Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.mft
File:                     YCy84y3XbQuzn1pwYyQkiGkRlDU.mft (raw, json)
Hash identifier:          18c67H00nqRtww8zzAUIz27xASCLvKGaGvWgwbKt9PQ=
Subject key identifier:   1E:2B:4B:A2:9E:53:32:34:E9:60:93:4A:15:48:A8:BA:60:A2:BC:2F
Authority key identifier: 60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35
Certificate issuer:       /CN=602CBCE32DD76D0BB39F5A706324248869119435
Certificate serial:       0C8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.mft
Manifest number:          0C7C
Signing time:             Thu 30 Jan 2025 19:07:53 +0000
Manifest this update:     Thu 30 Jan 2025 19:07:53 +0000
Manifest next update:     Sat 01 Feb 2025 19:07:53 +0000
Files and hashes:         1: YCy84y3XbQuzn1pwYyQkiGkRlDU.crl (hash: 0m8U05eGifVQDMjtJCEXD4U2jlH8GbUPaEkOWAuo5bk=)
                          2: Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa (hash: gK6JXgH7aBSjbjFuFvGu5V4fUDs5146GWu5E+bb2hcE=)
                          3: b10pSRAcElHfm9ufgwjUoR-wv2Q.roa (hash: EtJI9GWJU9tRyjVkokZd94rVu5nA5Ej2j3xr4QQk4C4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3214 (0xc8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602CBCE32DD76D0BB39F5A706324248869119435
        Validity
            Not Before: Jan 30 19:07:53 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1E2B4BA29E533234E960934A1548A8BA60A2BC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:e8:4b:58:f6:93:80:b3:4d:d0:4f:69:02:
                    6c:fa:fe:5f:d2:1f:20:a8:9f:9c:82:39:94:72:9e:
                    26:47:d2:77:6a:16:b1:df:f5:45:72:03:50:2d:1e:
                    e7:23:0e:08:3f:b2:f1:2d:c6:05:5c:82:5f:35:5e:
                    67:bc:c9:47:16:37:1a:77:d4:50:89:64:70:fd:17:
                    68:27:25:a2:a3:f7:2b:79:60:9a:b5:f6:e6:5d:a7:
                    83:17:52:b5:7e:fb:23:95:9e:10:fc:80:91:47:f1:
                    ab:2c:e4:27:9a:0a:1e:e1:67:58:cb:ac:1c:60:b3:
                    2a:f5:ed:9a:e6:0f:14:c7:94:81:cd:82:20:48:0f:
                    0c:b3:0b:45:d3:18:12:2e:26:11:e1:61:f4:2e:92:
                    c5:4d:fa:6f:8e:9a:0f:10:c0:3b:99:db:59:03:5b:
                    b2:a5:47:71:78:1f:e3:75:23:0e:35:f1:87:f5:06:
                    f7:98:fa:35:c1:5b:67:30:8f:1b:89:75:75:a3:85:
                    bc:f1:9c:1b:ac:e1:3f:a7:1f:1a:9a:ec:f6:e7:87:
                    fe:0e:e2:68:a4:ab:e1:ac:97:69:f1:36:0d:7c:ca:
                    df:c5:67:ac:90:81:78:7c:a6:56:c9:f0:ad:0d:8d:
                    af:61:4a:cf:08:79:aa:62:cd:d0:06:8b:f6:c3:a0:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:4B:A2:9E:53:32:34:E9:60:93:4A:15:48:A8:BA:60:A2:BC:2F
            X509v3 Authority Key Identifier:
                keyid:60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:1c:bf:32:f7:12:a1:6f:f6:48:db:55:4e:cb:d3:26:f7:
         84:e5:e4:d6:69:3d:87:e8:95:4c:6f:49:d6:dd:69:28:df:55:
         d3:f8:bd:50:32:e7:04:7d:bd:90:ea:68:d7:5d:49:57:d0:d1:
         0a:4d:41:90:b6:10:c0:d3:c4:47:bd:cc:a2:0f:cc:0d:fc:af:
         ed:2e:0a:6f:d7:e8:56:c9:c0:28:0d:0f:6d:90:70:ab:d5:ce:
         49:60:d3:bc:b5:5c:43:6f:96:d7:9e:23:b6:99:d4:e9:26:97:
         64:4f:b7:6c:54:8f:27:3b:e9:84:24:aa:ce:de:95:ce:69:6a:
         06:2e:9c:58:9d:b4:9b:24:cd:73:70:98:3a:90:d2:96:72:a1:
         7e:e5:ac:d4:ee:c5:4b:73:c0:56:85:04:d6:23:c2:be:df:3d:
         f0:5d:c7:ab:34:c9:06:93:54:53:89:fb:cb:53:49:24:f5:8d:
         70:51:b9:c5:dd:d3:56:37:ea:4e:c9:40:31:2c:15:53:51:21:
         8a:99:d0:34:56:2b:d3:78:9c:39:50:a2:a6:a4:b5:60:55:d5:
         35:bf:0b:0d:c4:1a:22:b2:99:7d:f8:c0:ce:61:29:b9:63:87:
         83:55:f9:9b:1b:88:73:f8:60:bf:f0:61:15:e2:6b:37:29:f4:
         ac:00:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:41:50 2025 by rpki-client