Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
File:                     mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft (raw, json)
Hash identifier:          n3bSwDMLxB0n1I/zZm3PZdeZu8v/9vPEJkcLnyssoMg=
Subject key identifier:   B1:4F:CA:ED:DE:09:C7:ED:F4:B2:AD:6D:75:B2:10:5C:13:E5:10:DA
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Certificate issuer:       /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial:       0C7D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
Manifest number:          0C4F
Signing time:             Thu 30 Jan 2025 19:07:39 +0000
Manifest this update:     Thu 30 Jan 2025 19:07:39 +0000
Manifest next update:     Sat 01 Feb 2025 19:07:39 +0000
Files and hashes:         1: 42Wof98oKpuZM9fQWMbkCIyaJc0.roa (hash: wTjoNliAkDzSyYtpfmADD0IHkYpdpFAssD8N2285cRY=)
                          2: 4quM7Gya3uXTGJSGfEDnMNGp990.roa (hash: rW/5d9yYiJlAPIsPLQ4TyuNoiId5Gx19+fTZJ2SSxCI=)
                          3: Q17ABo6C9ZdZ8232U0rviC1SPcc.roa (hash: 9yuDkPjP1adTDlB1l6Hps4meF2Op0ltvVXVQCha7458=)
                          4: VmVPCawMx2PDqrqhXs7DnuBsH-c.roa (hash: uE34w6SZa0buB1Nc/lE5wk5sCJsHMiDdgnP5z2Cw+Qs=)
                          5: XxJK887BOHIJIwA6eZ2rnOarjuk.roa (hash: m0xXePOqfOy9rg5kCz1NKDydvjBYOxs1zLtKprUuGy0=)
                          6: mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl (hash: hiG3tHB8qYKkTW7D+SmzehgOwiCfxcHmFTyKp68coLY=)
                          7: qsBtCU16X01_m3mTwqJuWf6uqd4.roa (hash: velLTKgjxXF/FPg0jeYrWfrMnXE0DSnp4TSj7CKFeig=)
                          8: rcHrS_74yCI7k86NNG3DlIn-z20.roa (hash: ItQ/7k5nBa9/u2eshRFBOx0euqWXLxDN6s4G7tIYYRI=)
                          9: sgPyMDjRqa3IWUbpq83UCj8JRF8.roa (hash: dCui0sSVA0mE4Ze7LtdRbsmpxGouaQYLyrXKg/MS3S8=)
                          10: trRbJiJcSegjfYfcSToTCA4qSNA.roa (hash: B0/Z1iE8x1rIpA20sHw3AskPSDKgyUvLvixuxqV8MGE=)
                          11: wRFj0dILeqC4n3yuTUJb3pnxoDE.roa (hash: N1IinwwubwQ0q8EsJf4cUbjue2NYOto+Z3MaBsY+71o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
        Validity
            Not Before: Jan 30 19:07:39 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B14FCAEDDE09C7EDF4B2AD6D75B2105C13E510DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:7d:d7:f2:fb:38:76:98:a8:cf:87:5e:96:
                    a4:87:e0:8f:41:48:98:04:bc:be:35:bc:f7:92:9d:
                    e4:0a:e6:f8:a4:64:5a:d6:b3:ca:59:71:9e:cc:36:
                    00:6d:63:4e:48:f9:b4:ea:93:18:84:d1:6b:9d:74:
                    15:c8:71:5a:a6:72:c0:17:fc:21:4d:41:d3:59:25:
                    ce:3a:38:05:ec:ce:1f:16:f6:31:3a:a9:9c:df:d9:
                    95:ae:e7:05:48:77:df:cf:54:7b:d8:14:6e:d6:9a:
                    e7:8e:dc:ce:8b:2e:36:aa:ee:c3:1a:76:25:b1:0b:
                    59:a3:e9:64:77:65:f4:2e:97:22:54:1b:1e:51:99:
                    72:f2:92:59:e0:49:03:48:9f:8b:93:ec:32:f1:1b:
                    b3:c4:92:25:4c:00:e8:8e:87:4f:71:27:15:28:e4:
                    60:cd:f8:cd:ef:a2:30:8e:6b:f5:09:0d:e8:f1:10:
                    55:cf:ca:f3:16:c9:2d:d6:07:cb:d3:b3:e3:f4:38:
                    b3:70:c7:3c:c3:d3:c3:01:9f:72:14:5c:00:7c:a7:
                    27:20:f5:1e:ab:7d:3e:83:78:4b:75:f3:bd:86:90:
                    24:15:90:31:7d:b6:69:2a:ee:c0:ad:cf:5d:17:4d:
                    0b:74:36:1b:c2:4a:c8:1d:c5:91:d7:66:7c:fd:6f:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:CA:ED:DE:09:C7:ED:F4:B2:AD:6D:75:B2:10:5C:13:E5:10:DA
            X509v3 Authority Key Identifier:
                keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:c3:ac:4a:b2:93:39:37:e4:a9:56:74:62:f6:5e:79:f1:
         38:fa:11:9a:7a:ab:ad:cf:94:4b:65:dc:0b:e4:3a:c8:ae:62:
         7c:f1:8b:4e:48:eb:8e:fc:16:a0:5c:e2:9f:cb:5b:97:1e:db:
         e5:21:83:34:f9:de:1a:5b:09:3b:c2:de:44:8e:bf:4a:ba:1b:
         c8:4e:3d:bd:38:9f:e6:fc:56:5b:c8:2d:c5:f7:bc:57:20:0e:
         48:59:b3:b1:48:18:82:10:06:54:0b:fd:88:fd:bf:a5:7f:ad:
         b0:d8:21:96:f9:fd:03:83:76:f1:eb:ae:8b:ef:c1:2d:bc:45:
         31:47:16:24:9b:19:ff:d2:68:86:11:f4:8a:f2:2b:ac:8d:c1:
         bb:1c:a9:0b:79:23:78:15:04:1c:4b:84:91:8f:af:33:fc:67:
         ca:60:cc:20:f7:10:12:0c:68:7f:26:74:48:7e:c6:3d:bb:59:
         d4:88:1e:0f:8c:35:41:5f:d6:0c:62:9b:d9:39:03:93:81:18:
         b3:f9:08:b2:23:eb:c0:85:61:81:b5:9c:38:aa:da:57:ff:95:
         60:04:60:25:d6:81:2c:34:d5:6b:1a:81:d8:50:cb:a0:7c:6d:
         96:70:bf:7e:be:3a:d9:3e:93:a8:f2:e2:08:93:2b:f8:f6:09:
         a8:fb:5d:6e
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz
RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yNTAxMzAx
OTA3MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxNEZDQUVEREUwOUM3
RURGNEIyQUQ2RDc1QjIxMDVDMTNFNTEwREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9H33X8vs4dpioz4delqSH4I9BSJgEvL41vPeSneQK5vikZFrW
s8pZcZ7MNgBtY05I+bTqkxiE0WuddBXIcVqmcsAX/CFNQdNZJc46OAXszh8W9jE6
qZzf2ZWu5wVId9/PVHvYFG7WmueO3M6LLjaq7sMadiWxC1mj6WR3ZfQulyJUGx5R
mXLyklngSQNIn4uT7DLxG7PEkiVMAOiOh09xJxUo5GDN+M3vojCOa/UJDejxEFXP
yvMWyS3WB8vTs+P0OLNwxzzD08MBn3IUXAB8pycg9R6rfT6DeEt1872GkCQVkDF9
tmkq7sCtz10XTQt0NhvCSsgdxZHXZnz9b0X9AgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUsU/K7d4Jx+30sq1tdbIQXBPlENowHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt
+2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB
SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvbVQ5eWdQSDV0
bFE1M1dXdC0yaktEV3ladnNVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJhbw6xKspM5N+SpVnRi9l558Tj6EZp6q63PlEtl3AvkOsiuYnzxi05I
6478FqBc4p/LW5ce2+UhgzT53hpbCTvC3kSOv0q6G8hOPb04n+b8VlvILcX3vFcg
DkhZs7FIGIIQBlQL/Yj9v6V/rbDYIZb5/QODdvHrrovvwS28RTFHFiSbGf/SaIYR
9IryK6yNwbscqQt5I3gVBBxLhJGPrzP8Z8pgzCD3EBIMaH8mdEh+xj27WdSIHg+M
NUFf1gxim9k5A5OBGLP5CLIj68CFYYG1nDiq2lf/lWAEYCXWgSw01WsagdhQy6B8
bZZwv36+Otk+k6jy4giTK/j2Caj7XW4=
-----END CERTIFICATE-----