Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
File:                     DflKsHKMejjFDw1hVU1J1lHzOqI.mft (raw, json)
Hash identifier:          AB3w/BHHHKu5e5mus1uNZMnxnumgj/Ja0NqSZbg3S/E=
Subject key identifier:   81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0CCB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
Manifest number:          0C7C
Signing time:             Thu 30 Jan 2025 19:07:27 +0000
Manifest this update:     Thu 30 Jan 2025 19:07:27 +0000
Manifest next update:     Sat 01 Feb 2025 19:07:27 +0000
Files and hashes:         1: 8W89wA_E1FAc07WNOVh9LSMK6rk.roa (hash: LzV3ejAohweNfuKvcJh7dvai6ij4bNnWLI2Rpa5ud5w=)
                          2: 9Dn5UY0mHKVVsX1eq_33XyaUyOs.roa (hash: 8oD42nwk98BQJ9zL3y2KnaMUq0+Quen5JV/O2PoyNzk=)
                          3: DflKsHKMejjFDw1hVU1J1lHzOqI.crl (hash: xiSs7ljOu0vLeG0n6kBFF9U+fRdHXpUSqJCh0blGxV0=)
                          4: GLUJXv-XO5ux9_ZVuhuykp0nJgc.roa (hash: 73oFiu0qHP72q2FLh15Q4f3CIBHssEpnp8IcK91wi6w=)
                          5: H_hG3YnC4ZR5pYMDOS1JK3EWj0Q.roa (hash: v9Wc86iqvE6dkP90Pxb18YOGRBafH2h/h9opi+V5y28=)
                          6: KdCCZtj4HPMloeVeS7-1X4BlSh8.roa (hash: TEmjUqFQnz6jAsYWObpZnZM7GGgAMCBg1drEvKNm03g=)
                          7: SfMFHlx8Sb2hdY2lC_hDEhktdjI.roa (hash: ozFOeOwDe0ep87Ql83L+rvvUtQkQ2JnDLOW6sEfdts4=)
                          8: XFOHdkG0KSkYhJScBtPJzKCTMM0.roa (hash: Ex4/U9HZD6ywFs6L+jwb7YS01c7OQmdgengsNLphNhY=)
                          9: Yd4FJ-Ki-jEtx0Ab3_4SSOGRHz0.roa (hash: ON1k9xalsandXrRo73DJmzM+4eS+vDnP/egbxZMiQXI=)
                          10: wFuhzucHhWRV7wnKhx__aC4xIKY.roa (hash: I7SnsurlYcw9aEQVGKEJy5hvZGEB2wLN1+v6a63itzs=)
                          11: yASlG4QXgX64nRSF088iftqBxww.roa (hash: uJCg78nUn6D3QajHlOWhU1TCratqjN4MiBIsd8J7PdY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Jan 30 19:07:27 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=81FA7E956AB63FA13DCA0C183E633FAB55C931EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:52:76:a2:e8:51:c1:e7:ab:b3:ef:f9:a1:
                    c4:97:2f:e0:e1:62:81:25:88:34:b3:8d:64:08:9d:
                    5d:b4:32:cd:06:05:74:a4:fa:a3:fa:8c:f9:f7:93:
                    7d:86:f8:b3:91:3a:1b:b6:b3:7a:bd:a5:bf:5f:02:
                    f7:76:7a:e5:cf:49:1c:9e:43:2b:a5:5d:bb:9d:9e:
                    1a:53:26:29:5b:f8:e5:64:3e:52:f1:44:74:29:a0:
                    81:fe:b9:16:6a:ff:94:fe:2e:52:57:d7:83:11:36:
                    03:3a:7a:67:a7:c7:58:3c:f7:42:31:14:0f:90:93:
                    60:91:ac:60:06:42:3c:7b:6d:88:df:b4:37:2c:df:
                    1d:90:16:44:ff:5a:6f:28:9e:a6:d1:93:48:b3:34:
                    42:b1:ff:22:86:9a:51:5f:cc:a1:13:e7:fc:78:c2:
                    c8:e7:75:bc:e7:6f:77:0c:07:0d:95:15:bd:90:39:
                    83:f9:e9:0a:3f:32:11:ed:80:d4:ee:d1:80:6d:c7:
                    96:3e:ae:cf:52:bd:b7:51:e9:a4:b2:9e:a0:b0:93:
                    1a:73:37:62:42:ce:67:45:39:53:df:65:eb:55:0d:
                    07:fb:ba:42:66:7d:1a:2d:a2:d7:92:1f:93:9c:85:
                    4c:72:ce:4c:28:5a:b3:7f:38:42:d9:18:39:88:bf:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:fd:43:f4:e1:a8:b9:50:8a:e2:99:e8:bf:ee:79:86:27:
         5b:2e:bc:c5:ba:98:78:5a:0c:29:79:e4:90:1b:b6:7f:b3:45:
         a6:bd:3b:12:21:7a:f0:60:2b:0a:a7:ae:e0:b9:aa:b5:77:e6:
         22:a6:e6:d6:16:d2:df:d2:9a:38:13:7f:28:19:63:5d:28:08:
         3c:1f:03:b3:bf:1c:43:a6:40:60:31:d5:4e:b8:c5:ee:bf:c2:
         0a:e3:bb:23:bb:66:01:b5:9d:10:7f:3f:c0:c7:3e:d1:c2:54:
         78:9b:40:04:bd:bc:de:28:66:d2:59:3b:1b:2e:ce:d1:91:88:
         e6:23:6d:8e:8d:42:d1:e8:a4:d1:25:97:90:d9:84:fd:a4:99:
         6c:69:ef:ea:5b:5d:9b:f3:4e:bf:4e:2a:e0:b7:01:88:63:54:
         f6:dd:4d:7c:96:f3:e6:48:b0:55:c6:94:4f:5d:6d:98:06:0d:
         96:e9:fe:68:84:54:ea:dd:c0:f1:68:c2:b3:9a:60:7b:e1:27:
         1a:5a:80:05:d6:d2:94:2b:3d:84:33:67:4e:e5:38:d4:ba:fb:
         50:79:a6:de:86:12:ef:e7:f7:f0:dd:54:c7:7c:f0:75:f2:0e:
         fa:32:67:a3:cd:82:1f:e2:bb:ce:e0:97:a9:fa:49:42:d8:d1:
         ef:a3:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:42:47 2025 by rpki-client