Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft
File:                     tKZaDrhmkhnEGFRC1J_J1vgltmU.mft (raw, json)
Hash identifier:          uzdUkKUknvMkLAyiha7+gEdLReiTCWNVMomXUwp4eGo=
Subject key identifier:   0E:53:CF:F1:D0:18:1F:27:2D:8A:A5:65:C2:A1:13:F9:F9:5B:AB:28
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0F55
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft
Manifest number:          0E7F
Signing time:             Thu 30 Jan 2025 12:07:30 +0000
Manifest this update:     Thu 30 Jan 2025 12:07:30 +0000
Manifest next update:     Sat 01 Feb 2025 12:07:30 +0000
Files and hashes:         1: -DfPZoSf9iG6CH-WIe9lBz48SNA.roa (hash: mIIFaqSx2gEqw0eHi1CVxnaBJwypk2GLQVpFXi7jbbE=)
                          2: 16gXSVu5aRMj0B23kCNG-HfAu3k.roa (hash: 1z0QHYt8c6eFmwJxBiLxs/nAo7oo1vLkRxlV4s4BMLU=)
                          3: 5X8-IlRpVuQ1rHEXtcMozJHeoy4.roa (hash: rFGpOPNfwEX8DB0HY1uJyY1PV6kSq7YF4QWLB96j8tg=)
                          4: 8xiEIHudYwzOwyhdq0eHsjr_p2g.roa (hash: Gf8kwBwoY9q2qrmEp08fL3FNgItHutQy0liJJl1FggM=)
                          5: 9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa (hash: egOWplg1oXc3PaQOdQXvJKGvZ08etiR34ytcpn9Y+Pg=)
                          6: CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa (hash: PjPWWhz8SzJ9jkDCYBHrgQJNNLOSPiHHx8hBySG3HRs=)
                          7: ELbvA8vKhR2ivQifJqNZbUkEZyA.roa (hash: GdCBxQ83+awFqg/cg4F4z3ZEpsXk5S0F5RvUaQ+A+T0=)
                          8: EYCyL0YAgIZY2sFQyi2oFPistQs.roa (hash: 37rD4OJi9son9gBDWH9whkkmLPS5vwcdEupxDqz5mO4=)
                          9: JSRtLubIG7ZR_nn90an33lh2epI.roa (hash: SsFEe9v18wNlqaWpiU8a/1AvwwW9LHyIPkL4TXIkpjQ=)
                          10: KmTayuH13oeGwcbiE-XDcaxdwKw.roa (hash: HezlPeJ7qLE+eZ7oTay5QHyHavlp2rw3Q6oUiBr66ss=)
                          11: PM-khAd8UJiTc9vAB2O_BiFRWGY.roa (hash: q4L+u6+7RAfYaxws35syJ0pFlz1XhZyBRDIbg8dojmY=)
                          12: PzCnumNVNZXhq6ESAvU3928ifTg.roa (hash: omDDPmYdjAeCc2thPhEctmLcBCilL+J1HLlop0ZHYFM=)
                          13: Qgy68yjkPAiXln-t2sl62FoGB7M.roa (hash: kJ11MZsDIzDWBTr/2ZWlaB8d0mN2Wg/pPG5N2bOg8Fs=)
                          14: SLOAUQOOekQRO_cDjfs2lEcfDxc.roa (hash: WWpLz6TwPH26d7napnKLxvsWRdDnybtKeqW88XDFNfY=)
                          15: T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa (hash: V6IcciS6DQid62qkm18pKkMRU/Xdrt3gP2GTnW0fgKw=)
                          16: TZTPoIte2WVuaUPMUvBPtvb6UlA.roa (hash: XqGDdn1hYLm0F0BEV2QyP7YO8gt8F5h4wl+onReC/v0=)
                          17: VN9HrL6AGisEuybJk91W0uqArx0.roa (hash: HGFoBGLVUJD4TUhsZK3fXCFnw1jXXV4N/m+rfIr+vTk=)
                          18: Wn1YElWCGXQhZQjbb-NiGXZ3oPE.roa (hash: nc4Ls+3UMFs9W6qOk5YSvYfJx0OXoVmw1MY0532mWyo=)
                          19: bcVI7uh8YH_rRkKt--69gu64eRc.roa (hash: 77k1COlF19VFJFLP9oQy0cqW3o8IFTib3YBky1uipTU=)
                          20: gny9E3gFR888C93bJnhWVwlgVzU.roa (hash: JQTJNUKjQTjSAfkmdSwQIiF/jCip8g4cx/QckpNei7Q=)
                          21: jGZKI3ObvB4dHN71oVD6pQkrlsI.roa (hash: aKKArVsmj+jKef6jU5PMWOSEgfQkTkxCQRn7vAUcSYg=)
                          22: o-jtkVRpiNOjGZvm__7GG3MpPrI.roa (hash: 8SoVE34XEvC8bRRoufDgpwmEXgqek9x8Bt/wQ3jX/N0=)
                          23: oIiFyBIDDun4tZE5U3f5Se4vZpQ.roa (hash: rOjY4OFDMG7u15i6RFfZ6sH10Gg/f5qLSG+gLp7FOfQ=)
                          24: re73EV7StBJ_KkwW3dfUNRYgJgA.roa (hash: uaHMbEINnldNnP0AMli8UWVoT/OAW3Viip8ds8LDHSQ=)
                          25: tKZaDrhmkhnEGFRC1J_J1vgltmU.crl (hash: X6lTWy7SGo16ObnJB9sG/9QhzM4FE+ZkldVivAYvkJY=)
                          26: uqBLvWKidkJtDn4Uj9bwARdtpbw.roa (hash: u0wThK7s8vyGTaOYLm0acDWtkzcKcwYemcm4ysi6LEE=)
                          27: wjvEeRIoLGsGHCNRLT1MNx4StTk.roa (hash: llnGmbfQabCJwg4gEasvZWBEXdimHi87lw5NWLW6JJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3925 (0xf55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Jan 30 12:07:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0E53CFF1D0181F272D8AA565C2A113F9F95BAB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:75:40:22:61:58:f1:31:e1:0d:ed:89:c7:
                    1c:c2:a7:48:ec:32:66:b0:0c:77:66:f9:c0:10:73:
                    43:71:67:86:f0:e2:f9:e6:a8:a3:b8:93:ea:61:8b:
                    fc:b0:b8:f6:3f:c2:1b:69:1e:d6:5d:65:ca:37:5e:
                    ba:46:d9:c4:f2:3e:05:48:7a:7e:27:53:2c:68:c7:
                    1b:e6:02:61:18:e7:8d:3f:0e:23:3b:4e:cb:01:43:
                    0b:8f:05:e1:5e:3c:bc:9b:33:45:f4:db:cf:ee:5e:
                    9e:18:80:3a:fe:bc:fb:d3:34:c7:d5:ca:35:93:11:
                    c9:78:3a:df:ac:fc:69:69:a5:74:c4:da:0a:08:ab:
                    e4:9e:fd:53:2c:9a:52:15:35:8c:26:79:4d:69:78:
                    3e:7a:98:f0:bd:f6:e1:c0:18:a6:44:96:5c:d8:93:
                    a0:f9:4e:ff:4d:fe:4f:ed:72:03:ac:3f:1e:19:62:
                    ae:49:01:42:1a:2f:b1:e6:51:12:2e:e9:3c:6a:62:
                    dd:45:18:9c:31:88:6a:95:05:ff:2e:59:d4:86:96:
                    36:2e:17:8e:51:25:25:97:fe:83:c0:35:5e:c5:78:
                    53:3a:2c:c0:63:fa:d6:e1:2b:ad:61:43:f6:c3:bd:
                    e7:bc:10:3b:a7:7d:16:f5:08:2e:49:be:06:69:1f:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:53:CF:F1:D0:18:1F:27:2D:8A:A5:65:C2:A1:13:F9:F9:5B:AB:28
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:56:11:fc:0d:19:98:4c:f1:1a:37:b9:07:b6:2c:ba:55:7b:
         d7:1b:01:77:17:e5:ff:e0:d2:0f:37:a6:7e:43:8c:f0:c1:e3:
         22:90:36:e9:84:56:29:a4:6f:3e:65:d4:99:9e:55:0e:f9:3e:
         e8:7d:9b:a6:de:bd:97:da:43:9e:e7:f6:7f:7a:c6:74:f3:90:
         68:6c:18:45:8c:6b:0a:c4:0e:fc:44:84:df:17:49:ba:b8:91:
         c3:76:1b:b9:84:f9:2b:00:71:b8:22:99:bd:89:4e:98:9f:7a:
         47:e0:64:b9:ae:bb:a8:3b:3b:88:27:87:0b:b3:03:eb:11:2c:
         dc:1d:bf:d1:b6:e6:fa:3d:ea:3c:1a:23:1a:d4:52:12:01:46:
         ff:62:c4:5d:29:ae:48:ba:d9:dd:1c:75:25:df:40:97:29:1f:
         3f:4a:53:f6:f6:3c:f3:2b:48:25:d3:6f:ff:d2:37:c7:6e:4c:
         88:ad:48:24:bc:90:b0:c5:08:bb:52:23:01:78:1d:8c:7e:d4:
         2f:a8:b2:75:be:f4:cc:6e:18:f2:34:9f:88:04:a1:71:77:72:
         76:1b:d4:f0:3e:f3:9d:7a:50:dc:13:74:34:3d:b3:b6:7e:bb:
         69:dc:7e:42:04:41:23:f8:e8:11:17:b5:57:96:e1:c6:58:84:
         ec:f9:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----