Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PSYDEA/A63UVs37DPPKfX7lLUH5XBaspVs.mft
File:                     A63UVs37DPPKfX7lLUH5XBaspVs.mft (raw, json)
Hash identifier:          mB8RbSeUezrG04fu4RAELWeTHkf9Jr3K8oHp8voDVhM=
Subject key identifier:   E4:7D:7A:94:09:ED:7C:5F:C1:BC:5D:DA:B2:15:1A:BE:25:8D:FA:6A
Authority key identifier: 03:AD:D4:56:CD:FB:0C:F3:CA:7D:7E:E5:2D:41:F9:5C:16:AC:A5:5B
Certificate issuer:       /CN=03ADD456CDFB0CF3CA7D7EE52D41F95C16ACA55B
Certificate serial:       0E8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/A63UVs37DPPKfX7lLUH5XBaspVs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PSYDEA/A63UVs37DPPKfX7lLUH5XBaspVs.mft
Manifest number:          0E8F
Signing time:             Thu 30 Jan 2025 16:37:29 +0000
Manifest this update:     Thu 30 Jan 2025 16:37:29 +0000
Manifest next update:     Sat 01 Feb 2025 16:37:29 +0000
Files and hashes:         1: A63UVs37DPPKfX7lLUH5XBaspVs.crl (hash: lwG+MAfh6KWQ8Fuw/uBm7RrtcNPharoRXX5e1fvmFN8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3727 (0xe8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ADD456CDFB0CF3CA7D7EE52D41F95C16ACA55B
        Validity
            Not Before: Jan 30 16:37:29 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E47D7A9409ED7C5FC1BC5DDAB2151ABE258DFA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:df:72:c3:70:9f:ac:7e:68:5d:de:ff:ef:b2:
                    17:f8:d6:31:a0:d1:93:2a:6a:9d:9a:20:ff:7e:6f:
                    1c:09:75:3b:18:8f:ba:67:99:ba:f4:78:b9:55:10:
                    de:a4:f1:74:37:69:27:0e:09:55:00:14:7d:8c:fe:
                    0b:34:43:e8:56:24:55:6d:30:05:9f:39:8f:a6:a9:
                    3d:c2:4e:b2:ca:c4:c7:71:74:1f:52:fd:fb:5a:94:
                    17:9e:34:9f:b4:a5:f3:f2:7f:b9:cd:58:4d:e8:4a:
                    47:66:fb:15:52:a9:15:9c:e4:5c:24:23:b6:54:72:
                    88:a5:42:70:8b:48:ac:c3:78:43:9b:6b:9e:c3:b0:
                    68:58:b1:8e:07:3d:dd:12:1a:0d:07:c2:6f:ac:e8:
                    7a:04:09:ba:8d:22:0b:43:4c:f3:a9:2f:88:16:07:
                    43:c4:6a:e9:3a:de:f4:67:fe:e3:2f:5d:23:ae:dc:
                    d2:32:9c:10:74:57:ca:03:84:92:61:9c:aa:b1:5d:
                    12:05:40:fb:23:60:e6:cb:d7:80:0f:58:30:2a:d4:
                    eb:3b:0f:5f:6f:d4:56:27:bc:91:31:c7:25:40:b9:
                    1d:2c:62:18:df:cc:98:5c:1d:40:d5:98:a2:7a:79:
                    0a:0f:64:35:f7:27:af:4f:e0:a9:e5:94:35:ac:9c:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7D:7A:94:09:ED:7C:5F:C1:BC:5D:DA:B2:15:1A:BE:25:8D:FA:6A
            X509v3 Authority Key Identifier:
                keyid:03:AD:D4:56:CD:FB:0C:F3:CA:7D:7E:E5:2D:41:F9:5C:16:AC:A5:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PSYDEA/A63UVs37DPPKfX7lLUH5XBaspVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/A63UVs37DPPKfX7lLUH5XBaspVs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PSYDEA/A63UVs37DPPKfX7lLUH5XBaspVs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ea:7e:31:f4:61:11:50:9b:78:7c:53:4a:65:59:7f:3f:2a:
         88:38:95:13:15:5c:bb:6e:6b:94:99:53:99:8d:92:dd:29:88:
         77:08:98:cc:36:8e:62:07:15:6b:99:98:b3:ce:8a:40:6b:38:
         89:45:ab:21:cb:a6:4d:14:d3:e6:2f:c4:e8:d5:fd:f5:f4:f5:
         19:76:78:b1:15:5c:69:68:ea:ea:9c:8a:14:ad:79:78:14:fd:
         7c:86:de:7d:9a:09:89:e7:21:82:fd:0c:c8:9e:46:ed:44:06:
         e5:57:42:43:42:e9:e7:51:cb:0e:b1:e5:f2:99:8b:2d:77:43:
         33:96:3a:f0:78:0b:07:f1:4c:e9:6d:66:c3:4d:cb:f3:2b:68:
         d5:06:2c:15:6e:7c:80:ab:45:72:fb:08:5f:94:43:ee:4d:1e:
         ee:72:24:c2:3b:a3:9d:b5:c0:8e:d1:68:57:b2:6a:d9:1f:05:
         50:1b:32:5c:cd:06:79:c0:b8:e4:ee:35:f3:7b:a3:0a:3d:fe:
         e0:62:34:a2:e2:a8:87:f3:03:92:7f:2b:d5:b8:02:75:ea:44:
         68:2d:2d:67:1e:40:8d:1b:a4:43:5d:98:a5:b4:ba:94:fb:6a:
         29:be:bd:29:d0:b2:27:f1:bd:48:73:bf:9b:37:93:c6:bd:2e:
         3e:16:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:49:45 2025 by rpki-client