRjAeFw0yNTAxMzAy
MDA3MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4QjU0REM5Q0FDOEJG
NkREQTFCQzlEMEM5RjdGRTk2MjdBMTM4QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAxcOSTym4SR7w+12Zx5BmD1sqTbdXDNNtEa3D+2U4tRQnI78X
dvgB4JtyvyhbryuxuwZNx+YbDm2GEYw3EoMi8wRuoA/GePQ2w+ibuyeenMzKW4rM
KHn+D+hRgV5RzUdowW3g7v6HDHy5iAv7Tx6CtUIN5hc0tT0CxeYZHQe68U/WnjSj
/AKnl4dnF9K12PrUmjPlaxzhxdcmg3revfYWJDl/ue11slxB3J8duL/sDZFQyyyz
CJKmLMoZezzOkxzD9rlY3kytwZ9L71lG6/Zz7XVZvllcU7Sk5ChCam1eFlkWxW2y
rxvm9/yHMnfdr89z4QG8oC2WpmQ9gLFUJLvHAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUeLVNycrIv23aG8nQyff+liehOKkwHwYDVR0jBBgwFoAUUvmnJzF6do3YlAOw
2Zyq+gv3KR8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVO
Ry9Vdm1uSnpGNmRvM1lsQU93Mlp5cS1ndjNLUjguY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1V2bW5KekY2ZG8zWWxBT3cyWnlxLWd2M0tSOC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01BSUZFTkcvVXZtbkp6RjZkbzNZbEFP
dzJaeXEtZ3YzS1I4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AIKOsDRv7hAUAKc7Jb/RQegNgNaegJgrSUXPhlRRzC4T3EsjkqAt0+p+HSwe6zk1
rRi3tS0UbaH0LRJkHXJ/Y/Q6E+N4gi8erWabw75fne/v6C+8jtPa7W/0QnK1i4zq
T2CJ4RF5NwKp+L54Zi/D3Oq6TSYAybvxqiZ8VY72XZmfnnXSBLd6zJrBScIGc8AN
PS6wWkuSgHw5VqFXsR3iVp3oSef/ecUSsV02GnCnbJ24Befp4gkLXuFEL0Q6nw1M
Gh6tCravFdTsdkQPXqxmYQh5ijHTYgvzly6KBvxoRw29D7xA6CE+dfYO6ngLDQa6
FiPxGwU74xVQnsl1S4jPeDo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:42:06 2025 by rpki-client