Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
File: 0qCc5CgJ9NqdexxEc93y9DalmcQ.mft (raw, json)
Hash identifier: RZ8yQwTCdYjSI4DmlOns3XA9Yz1s1bjpQdh716xCTvU=
Subject key identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial: 037E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
Manifest number: 035F
Signing time: Thu 30 Jan 2025 18:37:33 +0000
Manifest this update: Thu 30 Jan 2025 18:37:33 +0000
Manifest next update: Sat 01 Feb 2025 18:37:33 +0000
Files and hashes: 1: 0qCc5CgJ9NqdexxEc93y9DalmcQ.crl (hash: f/wNW80XaP/ZGH6sQgUTOQnYUkjvYfLy/fE9SrjJTKc=)
2: 5a8KEbvxxvYXRTywrNZjJuZC9xM.roa (hash: T17KtAUj/YzXBydrJipZjJ62tp5LlvJFkKr+blRf6IM=)
3: Q4QrXS8hgxbgQ21PwuvSQ1u-g1c.roa (hash: e3imSKStXHdZKmOo4STF/mkd5Ccxv1W6867jmmlIupw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Validity
Not Before: Jan 30 18:37:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=356D1D56D2B0912C2D9009BA80830157976AD707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:71:bf:79:31:ed:f4:6e:63:62:3a:5a:3d:
ce:42:9f:26:ff:48:e9:72:2d:c3:6b:6f:c2:14:7e:
f3:05:6d:d5:bc:75:b1:a7:f3:1f:f8:3c:3a:c6:f5:
8f:e9:f8:89:b5:fb:14:bc:09:98:4e:c0:ce:aa:93:
33:37:b7:79:7a:fd:cd:95:1a:cf:d3:01:3f:25:c3:
2f:d9:8a:02:05:81:b8:e9:d5:9a:02:2c:04:02:dc:
cd:a2:71:f7:c9:06:ad:73:dc:2f:0e:de:27:9f:84:
85:ff:0d:a8:b9:94:10:cb:69:e6:f7:48:e7:39:9e:
c6:c0:32:d5:65:98:d4:78:0c:7c:ff:5a:dd:8b:10:
a4:21:28:73:24:15:d6:74:5f:ab:c6:38:20:1a:cb:
bc:a5:21:dc:4e:91:11:d4:8b:9f:16:bf:a7:ad:36:
88:39:95:b2:86:bb:d1:91:80:82:2b:64:11:d2:00:
37:96:c8:3f:7b:dc:db:f4:0d:15:24:5e:21:76:14:
92:6a:c3:fd:94:a1:ce:a5:c4:5a:ee:35:f7:d0:08:
03:9c:b0:1f:14:69:e5:4e:c8:84:11:ac:64:44:32:
4d:32:fb:ae:eb:a8:6c:c2:25:1c:e8:d9:99:4b:59:
31:82:56:09:ce:1a:b1:d2:d4:8e:bd:65:29:7d:bd:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
X509v3 Authority Key Identifier:
keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f4:52:b1:39:16:7f:e7:30:f8:e3:93:7d:9c:52:ea:3d:f9:
0f:4c:a5:b7:7e:63:5b:5a:a2:01:0e:78:24:53:ce:f4:0e:be:
54:d4:8d:4a:ff:ef:44:12:17:d0:10:7b:cc:41:c2:7b:e5:1a:
8b:7f:81:a5:31:73:71:ec:01:95:c9:f8:69:b2:07:27:ea:e5:
19:05:fa:f8:e9:48:6a:1f:fe:d1:0d:ae:73:5e:c0:68:cb:0b:
b6:86:ca:53:3b:9c:ab:70:bf:7f:7c:b2:98:55:aa:cd:bd:c1:
47:29:90:ef:93:a2:ab:0a:3a:6b:f9:79:fc:5b:71:34:cd:c4:
5c:5c:91:0a:4b:58:26:d5:4b:28:9d:7b:83:97:bc:cc:5e:71:
c7:fd:62:a6:75:10:ce:2d:84:18:58:2f:40:b3:1d:9b:c0:f2:
46:84:ad:99:0c:21:04:be:43:43:b8:28:cc:ef:87:23:6d:a4:
b1:0e:79:4c:04:63:92:dd:e2:66:58:0c:1a:46:b9:fd:10:80:
56:27:97:4c:a5:65:40:63:c1:79:0d:44:7f:7b:9e:e9:dd:16:
dd:7c:15:4d:84:c3:aa:a0:47:34:52:74:5a:9c:94:9a:49:83:
24:86:e0:63:0f:d8:29:b7:e2:41:3f:59:5e:d8:36:8a:56:34:
13:11:c3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:53:53 2025 by rpki-client