Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
File:                     4q-M_ZUnD89cLKZdh3d_b7er_TI.mft (raw, json)
Hash identifier:          dftuNvg0T3Pzc9Nn19hwk1mVTwYl1cgrC8fBE9G7j3E=
Subject key identifier:   5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Certificate issuer:       /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial:       0371
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
Manifest number:          035F
Signing time:             Thu 30 Jan 2025 17:08:54 +0000
Manifest this update:     Thu 30 Jan 2025 17:08:54 +0000
Manifest next update:     Sat 01 Feb 2025 17:08:54 +0000
Files and hashes:         1: 4q-M_ZUnD89cLKZdh3d_b7er_TI.crl (hash: 73SiG7QGwQZADZgTvIbJeg7nYiySw9gAhrbJpsOPOtM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
        Validity
            Not Before: Jan 30 17:08:54 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5C6AC1CE6BB50E9909738E7361A12CAC5C60037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:6f:cd:62:e4:c0:c0:d6:cf:8a:15:46:04:
                    26:8b:1d:25:3c:5f:32:a7:13:2c:60:b9:c3:dd:55:
                    08:0d:0c:2e:73:fb:9c:e5:f8:eb:c0:11:6c:4d:e0:
                    aa:fc:51:88:83:7c:0f:e1:75:f4:05:5c:9a:bc:0b:
                    bc:53:a1:14:04:0f:be:68:6b:fc:d1:ba:f2:16:f3:
                    10:d1:0f:47:20:72:f8:e2:fb:5f:e9:66:dc:35:a3:
                    b7:94:c3:fa:b3:4c:1d:ee:fb:aa:a2:3d:84:af:cd:
                    ee:df:7b:c0:95:d4:26:e7:f2:a3:1f:3d:16:4e:17:
                    7c:01:b1:45:b7:b7:6a:e4:a3:08:97:77:a0:f8:46:
                    49:09:91:10:f3:3c:f7:f9:ab:57:f5:43:fa:41:ba:
                    00:22:e4:11:d9:ac:eb:e2:67:52:f1:ce:f7:9d:32:
                    3b:a9:73:b4:17:ad:23:04:96:92:09:b5:ff:b1:b9:
                    ed:16:29:e2:6f:d7:34:e2:f7:0d:b9:55:52:06:92:
                    dc:35:0f:68:9b:90:03:e4:10:bf:ec:14:6e:2a:a9:
                    97:dc:5e:f6:66:8a:a5:21:ff:6d:b8:b6:f4:ac:3a:
                    da:9d:d8:d8:82:3e:dc:96:8b:4b:22:94:5e:72:2d:
                    d7:8f:1f:f0:0d:20:e4:98:dd:bb:79:b0:69:12:51:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
            X509v3 Authority Key Identifier:
                keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:b2:39:c8:23:0e:c5:fa:29:19:eb:01:1e:ae:76:72:af:
         90:5c:b5:14:dc:c4:3c:6b:2f:f1:d6:1e:88:b8:b2:b0:c4:fb:
         be:67:9b:35:c1:06:9e:d7:b9:d6:9e:29:44:8c:0b:53:1c:87:
         1e:db:ed:a0:58:a6:95:a1:55:70:72:0f:39:47:8f:fa:d9:1a:
         05:e5:3c:ca:ee:a4:e4:bd:65:6a:75:59:18:98:6d:89:bc:e8:
         33:92:c0:d9:f7:47:84:c2:4e:4e:0a:81:73:f4:1e:2d:40:8a:
         c9:32:3d:83:64:d1:52:6d:f5:d1:ce:97:f0:bf:58:2f:ff:47:
         db:9f:c8:e3:fd:29:da:63:be:b2:3e:bf:c1:cb:d4:9a:8c:ca:
         60:59:56:89:c0:70:01:0b:d2:10:b3:5f:ea:eb:57:96:81:4d:
         a4:eb:81:14:e4:e1:86:a1:02:f9:b3:4d:bd:99:9d:64:c7:9e:
         3f:cd:20:6c:2f:a7:15:67:6f:81:20:f1:0b:b8:da:e7:c9:33:
         1d:5f:7c:73:c0:a8:b6:7a:ac:df:d2:bb:d7:06:8b:d1:9e:ca:
         a4:ce:95:f3:60:39:10:ba:3d:3f:7c:62:81:fd:7e:bd:c3:01:
         07:17:47:6a:cf:f1:06:fa:6e:3a:43:e3:d2:f8:9d:62:27:a3:
         c4:fa:66:b8
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJB
RjhDRkQ5NTI3MEZDRjVDMkNBNjVEODc3NzdGNkZCN0FCRkQzMjAeFw0yNTAxMzAx
NzA4NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDNkFDMUNFNkJCNTBF
OTkwOTczOEU3MzYxQTEyQ0FDNUM2MDAzN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxHW/NYuTAwNbPihVGBCaLHSU8XzKnEyxgucPdVQgNDC5z+5zl
+OvAEWxN4Kr8UYiDfA/hdfQFXJq8C7xToRQED75oa/zRuvIW8xDRD0cgcvji+1/p
Ztw1o7eUw/qzTB3u+6qiPYSvze7fe8CV1Cbn8qMfPRZOF3wBsUW3t2rkowiXd6D4
RkkJkRDzPPf5q1f1Q/pBugAi5BHZrOviZ1LxzvedMjupc7QXrSMElpIJtf+xue0W
KeJv1zTi9w25VVIGktw1D2ibkAPkEL/sFG4qqZfcXvZmiqUh/224tvSsOtqd2NiC
PtyWi0silF5yLdePH/ANIOSY3bt5sGkSUbD3AgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUXGrBzmu1DpkJc45zYaEsrFxgA3swHwYDVR0jBBgwFoAU4q+M/ZUnD89cLKZd
h3d/b7er/TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVDVEFM
RS80cS1NX1pVbkQ4OWNMS1pkaDNkX2I3ZXJfVEkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBLzRxLU1fWlVuRDg5Y0xLWmRoM2RfYjdlcl9USS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1JFQ1RBTEUvNHEtTV9aVW5EODljTEta
ZGgzZF9iN2VyX1RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AIpxsjnIIw7F+ikZ6wEernZyr5BctRTcxDxrL/HWHoi4srDE+75nmzXBBp7Xudae
KUSMC1Mchx7b7aBYppWhVXByDzlHj/rZGgXlPMrupOS9ZWp1WRiYbYm86DOSwNn3
R4TCTk4KgXP0Hi1AiskyPYNk0VJt9dHOl/C/WC//R9ufyOP9KdpjvrI+v8HL1JqM
ymBZVonAcAEL0hCzX+rrV5aBTaTrgRTk4YahAvmzTb2ZnWTHnj/NIGwvpxVnb4Eg
8Qu42ufJMx1ffHPAqLZ6rN/Su9cGi9GeyqTOlfNgORC6PT98YoH9fr3DAQcXR2rP
8Qb6bjpD49L4nWIno8T6Zrg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:25:30 2025 by rpki-client