Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
File:                     RR75NZqYT2pM-R_pAE6usImphMA.mft (raw, json)
Hash identifier:          Zo70qcW1H7aEBfy1tdJq8iXfFygrPXBpv6Ig3FtP//0=
Subject key identifier:   D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Certificate issuer:       /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial:       0CA9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
Manifest number:          0C7A
Signing time:             Thu 30 Jan 2025 19:39:11 +0000
Manifest this update:     Thu 30 Jan 2025 19:39:11 +0000
Manifest next update:     Sat 01 Feb 2025 19:39:11 +0000
Files and hashes:         1: 9y4K6aPbTRPwmqnflp9aOQStQLk.roa (hash: UiufGjuM4oNQyqjBm2Xmrt2MvuWeXAr6yeNdAT81Sx0=)
                          2: CgtUc-nq2ppy-doZ7gjijCZKOm4.roa (hash: ofGfZOHZYB3uDvvZsnRHUZwBrLIZR3L8rR7XSqPUC1I=)
                          3: LTx4wWgs0zTos9sT-XohKLYhVq0.roa (hash: c1agtZM+slTN3GjRkkng8SH7Xzi27g0xf8+QyaNcFE0=)
                          4: QDMmYqXt8fBjCSJpTy_-aSWUvjE.roa (hash: QNxxX+fCGf5zchP2tuWBY7nLQUIuhtWjV8nwiD1eosc=)
                          5: RR75NZqYT2pM-R_pAE6usImphMA.crl (hash: MTyzNyNu3bP6vCIh9cKNcpNEZhk6nBSrzrpQfRopZdU=)
                          6: U0Qu32aFcYyVYsUTPYXp29mL1ls.roa (hash: habKPE5J7k/lWuqEvLFxHy8BHzVDA0I8eehAK1WPpz0=)
                          7: Va2qlQyYmJOZnks1J6GRs6gr1XU.roa (hash: pI8UpwBHsl/RsLsYz1d9JV+HHnFpPPzY4J+nUFOh7cc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3241 (0xca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
        Validity
            Not Before: Jan 30 19:39:11 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D228D03188795DA5398BB6194C4813512F74727E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2e:f7:a4:1c:54:16:63:3c:5d:6c:66:8b:c2:
                    bb:16:10:4a:c4:ab:96:08:10:8d:49:cb:9e:79:5a:
                    d6:02:eb:09:b6:0f:23:f8:1b:2f:00:9f:55:9a:80:
                    d6:a6:8d:bd:89:3a:39:d3:cc:fa:6d:29:81:75:5b:
                    26:e9:29:a9:31:d7:cc:3b:23:c9:70:9f:28:4b:99:
                    3d:04:25:85:9a:48:24:3a:e7:da:c4:52:f9:2b:c8:
                    90:75:97:c8:3d:a0:ef:e5:47:17:71:ed:bd:c1:13:
                    8a:1c:f9:29:1a:45:9b:ed:c9:88:77:3a:4a:db:03:
                    00:e8:dc:64:e6:ff:16:69:c7:63:db:f7:12:50:18:
                    bc:05:64:51:60:e3:e8:f9:58:10:cb:01:e1:29:7e:
                    4e:0e:cb:ec:10:98:d4:f6:de:9b:a7:89:6c:0b:f2:
                    50:a6:02:63:57:35:60:1b:f0:c0:c8:f5:69:f9:23:
                    dc:fe:9c:82:be:8b:1f:ca:a2:ac:30:be:54:3e:75:
                    d4:a4:51:7b:45:bd:0a:d8:8b:b7:d9:b5:07:87:8f:
                    86:f9:57:68:0b:20:bc:69:93:8b:06:1c:88:d1:1d:
                    50:11:93:02:e0:a3:e9:06:67:f5:41:91:8f:f8:1d:
                    46:67:78:58:9d:c9:82:f7:e9:3f:fd:b6:4c:c7:23:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
            X509v3 Authority Key Identifier:
                keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:0a:08:97:65:2d:a2:03:aa:c0:dd:cc:af:0f:ca:f7:4c:
         b1:d6:cb:de:73:65:e1:4c:09:53:82:96:b6:e6:6c:48:22:3b:
         b0:96:f1:63:6f:87:1b:7f:a4:d5:0c:0d:52:a5:d4:82:c4:56:
         f5:92:73:fd:1f:2e:aa:8c:83:ac:b7:0e:b6:54:60:2b:73:68:
         89:33:8f:16:5c:d8:a3:ae:69:a0:34:41:b4:58:8b:12:5e:35:
         eb:ea:82:24:0c:85:9c:06:68:bd:c2:18:35:e7:4d:d0:8f:94:
         98:aa:6e:42:88:dd:6e:62:34:17:7d:f7:9e:b3:87:81:3a:88:
         95:43:d0:59:80:63:b4:de:b3:ef:a9:d9:ee:dc:e9:91:e6:2f:
         06:6c:51:0c:4f:27:6a:13:56:bb:1a:37:b4:d9:fd:8d:07:58:
         07:7a:06:24:6f:e3:a0:c4:c4:4c:a5:47:04:d7:d5:a5:d6:3a:
         26:0f:ea:b8:70:59:b4:03:a3:25:ba:d5:a5:b7:f8:9d:dd:e0:
         9a:51:bc:e9:ee:9b:79:9f:e5:bd:90:13:f4:32:5e:b9:91:7a:
         e5:ba:47:30:96:72:cd:f4:9b:7a:76:00:47:29:54:7c:8d:23:
         6d:27:c7:82:41:91:5e:59:f3:ad:6f:65:13:8b:97:23:41:0e:
         63:24:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----