Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft
File:                     eVcHbim_wWSO_3GjmLqsSp6IaCA.mft (raw, json)
Hash identifier:          U9Gj9xF8M6E1Dd8mF+qcV1sQn7RxUf4ZBNp3vde0ma8=
Subject key identifier:   50:61:64:36:9D:30:0A:B9:3C:86:23:88:9B:D7:DB:B2:38:03:A1:28
Authority key identifier: 79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20
Certificate issuer:       /CN=7957076E29BFC1648EFF71A398BAAC4A9E886820
Certificate serial:       0C78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft
Manifest number:          0C72
Signing time:             Thu 30 Jan 2025 19:39:12 +0000
Manifest this update:     Thu 30 Jan 2025 19:39:12 +0000
Manifest next update:     Sat 01 Feb 2025 19:39:12 +0000
Files and hashes:         1: 34tvChXxZ2p_X_HU7ibKVtATDkw.roa (hash: A5SFGaZdYSDXUPOxYUnfs3NaDbWI2BRPL2KZTGWeuuI=)
                          2: bLT5p9rV5P8CKWS5UfZZ4s5IXYM.roa (hash: RtcTbH4LUuKGQXeSsnH/7C5qaitPtkZUihXIyRaRDuc=)
                          3: eVcHbim_wWSO_3GjmLqsSp6IaCA.crl (hash: 0lvfnt1OJ5AVqd945SKqEWXPhkQL8fKC1p8VqvUTF7s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3192 (0xc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7957076E29BFC1648EFF71A398BAAC4A9E886820
        Validity
            Not Before: Jan 30 19:39:12 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=506164369D300AB93C8623889BD7DBB23803A128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:2f:61:94:7f:a3:79:21:20:a5:d2:12:3c:
                    4e:f2:12:84:75:bb:51:d4:d4:eb:4b:07:ee:a0:2a:
                    93:57:25:7f:c6:9a:4f:ad:0d:50:b4:a8:06:95:81:
                    67:7e:e4:ba:6a:8f:33:83:71:2e:74:96:5c:01:24:
                    ec:59:25:b2:b9:85:ef:48:cd:89:09:c7:0c:31:94:
                    b7:59:40:75:75:91:11:81:89:23:80:cd:9c:06:91:
                    66:73:22:f4:4f:b0:73:d8:c9:c1:aa:e5:d4:a3:ef:
                    46:72:2f:40:72:5a:7d:38:30:94:b0:cb:1a:d0:bf:
                    4c:90:0e:77:2a:93:d4:e1:71:14:cc:4c:6e:90:c7:
                    1b:ed:58:cc:e4:98:ed:99:0c:24:6d:1c:3a:17:61:
                    db:be:ab:a8:f7:ad:f9:62:28:99:97:6c:43:4e:ca:
                    be:a8:a6:20:20:d2:d9:58:f7:94:d3:58:72:d2:1b:
                    87:8d:9a:0d:b8:bf:51:23:1b:14:c4:f0:ec:69:b5:
                    83:23:3d:b6:74:bc:55:33:53:74:4f:88:26:e7:a4:
                    0f:08:c2:77:64:08:a2:12:36:54:45:82:92:17:57:
                    6d:7c:7b:0a:dd:c0:8f:75:31:9c:40:53:c3:20:a5:
                    f4:9d:46:59:b8:55:86:d0:c3:c0:37:10:6d:42:00:
                    08:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:64:36:9D:30:0A:B9:3C:86:23:88:9B:D7:DB:B2:38:03:A1:28
            X509v3 Authority Key Identifier:
                keyid:79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:10:1a:55:b9:bb:bf:f5:b0:c2:80:3d:83:38:8c:02:fc:99:
         1a:38:d7:48:b5:2e:49:f0:eb:81:5e:3f:60:28:5f:0e:fb:a7:
         0e:62:70:79:43:37:70:53:06:bb:e6:25:96:45:8e:f2:7b:26:
         37:8c:c9:bd:20:58:76:18:16:af:da:fb:d6:86:29:bc:96:87:
         e8:14:8d:7d:a3:de:44:e6:01:b6:d1:33:cc:8d:47:99:92:33:
         14:92:49:fc:1c:bb:08:a4:bc:a1:7e:2f:10:ec:49:a4:90:12:
         db:be:87:8f:37:25:2a:7f:cc:c0:4f:82:22:c4:40:46:76:6f:
         57:33:2f:9b:73:3b:26:e4:19:da:c2:da:c2:2e:64:91:05:04:
         2e:bd:1e:0a:c7:b0:2b:ab:81:02:5f:84:49:08:91:0c:46:db:
         4a:e3:01:1d:a2:8e:f7:c8:9d:c9:76:b3:68:e7:b3:70:96:24:
         f8:8e:52:7a:50:80:64:35:1f:a3:17:e0:ef:5a:cf:2a:22:5a:
         a5:44:06:0b:c5:49:d5:9a:75:3e:0c:ee:f6:4b:01:b9:b3:3e:
         e2:bd:76:af:dc:3a:5f:8f:e1:88:bf:eb:6d:1d:c4:7a:bf:56:
         e2:a0:d9:dc:f5:4b:7a:c1:b7:e7:e8:0e:32:28:d2:53:9c:4d:
         e4:f6:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:04:01 2025 by rpki-client