Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
File:                     zLVFQVOszs6FINM5B9VOVsXKmks.mft (raw, json)
Hash identifier:          DIXdOOw/q0vWTlI4Ku3mNi92A9xO6Ezc0TEQwF4kOJI=
Subject key identifier:   9F:76:E0:19:DB:14:62:7E:DD:F8:6F:6D:2E:AA:E9:BD:0E:B9:D8:8C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0CFF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
Manifest number:          0C92
Signing time:             Fri 31 Jan 2025 12:37:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:37:37 +0000
Manifest next update:     Sun 02 Feb 2025 12:37:37 +0000
Files and hashes:         1: 2qcqNlcmG79Z3227QPioGGxlFpI.roa (hash: qbUTCRlcqKPzKq90gra4FK63vHStZBENjOo32dX5Hlk=)
                          2: 3Aa6dmVQbsCNlwps-ejcEAQ-HU4.roa (hash: sGnqsvg1phPtgLARsTcd8XuWWme72rv1rIqYYx3nUZU=)
                          3: 50zx1jfC208ZFalFlUYtBfFhle8.roa (hash: OFlb5JU/sKUN61hDJpVuaNMZ5jZB+qBF36hhtKUH3a8=)
                          4: 7n-zgGf3x_tdaIBl4uVqqmvpCmw.roa (hash: b2rrUxelgYTHzvX3FIuVVR/u6iazLE2SL0iD0mmSAoU=)
                          5: G9jl2IJNj6jazAoLugfQrnexYa8.roa (hash: 6bgB3TLaS3I7Ei/CkLh06hEGHS0YyJe5UZ96Ct7OYUg=)
                          6: HJLao0Ft3inBDQCAe-x4z4QRlbs.roa (hash: BEVv5ICtcenMwtoJPR+RF4G42Q+R7L9IEQoxrO4fLTI=)
                          7: HQ5nF-8uIrZRa0glIGrXCkoCMD0.roa (hash: tXkRmjo+Jvq/33tnJe8iQwrOIdw0gpaEv+dPqHhDUBw=)
                          8: Lt3IZTFnCDRvQ01a2HcWh5z0A98.roa (hash: PnIYKaG4oNS69X9yf7/11MajaT4NSk6ZelS4QCowPDE=)
                          9: McWrn1P_AhEzX1qj_jddr-Y2BKg.roa (hash: qiWx8pf7qG0Ym3xCDWcYm+GgWAbQgiKFkar6Tge9N/E=)
                          10: RS8vbUSsMHMXXdC7JNTVF9czfvw.roa (hash: ZiBUQ3c7675TbB6fix171bNMcnBWMxmpRv8/zkprJec=)
                          11: RjI5z8as5ivXm3mp9UI3LcR-Fd4.roa (hash: C5J1VHBv/+k5UXYmBReeLQcjX9n98q5HiVGc8GB3OfM=)
                          12: VR97iJBeu02oVdxUhN5TsA1xw2I.roa (hash: ShfaWiTZD40+GpAKiOZkAaju+9nNgRgAPneni3Zalh8=)
                          13: WxD5R6oc1quYCsmFeBLq8pRAUVk.roa (hash: ZxHqq4rSaHZES1WZCdT7nIZ/WWFxBq2iIiGlEA3eRsw=)
                          14: YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa (hash: 6rcUVuisa/oi34VtMjH2NnPmIjx0focAi+hSJiLEKU8=)
                          15: _Bu-XLonE6EcinKV1Epg05bhlBA.roa (hash: RBQ6tYsjZ1bE28j6TRlRCUkyc/UPfp6g/psg4UYIcS4=)
                          16: bVzXs49CnuhX2nwcCP3WNqR9laQ.roa (hash: cQGSsfpTLve7voQaFyYFHQMu4t5NeRP3xFT0wGvVeto=)
                          17: cgTCY30qEIZmtWjdr_dXpuhy6g4.roa (hash: 299IsWcWuVCnPwCVvlSGV8Mro9P9xp6/X1miTNJTahA=)
                          18: d1Jp64JkN28IQGm6tTSdbVeLYBM.roa (hash: lw9ZjLZStbqIX0R/t+VWM1UiuE2WFy/pHPiTBvCN0tY=)
                          19: hPlgyhXkPRcqEdR6-1_fwlH7WNk.roa (hash: 3PDRidppAQKDg72HwCzHMTtfmxGVGbq7I0QEw/C8BZM=)
                          20: iwJ2OFrckQ1xq4ANviCGGhCmz4s.roa (hash: CcCKYK2z0S4PyBe69OEaTJYnnx3maGJumZCtuzJ2VBg=)
                          21: j48l77IqJ6kZlnH0rws_wrpI6-0.roa (hash: TAeRBVUesly5XWAtwoMhxEARhAVwyP05eJY1Oc9DIK4=)
                          22: r50N0nlSgnXOf4EjAzEchut8AkM.roa (hash: thhF6rS4/UpGtupRIsg8C1xJnRInq/svcs3HgZTEACc=)
                          23: zLVFQVOszs6FINM5B9VOVsXKmks.crl (hash: Ect2SRRzWTU1Jz8p6lbbx8sVOTcZ5F/uMV3A6JeYKL0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3327 (0xcff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Jan 31 12:37:37 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9F76E019DB14627EDDF86F6D2EAAE9BD0EB9D88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:36:6f:0a:b2:8a:95:22:aa:15:c7:66:54:
                    03:8e:a7:06:b5:49:08:1a:f1:47:9b:e2:3e:df:65:
                    7f:3f:12:ea:c3:84:47:3f:b2:41:b6:1a:22:66:66:
                    20:59:5d:7f:10:f7:ec:9a:6d:9b:c0:10:fd:4a:a1:
                    bc:cd:f3:8f:a1:5e:44:69:3b:26:1f:80:e7:c8:19:
                    db:d2:03:dd:8f:9b:cf:6d:f8:d9:a3:2b:7c:ff:bc:
                    6d:cb:12:89:93:28:33:34:8f:ed:4f:7b:6c:53:24:
                    38:0b:30:1f:b1:13:5b:a8:a5:13:c2:20:43:98:e6:
                    12:b1:17:e1:9b:19:93:c0:45:86:36:fb:cb:f6:07:
                    b2:c7:82:6a:08:7e:71:4b:da:ba:c6:e7:af:18:e9:
                    d7:b9:4f:33:f9:93:9e:98:76:9d:b6:ba:a8:49:41:
                    bb:41:98:28:b0:90:c4:a3:c2:dd:2d:92:34:b1:6f:
                    b4:93:f5:11:a2:12:e1:86:3e:27:6c:6b:93:d1:00:
                    90:69:fa:2f:a9:a5:2c:be:88:9c:ed:28:fc:28:85:
                    a1:8e:ab:45:36:3f:d5:50:57:00:d9:52:03:04:c6:
                    95:c2:76:a8:a6:a4:1a:49:bd:44:f2:e2:a9:6a:3c:
                    ac:ab:81:aa:3f:f3:48:b7:e6:e8:a8:ee:f9:9d:03:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:E0:19:DB:14:62:7E:DD:F8:6F:6D:2E:AA:E9:BD:0E:B9:D8:8C
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6a:44:aa:bd:ba:30:f4:bd:96:fc:bf:a8:cf:5c:48:9d:41:
         75:06:f2:6f:6e:6f:3c:9a:3d:29:2b:87:38:af:96:56:e5:bc:
         7a:72:ef:54:88:dd:47:48:c1:80:d9:2b:8a:cb:f2:d8:ae:39:
         e7:b5:9d:80:ca:05:6d:02:c3:4b:1c:41:76:ed:a0:91:5e:e5:
         99:56:7f:76:09:4e:c5:2e:50:26:f9:01:d0:a7:92:1c:ac:05:
         25:5f:cb:dc:2b:69:a4:a2:8d:bb:13:a7:08:60:bb:1b:0e:8e:
         e8:8c:3c:5f:5d:f2:13:ca:2c:9a:f9:46:5c:eb:a0:0a:94:83:
         23:c7:7f:af:97:61:4b:c3:57:44:df:ee:fa:ab:ee:41:72:2b:
         8e:a5:db:ce:44:cf:bc:c7:62:09:e0:a6:0a:9f:32:87:60:44:
         fc:d6:b5:ed:c0:8a:b3:4c:f7:71:c9:84:05:b2:79:27:6c:9d:
         9a:ed:2a:37:65:68:b3:e4:b7:50:40:bf:f5:4a:91:d7:a4:09:
         5a:a2:b4:62:6c:68:b0:22:ca:07:99:ed:0f:29:3a:46:a2:db:
         08:df:d3:cf:65:22:57:06:8f:42:b6:12:e4:1d:87:c8:c3:bf:
         26:98:e8:d2:b1:17:07:d4:4e:b2:02:38:61:44:68:54:0f:ee:
         e1:cf:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:52:53 2025 by rpki-client