Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
File:                     rf5uVtr4SS7H3oizqQazE5tVuGQ.mft (raw, json)
Hash identifier:          cRynUC14VTHL+rSqRi7QfL4fMAuQGL6Q9KZP1SaB6bs=
Subject key identifier:   88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       0751
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
Manifest number:          0702
Signing time:             Thu 30 Jan 2025 20:07:11 +0000
Manifest this update:     Thu 30 Jan 2025 20:07:11 +0000
Manifest next update:     Sat 01 Feb 2025 20:07:11 +0000
Files and hashes:         1: I_RNZnv7q6wqNyMmWuWt4VHCpLU.roa (hash: nX6MYGVyeFZS/jxqUKChdFzcYsnWfLfB3iUCBaBbjs4=)
                          2: LhiKgq7HkXZWDAUpPP_JtMq1Wyw.roa (hash: txY9gqdwuAloWwR0WhX/ViQS918LedhUcGYYN4ptOKE=)
                          3: NcKVCfbc3jChVDmflblYSuJPMO4.roa (hash: 2DWqyOAxtIiBg6e9UwcdcPnNpvdPFtF6sV5BbWgSqII=)
                          4: W2PW0159D49vnY1X6YuK8pcD_Yw.roa (hash: /K6uRnNubqLn1MMz6oppqYwTca/MQs5kN8TSk1Qieho=)
                          5: awIZh6KzSYKgVU1YGX__k8Rc-fI.roa (hash: 8kCJcp3prAEXxvcP7fI5TZMUkspzTMPqPVBPeYMh+Xs=)
                          6: kzr56hc8w8azGyeKRed38hOzU3M.roa (hash: 8pIZLgqojsBcrwV4IKUaww1GYdOjwoRld8CP6jf+mtw=)
                          7: qnHYj_7E-lm8G2EAmiL2M04c_xc.roa (hash: EZeD4g8OAuXBalNqwWjAJfGgdIE4wKe3B7wlmah5plA=)
                          8: r3L6yttM2uauctbjHfvEYX9apYE.roa (hash: qG0l5l8cBI/D1C2Z5zmTXnVral3zEsIqcEiBhf78lvk=)
                          9: r6WztecU-ZvhccaqvMNaapB4oJc.roa (hash: jlGwuJYXc9UL3F3INlrT6YqnAverCCdROO9so5QYFRw=)
                          10: rf5uVtr4SS7H3oizqQazE5tVuGQ.crl (hash: 8Y8AkmkyUVJOKKyiyZqN1q4aX0o8mY5OAHBhtkpg/BM=)
                          11: t7Cjyp179kJ-HnkXphUUmqKmHwA.roa (hash: 09tHvN8+zK6qBN96JkC4bSWNi9a1l/1PdOT5GmrSuFk=)
                          12: vevhoNKm6ousZhBw2sSYxeL3-i4.roa (hash: DPK2JVuvOH5YHtFjYZilP6n+RKOi3qJZpnyq5c/xujI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Jan 30 20:07:11 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8854C401A81FA535EF84FCFF6D06C5F99F64EEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:1a:e9:4e:9f:e7:ed:30:87:19:fe:94:0e:
                    71:c2:dd:a0:b0:a2:52:3e:71:b9:2b:4a:0d:fc:88:
                    6e:aa:92:1b:5e:d7:5e:10:57:37:85:9d:f5:0c:ef:
                    14:d1:25:42:70:8e:ee:6a:87:f8:20:85:4f:58:31:
                    31:e4:87:18:67:09:2b:ae:8e:f0:69:d3:7d:0a:5b:
                    bd:92:89:e2:40:f2:68:bf:c7:b7:bb:4b:18:7e:24:
                    7a:24:19:4f:80:95:56:c3:be:d3:e9:96:40:6f:46:
                    7b:61:09:87:c0:1d:5a:03:32:b7:a5:76:4a:6f:b4:
                    f7:b8:52:01:63:6f:2c:e3:67:a8:7c:13:1f:37:66:
                    de:c5:9d:9d:89:d8:02:04:a0:fd:e2:19:cf:c9:dd:
                    d5:5b:84:b0:c9:4f:b2:59:25:e1:36:4b:0b:f8:16:
                    2f:55:9d:6e:c2:74:a8:6b:f5:95:98:f2:d1:11:0d:
                    d5:9a:0a:42:fd:fa:3c:b2:fd:7f:a9:28:86:6a:4d:
                    35:29:c2:c1:b0:cf:70:b8:e3:53:02:c7:72:23:02:
                    0c:16:3a:9f:a1:cd:ea:4b:22:d8:b3:44:5b:1d:21:
                    a6:55:ab:52:bf:97:5e:02:f3:75:8d:76:d2:bb:1b:
                    7f:67:0c:8e:e2:04:37:7a:06:98:80:4e:15:7d:4c:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:fe:d7:15:5b:f1:c2:90:ff:25:af:5d:d3:ca:c4:3c:53:
         47:e8:c4:5c:a8:a5:ed:1f:ca:a6:b1:1a:6d:c0:01:4a:3f:53:
         ae:9e:d6:a9:81:ff:54:d4:de:67:cb:0e:ec:b9:14:fa:c7:cc:
         a5:95:7b:47:33:89:3a:0c:c1:3b:7e:20:ea:bb:1e:75:50:80:
         ee:f8:73:ac:7c:d6:96:e8:e4:e8:e2:26:e4:c7:e7:4a:c5:da:
         69:93:29:38:15:00:78:82:ef:a2:31:b8:23:e3:10:45:97:8f:
         a7:b6:27:b9:67:ed:73:38:29:22:eb:9c:14:32:d9:ca:9c:6f:
         1a:f9:aa:9d:20:c2:6e:1f:2a:e5:95:50:e1:35:43:1f:c4:b0:
         c6:2c:db:87:c6:a7:96:de:fa:0c:f5:5a:4a:a2:d3:62:30:8c:
         93:a2:42:24:f9:9f:ed:78:04:7a:52:76:d1:8c:6a:af:c5:64:
         e3:6d:32:6a:a0:ce:14:89:35:f5:67:4b:ea:2c:4b:56:e9:91:
         46:d5:46:a9:24:68:f9:12:4c:22:7d:8f:7d:b2:c0:ab:95:1e:
         c4:75:d9:c2:75:f3:c0:84:fd:74:6a:a4:16:2c:46:25:b0:e5:
         59:da:b9:1d:a8:eb:f8:8d:dc:d2:3a:09:5c:bf:0f:b1:2b:4f:
         8d:1a:a1:e5
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTAxMzAy
MDA3MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4NTRDNDAxQTgxRkE1
MzVFRjg0RkNGRjZEMDZDNUY5OUY2NEVFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr3xrpTp/n7TCHGf6UDnHC3aCwolI+cbkrSg38iG6qkhte114Q
VzeFnfUM7xTRJUJwju5qh/gghU9YMTHkhxhnCSuujvBp030KW72SieJA8mi/x7e7
Sxh+JHokGU+AlVbDvtPplkBvRnthCYfAHVoDMreldkpvtPe4UgFjbyzjZ6h8Ex83
Zt7FnZ2J2AIEoP3iGc/J3dVbhLDJT7JZJeE2Swv4Fi9VnW7CdKhr9ZWY8tERDdWa
CkL9+jyy/X+pKIZqTTUpwsGwz3C441MCx3IjAgwWOp+hzepLItizRFsdIaZVq1K/
l14C83WNdtK7G39nDI7iBDd6BpiAThV9TGHPAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUiFTEAagfpTXvhPz/bQbF+Z9k7vkwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3JmNXVWdHI0U1M3
SDNvaXpxUWF6RTV0VnVHUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQAvq/7XFVvxwpD/Ja9d08rEPFNH6MRcqKXtH8qmsRptwAFKP1Ountapgf9U
1N5nyw7suRT6x8yllXtHM4k6DME7fiDqux51UIDu+HOsfNaW6OTo4ibkx+dKxdpp
kyk4FQB4gu+iMbgj4xBFl4+ntie5Z+1zOCki65wUMtnKnG8a+aqdIMJuHyrllVDh
NUMfxLDGLNuHxqeW3voM9VpKotNiMIyTokIk+Z/teAR6UnbRjGqvxWTjbTJqoM4U
iTX1Z0vqLEtW6ZFG1UapJGj5EkwifY99ssCrlR7EddnCdfPAhP10aqQWLEYlsOVZ
2rkdqOv4jdzSOglcvw+xK0+NGqHl
-----END CERTIFICATE-----