Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
File:                     O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json)
Hash identifier:          vjO9yxMbn6SFiKeNLrQ0gQ6gwWDKDHi2tnCQ3anO7ZE=
Subject key identifier:   DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24
Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
Certificate issuer:       /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Certificate serial:       0C8A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
Manifest number:          0C7F
Signing time:             Thu 30 Jan 2025 18:37:11 +0000
Manifest this update:     Thu 30 Jan 2025 18:37:11 +0000
Manifest next update:     Sat 01 Feb 2025 18:37:11 +0000
Files and hashes:         1: 5AuX4_j1MsvOwzweQC70H20GHic.roa (hash: /oTSs7SrlfqL+x3AImPV7LAgu8Jx9jcd6JIu5PunhO8=)
                          2: 5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa (hash: WWmJPhgBq4sp+sOOpX7jrHpsj7Np2c8l1JHXDVAks1w=)
                          3: CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa (hash: pQUV8DhbFBDxdDqJAs0FLUxfpZTi1wViDFOHBAr4aSw=)
                          4: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: A/ps0oltYY8F4bS9Ltj46EDY6AgTec3ef64DOa6zIew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3210 (0xc8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
        Validity
            Not Before: Jan 30 18:37:11 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac:
                    c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4:
                    f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96:
                    d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9:
                    fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82:
                    31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0:
                    64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c:
                    10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0:
                    af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12:
                    1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2:
                    f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6:
                    09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc:
                    72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b:
                    da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b:
                    ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15:
                    12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f:
                    15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24
            X509v3 Authority Key Identifier:
                keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:b9:19:e6:6d:3f:7f:eb:2c:24:50:5b:89:02:e0:61:36:
         c4:61:13:f0:e1:ea:54:a3:7b:ab:6f:62:c7:eb:af:09:08:e6:
         c7:bf:df:65:9e:a5:01:61:72:70:86:38:ff:f8:49:90:5d:5e:
         04:da:aa:d5:49:6e:a0:1d:8f:4d:42:1b:1e:31:5d:45:55:f0:
         89:e0:b9:94:e6:2c:36:39:ee:d1:1c:b6:53:5c:72:88:13:b9:
         f7:d4:44:51:76:28:7d:fe:11:a8:94:13:fc:e4:66:f9:e7:68:
         37:25:c8:00:0e:b9:7e:d2:83:56:ff:63:c5:bf:98:a7:38:2d:
         19:93:c3:24:88:d1:30:eb:f2:09:f3:b7:f0:cc:d7:25:ca:77:
         8c:3b:ce:ac:04:49:40:a2:fe:3f:8c:35:61:fe:1d:1d:85:d7:
         0f:7b:31:ed:19:3d:08:6a:97:a9:12:12:c8:04:61:3c:12:53:
         b5:b0:67:c7:ea:16:2f:47:3a:5a:87:24:d8:87:fa:33:51:75:
         f7:26:2f:88:39:86:6a:20:e3:d6:be:24:1e:21:fc:ba:67:4e:
         76:be:69:50:79:57:53:bb:4e:a3:bf:23:a1:44:38:a8:39:1e:
         d2:6b:c4:08:55:13:dd:93:19:ed:2f:6b:c5:54:bb:95:bd:0e:
         23:0e:77:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:50:24 2025 by rpki-client